Senior GRC Consultant

About the role

The Senior GRC Consultant provides expert guidance to ensure the organisation meets regulatory, legal and policy requirements. You will design, implement and continuously improve governance, risk and compliance programmes while translating complex regulations into practical controls and processes.

Key responsibilities

• Assess organisational compliance with applicable regulations and standards.
• Design, implement and enhance GRC frameworks, policies and control environments.
• Conduct compliance risk assessments, gap analyses and control testing.
• Map regulatory requirements to internal controls and processes.
• Support internal and external audits, regulatory examinations and supervisory reviews.
• Develop and maintain compliance policies, standards, procedures and governance documentation.
• Advise senior stakeholders on regulatory change management and emerging compliance requirements.
• Facilitate risk and control self‑assessments and compliance workshops.
• Prepare executive‑level reports, dashboards and regulatory submissions.
• Provide training and awareness sessions on compliance and risk management topics.

Required profile

• Proven experience in governance, risk and compliance or information security roles.
• Strong knowledge of ISO 27001 and Information Security Management Systems.
• Ability to work with legal, audit, IT, cybersecurity and business teams.
• Excellent analytical skills to translate regulations into actionable controls.
• Experience supporting audits, regulatory examinations and third‑party assessments.

Required skills

• ISO 27001 implementation and maintenance.
• Information Security Management System (ISMS) expertise.
• Risk assessment and treatment planning.
• Compliance monitoring and gap analysis.
• Audit support and evidence preparation.
• Policy development and regulatory mapping.
• Third‑party security assessment.