Join a fast-growing cybersecurity consultancy thats helping organisations strengthen their security posture and achieve compliance with leading frameworks such as ISO 27001, SOC 2, Cyber Essentials, and GDPR .
This is an exciting remote opportunity for a Information Security or GRC professional looking to take the next step into consulting. Youll gain hands-on experience working across multiple clients and industries, supported by senior consultants and a dedicated training and development programme.
What Youll Do: Deliver information security and compliance projects for small to mid-sized businesses.
Support clients with risk assessments, policy creation, internal audits, and certification readiness .
Collaborate with technical teams to identify control gaps and recommend practical improvements.
Communicate with stakeholders to explain frameworks and guide them through compliance journeys.
Stay up to date with emerging frameworks and regulations (e.g. DORA, NIST, NIS2). Essential Attributes:
Proven experience delivering cyber GRC consultancy and audit services, ideally across multiple frameworks.
Strong working knowledge of ISO27001 or SOC2.
Ability to quickly understand and apply new frameworks or regulatory requirements.
Exceptional problem-solving skills and the ability to think critically under pressure.
Excellent client-facing skills, including the ability to lead workshops and engage with C-suite stakeholders.
Desirable:
Exposure to frameworks such as GDPR, PCI-DSS, ISO22301, or NIST CSF.
Relevant certifications such as CISM, CISSP, ISO Lead Auditor.
Exposure to industry-specific compliance frameworks (e.g., financial services, healthcare
Why Join: Annual training and certification budget to support your development. A supportive, people-first culture where learning and collaboration are encouraged. Clear career progression into Senior Consultant or Information Security Manager roles. Competitive salary, annual bonus, private healthcare cash plan, and wellbeing benefits.
TPBN1_UKTJ