Senior Technical Consultant - Security GRC

About the role

You will be sold to clients as a credible authority on security GRC. You diagnose program maturity, design target-state operating models, quantify risk in business terms, and leave behind frameworks, artifacts, and decisions the client can run without you. You must be highly proficient in English. Client deliverables, findings, board packs, statements of work, and live workshops are held to an executive and audit standard.

What you'll do

• Client consulting and engagement leadership
• Shape problem statements, engagement scope, assumptions, and success criteria with the client sponsor and the account team
• Build workplans, RAID logs, and stakeholder maps; keep delivery on quality even when the client’s evidence or ownership is incomplete
• Facilitate workshops with CISOs, control owners, internal audit, legal, procurement, and business executives. Drive decisions, not status meetings
• Manage resistance, conflicting frameworks, and “we already have a policy” arguments without losing the room or the facts

What you need

• 5–9 years in cybersecurity
• Risk management
• Learning and development
• Internal audit
• ISO 27001
• Internal controls
• Any graduate