Banner Default Image
Back to job search

Security GRC Consultant

  • Location:

    City of London

  • Sector:

    Information Security

  • Job type:


  • Job functions:

    Information Security Project Manager, Security Risk, Security Analyst, Security Compliance

  • Salary:

    £350 - £400 per day + Outside IR35

  • Contact:

    Lauren Stutz

  • Contact email:

  • Job ref:


  • Published:

    10 days ago

  • Duration:

    3 Months

  • Expiry date:


  • Startdate:


Industry Body based in London are looking for a Security GRC Consultant for an initial 3 month contract to ensure controls and policies are in line with ISO27001 and mature their business continuity plan. This will be a mostly remote contract with the occasional visit to the London office once a month. This role will be outside IR35.


The Security GRC Consultant's deliverables will include:

  • Maturing the business continuity and incident response programme
  • Work with both the CISO and CTO to do a gap analysis of the current controls to see if they adhere to ISO27001
  • To amend the current policies to make sure they are in line with ISO27001
  • Program management of delivering Security engagements including producing detailed documentation for ISO27001/BCP
  • Test and evaluate security solutions and advise how they can be leveraged to address Security challenges.


The ideal consultant will have prior experience in:

  • Working in a Security GRC function and have prior experience of amending controls, policies and procedures
  • Has strong experience of running a gap analysis for ISO27001 controls and policies and business continuity.
  • Have worked in a Security Project and delivered documentation
  • Desirable to be ISO27001 Certified but not essential if you have proven experience of working with ISO27001.
  • Strong knowledge of Security controls, operations, systems and networks
  • Has worked on business continuity for an organisation

For more information please reach out to Lauren Stutz at La Fosse Associates