Home
London
Ict security engineer
GRC Security Consultant

GRC Security Consultant

Harnham - Data & Analytics Recruitment

Posted 11 days ago, valid for 23 days

London, Greater London EC1R 0WX

£80,000 - £96,000 per annum

Full Time

In order to submit this application, a Reed account will be created for you. As such, in addition to applying for this job, you will be signed up to all Reed’s services as part of the process. By submitting this application, you agree to Reed’s Terms and Conditions and acknowledge that your personal data will be transferred to Reed and processed by them in accordance with their Privacy Policy.

Sonic Summary

The GRC Security Consultant (ISO 27001 Specialist) position is a 3-month remote contract role outside IR35.
The consultant will focus on updating the client's ISO 27001 framework from the 2013 version to the 2022 version through gap analysis and control implementation.
Candidates should have proven experience in ISO 27001 implementation and audits, along with a strong understanding of the differences between the two versions.
Exceptional documentation, policy-writing skills, and stakeholder engagement capabilities are essential for this role.
The salary for this position is competitive, and candidates should ideally have several years of relevant experience.

Job Title: GRC Security Consultant (ISO 27001 Specialist)

Contract Duration: 3 MonthsLocation: RemoteIR35: Outside IR35

Role Overview

We are seeking an experienced GRC Security Consultant to support a project updating the client's ISO 27001 framework from the 2013 version to the 2022 version. You will conduct a comprehensive gap analysis, implement the required controls, and ensure all documentation aligns with the updated standard. This role requires deep knowledge of ISO 27001 and a hands-on approach to governance, risk, and compliance.

Key Responsibilities

Perform a detailed gap analysis between ISO 27001:2013 and ISO 27001:2022.
Design and implement required controls to achieve compliance with the updated standard.
Update and create all necessary policies, procedures, and documentation to reflect ISO 27001:2022 requirements.
Ensure the Information Security Management System (ISMS) is fully aligned with the latest standard.
Collaborate with stakeholders to drive compliance and best practices.

Key Skills and Requirements

Proven experience in ISO 27001 implementation and audits.
Strong understanding of the differences between ISO 27001:2013 and ISO 27001:2022.
Hands-on experience conducting gap analyses and implementing controls.
Exceptional documentation and policy-writing skills.
Strong communication and stakeholder engagement capabilities.
ISO 27001 Lead Implementer or Auditor certification (highly desirable).
CISSP, CISM, or CRISC certifications (a plus).

Apply now in a few quick clicks

GRC Security Consultant

Security Architect - Government

Security Architect

IAM Security Architect/SME