Security Consultant (GRC)
| Posting date: | 06 August 2025 |
|---|---|
| Salary: | Not specified |
| Additional salary information: | Competitive Salary Depending On Experience |
| Hours: | Full time |
| Closing date: | 05 September 2025 |
| Location: | London, UK |
| Remote working: | Hybrid - work remotely up to 2 days per week |
| Company: | NTT Data |
| Job type: | Permanent |
| Job reference: |
Summary
The team you'll be working with:
Security Consultant (GRC)
The team that you’ll be working with:
NTT DATA is one of the world’s largest global security service providers, partnering with some of the most recognized security technology brands. We’re looking for passionate, curious, and motivated individuals to join our team.
What you'll be doing:
What you'll be doing:
Using your background in Governance, Risk & Compliance, you will help our clients:
· Governance: directs, oversees, designs, implements or operates within the set of multi-disciplinary structures, policies, procedures, processes and controls implemented to manage cyber and information security at an enterprise level. Supporting an organisation’s immediate and future regulatory, legal, risk, environmental and operational requirements and ensuring compliance with those requirements.
· Policy and Procedure Management: directs, develops or maintains organisational cyber and information security policies, standards and processes, using recognised standards (e.g. the ISO/ IEC 27000 family, NIST CSF) where appropriate. Applies recognised cyber and information security standards and controls within an organisation, programme, project or operation. Applies relevant security classification.
· Risk Management: develops cyber and information security risk management strategies and controls, considering business needs, balancing technical, physical, procedural and personnel controls. Identifies and assesses information assets, threat specific information, business impacts, business benefits and costs to identify and assess potential vulnerabilities and risks.
· Data Privacy: directs, oversees, designs, implements, contributes to, or operates within the set of multi-disciplinary structures, policies, procedures, processes and controls to manage the protection of personal data, privacy and human rights, supporting regulatory, legal, risk, environmental and operational requirements, and ensuring compliance with those requirements. (e.g. GDPR, Data Protection).
· Internal Controls Oversight: Establish and monitor internal controls to safeguard data and assets, conducting regular reviews and audits.
· Stakeholder Engagement: Serve as a liaison, offering guidance and support to internal teams, external partners, and regulatory authorities. Providing remediation guidance and prepare management reports to track remediation activities.
· Continuous Improvement: Identify opportunities for process enhancements, driving initiatives to bolster governance framework and security posture. Assess and test the effectiveness of security controls, and document the compliance levels to identify risks and control gaps.
What experience you'll bring:
What experience you’ll bring:
It starts with amazing people, challenging projects and a work environment that supports the creation of tangible solutions that make an impact. You will need to have a broad experience of security risk management and have evidence of experience in a number of the following fields of expertise:
· 3+ years' varied experience in information security, data protection, risk management, enterprise IT, legal or (relevant) compliance roles.
· Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT compliance.
· Hands-on experience building credibility with external stakeholders, including enterprise clients, critical system vendors, certification auditors and regulatory bodies.
· Proven leadership skills with the ability to guide and mentor teams, as well as influence and collaborate with senior stakeholders in a similar GRC, security, or risk management role.
· A hands-on approach with the ability to balance strategic oversight with direct involvement in security tasks.
· Excellent communication skills, with the ability to present complex information clearly and effectively to non-technical stakeholders.
· The ability to explain complex topics to a diverse range of audiences.
· Strong attention to detail and the ability to deliver high quality work.
· A valid right to work in the UK.
· Eligible to obtain UK SC clearance.
· CISA, CRISC, CISM or CISSP certification advantageous
Security Consultant (GRC)
The team that you’ll be working with:
NTT DATA is one of the world’s largest global security service providers, partnering with some of the most recognized security technology brands. We’re looking for passionate, curious, and motivated individuals to join our team.
What you'll be doing:
What you'll be doing:
Using your background in Governance, Risk & Compliance, you will help our clients:
· Governance: directs, oversees, designs, implements or operates within the set of multi-disciplinary structures, policies, procedures, processes and controls implemented to manage cyber and information security at an enterprise level. Supporting an organisation’s immediate and future regulatory, legal, risk, environmental and operational requirements and ensuring compliance with those requirements.
· Policy and Procedure Management: directs, develops or maintains organisational cyber and information security policies, standards and processes, using recognised standards (e.g. the ISO/ IEC 27000 family, NIST CSF) where appropriate. Applies recognised cyber and information security standards and controls within an organisation, programme, project or operation. Applies relevant security classification.
· Risk Management: develops cyber and information security risk management strategies and controls, considering business needs, balancing technical, physical, procedural and personnel controls. Identifies and assesses information assets, threat specific information, business impacts, business benefits and costs to identify and assess potential vulnerabilities and risks.
· Data Privacy: directs, oversees, designs, implements, contributes to, or operates within the set of multi-disciplinary structures, policies, procedures, processes and controls to manage the protection of personal data, privacy and human rights, supporting regulatory, legal, risk, environmental and operational requirements, and ensuring compliance with those requirements. (e.g. GDPR, Data Protection).
· Internal Controls Oversight: Establish and monitor internal controls to safeguard data and assets, conducting regular reviews and audits.
· Stakeholder Engagement: Serve as a liaison, offering guidance and support to internal teams, external partners, and regulatory authorities. Providing remediation guidance and prepare management reports to track remediation activities.
· Continuous Improvement: Identify opportunities for process enhancements, driving initiatives to bolster governance framework and security posture. Assess and test the effectiveness of security controls, and document the compliance levels to identify risks and control gaps.
What experience you'll bring:
What experience you’ll bring:
It starts with amazing people, challenging projects and a work environment that supports the creation of tangible solutions that make an impact. You will need to have a broad experience of security risk management and have evidence of experience in a number of the following fields of expertise:
· 3+ years' varied experience in information security, data protection, risk management, enterprise IT, legal or (relevant) compliance roles.
· Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT compliance.
· Hands-on experience building credibility with external stakeholders, including enterprise clients, critical system vendors, certification auditors and regulatory bodies.
· Proven leadership skills with the ability to guide and mentor teams, as well as influence and collaborate with senior stakeholders in a similar GRC, security, or risk management role.
· A hands-on approach with the ability to balance strategic oversight with direct involvement in security tasks.
· Excellent communication skills, with the ability to present complex information clearly and effectively to non-technical stakeholders.
· The ability to explain complex topics to a diverse range of audiences.
· Strong attention to detail and the ability to deliver high quality work.
· A valid right to work in the UK.
· Eligible to obtain UK SC clearance.
· CISA, CRISC, CISM or CISSP certification advantageous
Proud member of the Disability Confident employer scheme
Disability Confident
About Disability Confident
A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the job as defined by the employer. It is important to note that in certain recruitment situations such as high-volume, seasonal and high-peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non-disabled people. For more details please go to Disability Confident.