Hays
Cyber GRC Controls SME

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber GRC Controls SME - NIST CSF 2.0, Controls Frameworks, Assurance
£Market Rate (Inside IR35)
Location: London / Hybrid
Contract Length: 8-10 Week Contract
My client is an instantly recognisable organisation seeking a Cyber GRC Controls SME to support a strategic cyber security controls and governance initiative. This role requires expertise in enterprise cyber control framework design, control libraries, control taxonomy, control measurement, and framework mapping. You'll be responsible for assessing and enhancing security controls, supporting governance activities, and ensuring alignment to industry best practice.
Key Requirements
- Strong background in cyber security, governance, risk and controls
- Experience designing and enhancing enterprise security control frameworks
- Proven experience developing and maintaining control libraries
- Strong understanding of control taxonomy, control objectives and control effectiveness measures
- Experience mapping controls to NIST CSF 2.0
- Knowledge of NIST 800-53 and/or ISF Standards of Good Practice
- Experience supporting audits, assurance reviews and regulatory requirements
- Ability to identify control gaps, assess effectiveness and drive improvements
- Excellent stakeholder management and communication skills
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Nice to Have
- CISSP, CISM or CRISC certification
- Experience within large enterprise or regulated environments
- Insurance sector experience
- Immediate availability


Get help with your application
Your very own career expert that helps elevate your application to the next level.
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.
Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location