Experis UK
Cyber Security GRC Consultant
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber GRC Consultant – 12-Month Contract
Our client, a global manufacturer of advanced technology systems used across critical infrastructure and other regulated sectors, is seeking a Cyber GRC Consultant for a 12-month contract.
You will strengthen cyber governance, risk and compliance across the organisation's products and operations, with a particular focus on the EU Cyber Resilience Act (CRA), the NIS2 Directive and IEC 62443. The role suits a consultant who can turn regulatory requirements into practical controls, evidence and roadmaps that engineering and business teams can deliver.
Key responsibilities:
- Lead gap assessments against the Cyber Resilience Act, NIS2 and IEC 62443, and deliver prioritised compliance roadmaps.
- Embed secure-by-design and vulnerability handling requirements across the product lifecycle, working with product security and engineering teams.
- Develop and maintain cyber governance frameworks, policies, standards and control libraries.
- Own cyber risk assessments, risk registers and remediation tracking through to closure.
- Build audit-ready evidence and support internal audits, certifications and customer assurance requests.
- Assess third-party and supply-chain security risk in line with regulatory expectations.
- Report compliance status, risk and progress to senior leadership and governance forums.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential
- Proven cyber GRC experience in a regulated or manufacturing environment.
- Working knowledge of the EU Cyber Resilience Act and NIS2, including how they apply to products and essential services.
- Knowledge of IEC 62443 and OT/industrial security concepts, such as zones and conduits, security levels and secure product development.
- Experience with frameworks such as ISO 27001, NIST CSF or NCSC CAF.
- Strong stakeholder skills, with the ability to explain risk and regulation to technical and non-technical audiences.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable
- Product security or embedded systems experience.
- Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer/Auditor.
- Ability to obtain or hold UK security clearance.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London