Intaso
GRC Cyber Consultant
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
GRC Cyber Security Consultant
Location: Bristol (Hybrid – 2–3 days per week onsite)
Employment Type: Permanent
Salary: £55,000 to £75,000
The Opportunity
Intaso is partnering with an established cyber security consultancy to recruit an experienced GRC Cyber Security Consultant.
This is an opportunity to join a specialist consultancy delivering cyber security advisory, risk management and assurance services to organisations operating across complex and highly regulated environments.
You'll work closely with clients to strengthen their security posture, navigate evolving regulatory requirements and develop practical strategies to manage cyber risk.
The role offers a blend of strategic advisory, technical security assurance and hands-on GRC delivery, making it ideal for someone who enjoys solving complex security challenges and engaging with senior stakeholders.
Key Responsibilities
- Deliver cyber security governance, risk and compliance consultancy across a diverse client portfolio.
- Conduct cyber risk assessments, security gap analyses and compliance reviews, identifying vulnerabilities and recommending practical remediation strategies.
- Advise organisations on security frameworks and regulatory requirements, including ISO 27001, NIST CSF, NCSC CAF, IEC 62443 and NIS2.
- Support the development and implementation of security governance frameworks, policies and risk management processes.
- Provide guidance on Secure by Design principles, Zero Trust architecture and security controls.
- Assess security architectures and technical environments to identify risks and improve organisational resilience.
- Support clients with emerging cyber security regulations, including the Cyber Resilience Act and AI governance requirements.
- Produce clear, actionable risk reports, assurance documentation and remediation roadmaps.
- Engage with technical teams, senior stakeholders and business leaders to communicate cyber risks and security recommendations.
- Manage multiple consulting engagements, ensuring high-quality delivery and strong client relationships.
- Contribute to the development of cyber security services, technical proposals and client-facing thought leadership.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What We're Looking For
- Approximately 5+ years' experience within cyber security consulting, governance, risk management or technical security leadership.
- Strong understanding of cyber security governance, risk assessment methodologies and regulatory compliance.
- Experience working with recognised frameworks such as ISO 27001, NIST, NCSC CAF or IEC 62443.
- Ability to assess security risks and translate technical findings into clear business recommendations.
- Experience delivering security assessments, compliance reviews or assurance activities.
- Strong stakeholder management, communication and consulting skills.
- Comfortable managing multiple projects and working independently in client-facing environments.
- An understanding of emerging technologies, AI security risks and evolving regulatory requirements.
- At least one relevant industry certification, such as CISSP, CISM, CISA, CCSP or ISO 27001.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Security Clearance: Candidates must currently hold, or be eligible to obtain, UK Government Security Clearance.
A full UK driving licence is required.
Why Consider This Opportunity?
- Work on varied and technically challenging cyber security projects.
- Gain exposure to organisations operating in complex and regulated industries.
- Combine strategic security advisory with practical risk and compliance delivery.
- Work alongside experienced cyber security specialists.
- Develop your expertise across established and emerging cyber security regulations.
- Join a consultancy offering opportunities for professional development and career progression.
Interested?
If you're an experienced cyber security professional with a strong background in GRC and enjoy working directly with clients to solve complex security challenges, we'd be keen to hear from you.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location