Hays
Information Security & GRC Consultant
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Join a leading telecommunications company as an Information Security & GRC Consultant and play a key role in strengthening security governance, compliance, resilience, and M&A security due diligence across a complex enterprise environment.
Job Overview
This is a hands-on opportunity for experienced security professionals who can take ownership, drive delivery, and implement practical solutions rather than simply providing recommendations. You'll support strategic initiatives spanning ISO 27001, SOC 2, business continuity, third-party risk management, and acquisition-related security assessments.
Contract Details
- Location: London or Bradford (hybrid - 2 days per week onsite)
- Rate: £500 per day (inside IR35)
- Contract Length: 6 months (with visibility to extend or go permanent afterwards)
Key Responsibilities
- Conduct cyber security risk assessments and security due diligence activities for mergers and acquisitions, identifying risks, remediation requirements and integration priorities.
- Assess, maintain and enhance security frameworks aligned to ISO 27001 and SOC 2 Type II standards.
- Develop and maintain security policies, standards, procedures, risk registers and remediation plans.
- Lead and support business continuity and disaster recovery activities, including Business Impact Assessments (BIAs), recovery planning and resilience testing.
- Perform third-party and supplier security assessments, ensuring security and continuity requirements are met across the supply chain.
- Prepare stakeholders and control owners for internal and external compliance audits, gathering evidence and driving audit readiness.
- Deliver security awareness initiatives and provide clear, practical guidance to both technical and non-technical stakeholders.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Requirements
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Proven hands-on experience implementing, managing or auditing ISO 27001 and SOC 2 compliance programmes.
- Demonstrable experience conducting M&A security due diligence and assessing cybersecurity risks in acquisition environments.
- Strong background in security governance, risk management, compliance and control remediation.
- Experience building, improving or operationalising security frameworks within a complex organisation.
- Excellent stakeholder management skills with the ability to influence, challenge and drive actions through to completion.
- Experience with business continuity, disaster recovery or operational resilience programmes is highly desirable.
Ideal backgrounds
- Information Security Manager
- Information Security Officer
- Security Governance Lead
- Security Compliance Manager
- GRC Consultant
- Security Risk Consultant
Start Date
- ASAP
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location