Jacobs
Lead Cybersecurity GRC Consultant
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery, and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.
Your impact
Join us at a pivotal moment as we strengthen cyber governance, risk, and compliance across one of the UK's most significant infrastructure programmes.
This is an opportunity to shape and lead a modern Cyber GRC capability from the ground up. You'll play a critical role in ensuring cyber risks are effectively understood, managed, and communicated, helping senior leaders make informed decisions that support successful project delivery.
As the dedicated Cyber GRC professional supporting this team and programme, you'll have the autonomy to create meaningful change, influence stakeholders across multiple disciplines, and establish scalable approaches that could be adopted more broadly across Jacobs. For the right person, this role offers the chance to make a visible impact today while helping shape the future direction of Cyber GRC across major programmes.
What You'll Do
As Lead Cyber Security GRC Consultant, you'll be responsible for developing and embedding effective governance, risk, and compliance practices across a complex project environment.
- Working closely with cyber, IT, digital, delivery, and project teams, you'll ensure cyber risks are identified, assessed, and managed effectively while building stronger links between cyber risk and wider programme risk management processes.
- Lead the development and implementation of policies, standards, controls, and assurance activities, helping to transform existing manual processes into streamlined, digitally enabled ways of working.
- Provide clear, evidence-based reporting that translates technical and cyber risks into meaningful insights for senior stakeholders and decision-makers.
This is a hands-on consultancy role requiring a practical approach, strong stakeholder engagement skills, and the ability to drive outcomes through influence rather than direct authority.
Here's what you'll need
We're looking for an experienced Cyber GRC professional who can operate independently and confidently within a complex environment.
You'll bring:
- Proven experience delivering end-to-end cyber security or IT security governance, risk, and compliance activities.
- Strong experience conducting and managing cyber risk assessments, remediation activities, and senior-level risk reporting.
- Experience creating and implementing cyber policies, standards, frameworks, and governance processes.
- Knowledge of recognised security and risk frameworks such as ISO 27001, NIST, NCSC CAF, Government Security Standards, or equivalent.
- The ability to communicate complex cyber risks clearly to both technical and non-technical audiences.
- A proactive, delivery-focused mindset with the confidence to challenge constructively, remove barriers, and work autonomously.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Experience with:
- Microsoft Azure
- Microsoft 365
- Operational technology (OT) environments
- Government projects
- Critical national infrastructure
would be beneficial.
At Jacobs, we deliver solutions that matter. You'll be trusted to take ownership, encouraged to challenge constructively, and supported to create meaningful change. This is a unique opportunity to build and shape a Cyber GRC capability, work on a high-profile infrastructure programme, and influence how cyber risk is managed at scale.
If you're looking for a role where you can make a lasting impact while continuing to grow your career, we'd love to hear from you.
Other Key Info
- This is a full-time, permanent role, UK based, hybrid (2-3 days/week - office/site) aligned to a local Jacobs office, with business travel to support client and business requirements.
- Full-time employment at Jacobs is based on a 40-hour working week. We place a strong emphasis on work-life balance and flexibility, and flexi-time is available.
- All Jacobs employees will require a BPSS check as part of the hiring and onboarding process. This role will be subject to UK Security Vetting at SC (security check) level. Applicants must be eligible and willing to undergo the appropriate security clearance process, if not already cleared. Any offer of employment will be conditional upon satisfactory completion of the relevant clearance process. More info re vetting, here.
- We offer an excellent and wide range of employee benefits, including comprehensive Health Cover, Life Assurance, Income Protection, holiday buy/sell scheme, and a variety of wellbeing, family, parental, and fertility support offerings, along with an enhanced contribution pension scheme.
#DigitalUKI
More company details and info below
Joining Jacobs not only connects you locally but globally. Our values stand on a foundation of safety, integrity, inclusion, and belonging. We put people at the heart of our business, and we truly believe that by supporting one another through our culture of caring, we all succeed. We value positive mental health and a sense of belonging for all employees.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
With safety and flexibility always top of mind, we’ve gone beyond traditional ways of working so you have the support, means, and space to maximize your potential. You’ll uncover flexible working arrangements, benefits, and opportunities, from well-being benefits to our global giving and volunteering program, to exploring new and inventive ways to help our clients make the world a better place. No matter what drives you, you’ll discover how you can cultivate, nurture, and achieve your goals – all at a single global company. Find out more about life at Jacobs.
We aim to embed inclusion and belonging in everything we do. We know that if we are inclusive, we’re more connected and creative. We accept people for who they are, and we champion the richness of different perspectives, lived experiences, and backgrounds in the workplace, as a source of learning and innovation. We are committed to building vibrant communities within Jacobs, including through our Jacobs Employee Networks, Communities of Practice, and our Find Your Community initiatives, allowing every employee to find connection, purpose, and belonging. Find out more about our Jacobs Employee Networks here.
Jacobs partners with VERCIDA to help us attract and retain talent from a wide range of backgrounds. For greater online accessibility, please visit https://www.vercida.com/uk/employers/jacobs to view and access our roles.
As a disability confident employer, we will interview disabled candidates who best meet the criteria. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role.
We value collaboration and believe that in-person interactions are crucial for both our culture and client delivery. We empower employees with our hybrid working policy, allowing them to split their work week between Jacobs offices/projects and remote locations, enabling them to deliver their best work.
Your application experience is important to us, and we’re keen to adapt to make every interaction even better. If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team via Careers Support.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London