55 Exec Search
Principal GRC Consultant | Cyber Risk Advisory
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Principal GRC Consultant | Cyber Risk Advisory
£70,000–£90,000 base salary + up to 10% bonus + benefits
Remote-first UK | Genuine flexibility | Technical leadership and influence
Lead complex client work. Develop the people around you. Help shape how great consulting is delivered.
You’ve established yourself as someone clients trust with difficult cyber risk decisions. You can lead engagements independently, challenge constructively and turn complex requirements into practical advice.
Now you’re ready for your experience to have a broader impact on client outcomes, the quality of the team’s work and the development of its services.
We’re partnering with a growing UK cyber security consultancy to appoint a Principal GRC Consultant to its expanding advisory team.
This role combines hands-on consulting with technical leadership. Alongside leading complex assignments, you’ll guide colleagues, strengthen delivery standards and contribute to how the practice develops.
Why consider this opportunity?
- Autonomy backed by trust. Take ownership of challenging engagements and use your judgement to shape the right approach for each client.
- Influence beyond your own projects. Contribute to delivery quality, consulting methods and the development of the team’s expertise.
- Varied, substantive work. Work across cyber risk, governance, assurance and implementation programmes, with different organisations and challenges.
- A genuinely flexible culture. Remote-first working, with occasional client and office travel.
- A collaborative team. Work alongside experienced security specialists who exchange ideas, share knowledge and support one another.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Where you’ll make an impact
- Lead complex engagements. Take responsibility for assignments involving competing priorities, multiple stakeholders and challenging risk decisions. Set the approach, guide delivery and provide clear recommendations.
- Provide senior advisory judgement. Build trusted client relationships and act as a point of escalation for complex GRC questions, helping stakeholders make informed, proportionate decisions.
- Strengthen delivery quality. Review colleagues’ work, offer constructive challenge and help ensure advice is consistent, practical and grounded in each client’s needs.
- Develop others. Coach consultants, share your expertise and help colleagues build their confidence in delivery and client advisory.
- Improve the practice. Contribute to methodologies, assessment approaches and service development, drawing on lessons from engagements and emerging client requirements.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The team’s work spans ISO 27001, Cyber Essentials, third-party risk, NIST, CAF, DORA, NIS2 and ISO 42001. You’ll bring depth in your core areas and the judgement to apply that expertise across varied assignments.
What you’ll bring
- A strong track record in client-facing GRC or cyber risk consulting, including leadership of complex engagements.
- Hands-on ISO 27001 implementation or auditing experience, alongside broader framework expertise.
- Experience contributing beyond your own assignments through quality review, mentoring, methodology development or service improvement.
- Credibility with senior stakeholders and confidence explaining risk in business terms.
- Sound judgement around engagement scope, resources, delivery quality and client expectations.
- A collaborative approach and a commitment to developing the capability of others.
- Relevant qualifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISM or CISA are welcome.
You may already be a Principal Consultant, or a Senior Consultant who has begun taking on these wider responsibilities and is ready to make them a central part of your role.
If you want your next move to combine challenging client work, influence across a team and genuine flexibility, apply now.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location