Senior Cyber Risk & Compliance Consultant – GRA

FSP

Senior Cyber Risk & Compliance Consultant advising clients on ISO compliance and security. Leading engagements within the Governance, Risk and Assurance team in the UK.

Posted 6/14/2026full-timeGlasgow • 🇬🇧 United KingdomSeniorWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead cyber governance, risk and compliance engagements
Engage with clients to understand their wider threat landscape and business context
Design, review and advise on the implementation and adoption of information security policies
Lead cyber and third-party risk assessments
Identify control gaps, document findings, and track remediation activities
Produce clear, concise risk and compliance reports for executive and C-suite stakeholders
Contribute to thought leadership and continuous improvement

Requirements

What you’ll need

Extensive experience of designing, leading and delivering cyber governance, risk and assurance outcomes
Strong knowledge of recognised cyber security frameworks and standards
Experience in applying UK Government security and assurance frameworks
Confident communicator able to clearly articulate cyber risk
Hold a recognised ISO/IEC 27001 Lead Implementer or Lead Auditor certification
Hold or be working towards Principal or Chartered Cyber Security Professional (ChCSP) status
Eligible to work in the UK and able to obtain and maintain UK security clearances

Benefits

Comp & perks

A collaborative and supportive environment
Tools and opportunity to do work you can be proud of
A chance to work alongside some of the best people in the industry
Hybrid working – empowering smart choices about when and where to work
Industry leading coaching and mentoring
Excellent benefits package

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cyber governancerisk assessmentscompliance engagementsinformation security policiescontrol gap identificationrisk and compliance reportingcyber security frameworksUK Government security frameworksrisk managementremediation activities

Soft Skills

confident communicatorarticulation of cyber riskthought leadershipcontinuous improvement

Certifications

ISO/IEC 27001 Lead ImplementerISO/IEC 27001 Lead AuditorPrincipal Cyber Security ProfessionalChartered Cyber Security Professional