Cyber Security Consultant- GRC & Controls Testing

Cyber Security Consultant- GRC & Controls Testing

Posted Today by Barclay Simpson Recruitment

£600 Per day
Inside
Hybrid
Hybrid-WFH/London 2 day a week, UK

Summary: The role involves appointing two Cyber Security consultants for a financial services client, focusing on hands-on GRC and information security expertise. The consultants will deliver security controls testing and support the internal audit function with high-quality cyber assurance work. Ideal candidates will have experience working within formal audit frameworks and producing clear evidence. Strong practical experience in cybersecurity is essential for success in this position.

Key Responsibilities:

  • Perform detailed security controls testing
  • Assess alignment to recognised security frameworks (NIST, CIS, etc.)
  • Document findings and produce robust, defensible evidence
  • Contribute to high-quality reporting with clear, structured written output
  • Engage with key stakeholders across technology and security functions

Key Skills:

  • Strong practical experience in cybersecurity, information security, and GRC
  • Experience conducting cyber security controls testing within structured audit frameworks
  • Solid understanding of NIST, CIS and related security standards
  • Proven background in security controls testing
  • Strong written communication skills, with the ability to produce clear and defensible documentation
  • Comfortable operating autonomously within an audit environment

Salary (Rate): £600 per day

City: London

Country: UK

Working Arrangements: hybrid

IR35 Status: inside IR35

Seniority Level: Mid-Level

Industry: IT

Detailed Description From Employer:

We are supporting a financial services client in appointing two Cyber Security consultants with strong hands-on GRC and information security expertise. These roles will focus on delivering security controls testing activity on the ground, supporting the wider internal audit function with high-quality cyber assurance work.

This opportunity is well-suited to experienced cyber security professionals who are confident working within formal audit frameworks and producing clear, defensible evidence.

The Role

  • Perform detailed security controls testing

  • Assess alignment to recognised security frameworks (NIST, CIS, etc.)

  • Document findings and produce robust, defensible evidence

  • Contribute to high-quality reporting with clear, structured written output

  • Engage with key stakeholders across technology and security functions

Key Experience & Skills

  • Strong practical experience in cybersecurity, information security, and GRC

  • Experience conducting cyber security controls testing within structured audit frameworks

  • Solid understanding of NIST, CIS and related security standards

  • Proven background in security controls testing

  • Strong written communication skills, with the ability to produce clear and defensible documentation

  • Comfortable operating autonomously within an audit environment

Please note: This is not a ITGC type position; You must have strong experience across both cyber security and security controls testing.