Who you’ll be working with
Join a complex cyber security programme within a critical infrastructure environment, leading GRC and assurance activities across IT and OT.
What you’ll be doing
- Lead cyber security GRC assessments and assurance activities.
- Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF.
- Review security controls, policies, risk registers and supporting evidence.
- Identify control gaps, assess risks and develop prioritised remediation plans.
- Lead stakeholder workshops and present findings to senior audiences.
- Provide day-to-day leadership and quality assurance for assessment teams.
What we need
- Current PriCSP certification with an Audit and Assurance specialism – essential.
- Strong hands-on experience in cyber security GRC, audit or assurance.
- Experience conducting framework-based gap assessments and evaluating control effectiveness.
- Knowledge of NCSC CAF/eCAF or comparable assurance frameworks.
- Strong stakeholder management, reporting and leadership skills.
- CNI, utilities or other regulated-sector experience is desirable.
What’s in it for you?
£700–£795 per day, Inside IR35.
Initial 3-month contract, remote-first.
ASAP start, with interviews within 24 hours of CV submission.