GRC Consultant - #1684750

Role: GRC Consultant

Location: Isle of Man or Corsham

Reporting to: Information Security Officer (ISO)

Hours: 37.5 hours per week

Security clearance: Advantageous, not essential

This is a brilliant opportunity to join our growing team at CND. We are looking to bolster our internal team with a GRC Consultant. At CND, we pride ourselves on our unique culture focused on employee wellbeing. We ensure that our staff feel valued and are able to bring their best selves to work every day.

Key Responsibilities:

• Undertake GRC consultancy engagements as required


• Develop, implement, and maintain governance policies and procedures


• Identify, assess, and mitigate risks across the organisation


• Develop, implement, and maintain compliance policies and procedures


• Develop and deliver GRC training for employees via our LMS and verbal briefs


• Prepare and submit reports to senior management and framework bodies


• Undertake additional, relevant tasks, projects, and training as required in your role in support of the wider business

Essential Skills:

• Strong knowledge of governance, risk management, and compliance concepts


• Good understanding of industry standards, regulatory requirements, and frameworks (ISO, CSF, NIST, SOC2, Cyber Essentials etc)


• Ability to conduct risk assessments and develop risk mitigation strategies


• High standards of written and verbal communication, with excellent attention to detail


• Presentable and comfortable with client-facing interaction


• Currently, or capable of gaining and maintaining IASME assessor status