Principal GRC Consultant - Cyber Risk Advisory

Principal GRC Consultant | Cyber Risk Advisory £70,000–£90,000 base salary + up to 10% bonus +benefits Remote-first UK | Genuine flexibility | Technical leadership and influence Lead complex client work. Develop the people around you. Help shape how great consulting is delivered. You've established yourself as someone clients trust with difficult cyber risk decisions. You can lead engagements independently, challenge constructively and turn complex requirements into practical advice. Now you're ready for your experience to have a broader impact on client outcomes, the quality of the team's work and the development of its services. We're partnering with a growing UK cyber security consultancy to appoint a Principal GRC Consultant to its expanding advisory team. This role combines hands-on consulting with technical leadership. Alongside leading complex assignments, you'll guide colleagues, strengthen delivery standards and contribute to how the practice develops. Why consider this opportunity?

• Autonomy backed by trust. Take ownership of challenging engagements and use your judgement to shape the right approach for each client.
• Influence beyond your own projects. Contribute to delivery quality, consulting methods and the development of the team's expertise.
• Varied, substantive work. Work across cyber risk, governance, assurance and implementation programmes, with different organisations and challenges.
• A genuinely flexible culture. Remote-first working, with occasional client and office travel.
• A collaborative team. Work alongside experienced security specialists who exchange ideas, share knowledge and support one another. Where you'll make an impact Lead complex engagements. Take responsibility for assignments involving competing priorities, multiple stakeholders and challenging risk decisions. Set the approach, guide delivery and provide clear recommendations. Provide senior advisory judgement. Build trusted client relationships and act as a point of escalation for complex GRC questions, helping stakeholders make informed, proportionate decisions. Strengthen delivery quality. Review colleagues' work, offer constructive challenge and help ensure advice is consistent, practical and grounded in each client's needs. Develop others. Coach consultants, share your expertise and help colleagues build their confidence in delivery and client advisory. Improve the practice. Contribute to methodologies, assessment approaches and service development, drawing on lessons from engagements and emerging client requirements. The team's work spans ISO 27001, Cyber Essentials, third-party risk, NIST, CAF, DORA, NIS2 and ISO 42001. You'll bring depth in your core areas and the judgement to apply that expertise across varied assignments. What you'll bring
• A strong track record in client-facing GRC or cyber risk consulting, including leadership of complex engagements.
• Hands-on ISO 27001 implementation or auditing experience, alongside broader framework expertise.
• Experience contributing beyond your own assignments through quality review, mentoring, methodology development or service improvement.
• Credibility with senior stakeholders and confidence explaining risk in business terms.
• Sound judgement around engagement scope, resources, delivery quality and client expectations.
• A collaborative approach and a commitment to developing the capability of others. Relevant qualifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISM or CISA are welcome. You may already be a Principal Consultant, or a Senior Consultant who has begun taking on these wider responsibilities and is ready to make them a central part of your role. If you want your next move to combine challenging client work, influence across a team and genuine flexibility, apply now