Cybersecurity GRC Consultant

About the role

Peer Security is seeking a Cybersecurity GRC Consultant to lead governance, risk, and compliance initiatives for its clients. This hands‑on position blends deep cybersecurity knowledge with practical experience in risk assessments, policy development, and regulatory frameworks.

Key responsibilities

• Conduct end‑to‑end information security risk assessments, including identification, analysis, prioritisation and remediation planning.
• Develop, review and maintain security policies, procedures, standards and guidelines across areas such as patch management, vulnerability management, access control, incident response, change management, backup, business continuity and disaster recovery.
• Perform gap assessments against frameworks and regulations (ISO 27001, SOC 2, GDPR, NIST) and lead compliance processes.
• Translate regulatory and security requirements into technical and organisational controls.
• Support clients in audit preparation, certification readiness and security assessments.
• Communicate risks, gaps and recommendations to both technical and non‑technical stakeholders.

Required profile

• Minimum 3 years of hands‑on experience in cybersecurity, with a focus on GRC, risk management and compliance.
• Proven experience conducting full‑cycle security risk assessments.
• Experience writing and implementing information security policies and procedures.
• Practical knowledge of ISO 27001, SOC 2, GDPR, NIST and related compliance projects.

Required skills

• ISO 27001
• SOC 2
• GDPR
• NIST framework
• Patch Management
• Vulnerability Management
• Access Control
• Incident Response
• Change Management
• Backup and Disaster Recovery
• Risk Assessment methodology