Security Consultant - Governance Risk Compliance

What You Will Do

• Plan, lead and deliver GRC engagements for IT, OT and CII environments across a broad range of recognised security frameworks, standards, and regulatory requirements (CSA’s CCoP and SBD Framework, Singapore’s Cyber Trust Mark, MAS TRMG, NIST CSF, ISO 27001, ISO 42001, Risk Assessments, PCI DSS Assessments/Consultancy).
• Identify, assess, analyse and document cybersecurity risks through structured risk assessments, maintaining risk registers that include risk identification, evaluation, treatment plans, ownership and tracking.
• Support clients in achieving regulatory compliance and certification readiness through pre-assessment reviews, remediation validation, audit preparation, and coordination with certification bodies, external auditors, or regulators.
• Produce clear, concise and well-reasoned reports that demonstrate technical accuracy, commercial awareness and actionable recommendations to both technical stakeholders and senior management, while incorporating feedback from internal quality assurance reviews to continuously improve deliverable quality.
• Deliver professional, consultative engagements across a diverse range of critical infrastructure including aviation, energy and power, financial services, government, transportation, maritime and public utilities.
• Support business development and pre-sales activities by providing technical input into proposals, defining engagement scope, identifying assumptions and dependencies, estimating effort, and contributing to scope estimates alongside Account Managers.
• Contribute to the continuous improvement of LRQA's consulting methodologies, templates, tools and knowledge repositories to enhance engagement quality, efficiency and consistency.
• Be a team player and collaborate effectively with colleagues across GRC and other technical practices to ensure successful project delivery, mentor and coach fellow consultants, knowledge sharing and a consistent client experience.