Security Risk Consultant

Cyber Security Risk and Compliance Framework Consultant (Contract)Duration: 12 monthsIR35: In scopeRate: 600 per dayLocation: 60% on site per month in either Bristol or LondonWe''re looking for an experienced Cyber Security Risk and GRC Consultant to help transform how a large, complex organisation measures, manages, and communicates cyber risk.This is a high-impact, business-critical role focused on building a clear, practical, and transparent approach to security risk - with a strong emphasis on compliance frameworks, measurable controls, and decision-ready reporting for governance boards.Define and implement meaningful cyber security risk metrics aligned to compliance frameworks (e.g. national and international standards)Establish a robust, repeatable method to measure performance against these frameworks - turning compliance into something measurable, not theoreticalCreate clear, transparent data that shows:Current risk exposurePerformance against controlsTrends and direction of travel over timeDesign concise, plain-English reporting for senior stakeholders and governance boardsNo jargon - just clear insight, impact, and actionMap compliance frameworks to real business risks, bridging the gap between:Technical controlsGovernance requirementsOperational realityBuild practical reporting artefacts, dashboards, and templates to improve visibility and consistencyWork closely with stakeholders to ensure outputs are:CredibleUsableAligned to executive decision-making ..... full job details .....