Job description

The Senior Consultant - GRC Risk Assessor will be responsible for conducting comprehensive cybersecurity risk assessments using the Client's risk management framework. The role includes identifying and analyzing external and internal threats to digital, physical, and infrastructure assets, assessing vulnerabilities, and developing mitigation plans through technical, procedural, and administrative controls. The consultant will evaluate vendors and contractors for cybersecurity compliance, assess RFPs and contractual terms, and deliver detailed documentation such as risk registers, security design reviews, and training materials. Proficiency in cloud security, container technologies such as Docker and Kubernetes, and a thorough understanding of both national (NCA) and international cybersecurity standards is essential. Strong communication skills are required for stakeholder engagement, knowledge transfer sessions, and report presentation.