GRC Consultant

GRC Consultant

Role Summary:

Award winning Security Consultancy is looking to take on a GRC Consultant to take ownership of the delivery of software projects. This includes documenting technical requirements, gathering and reviewing sessions with customers and managing the implementation and delivery of the GRC software to specific customer requirements.

The suitable candidate will cover all aspects of the implementation including:
Scope definition, requirement gathering, workshops, configuration, data migration and user training.

You must be familiar and work with all modules of GRC Software including the following:
Risk, Compliance, Governance, Audit, Vendor Management, Incident Management, Reporting and Dashboards, and Business Intelligence.

At the completion of a software sale, the Consultant will be involved with setting up timeframes of how and when the software solutions will be delivered.

As the GRC software expert, the role requires extensive knowledge and experience of the implementation of Cyber Security related Governance, Risk and Compliance programmes in the industry.

Role Responsibilities:

• Supporting the implementation of customer requirements, through the GRC Cyber Management Platform.
• Configuring the GRC Cyber Management software to deliver specified solutions
• Understand and deliver the services that have been agreed through the sales process.
• Document detailed business requirements.
• Defining the scope of the implementation
• Provide user training
• Ensure that the reporting and analysis output from GRC meet customer requirements.
• Create project plans to monitor and control the implementation and delivery of GRC
• Monitor customer progress during initial deployment of the GRC Software

This is a field based role, and therefore, extensive UK travel will be required.

The following skills are required:

• Proven experience with GRC software Cyber Management Platforms, especially relating to successful implementation and delivery.
• Demonstrable experience of implementing and delivering software solutions.
• Knowledge of the software development processes and life cycle.
• Knowledge of industry standards such as ISO27001, PCI DSS, SOX, DPA, COBIT, Cyber Essentials, ISO 90001, ISO 3100, ISO 22301
• Knowledge of industry standards such as ISO27001, PCI DSS, SOX, DPA, COBIT, Cyber Essentials, ISO 90001, ISO 3100, ISO 22301
• Good understanding of the software development life cycle