Senior Cybersecurity Consultant – GRC & ISMS

About the role

Cliffside Cybersecurity is seeking a senior consultant to own and operate information security management systems for its clients. You will work hands‑on, embedded within client teams, driving audit readiness, compliance and risk management across ISO 27001, SOC 2 and emerging frameworks.

Key responsibilities

• Manage and improve established ISO 27001 ISMS activities, including governance calendars, control operation and evidence collection.
• Prepare clients for internal, certification and surveillance audits, coordinating evidence and tracking remediation actions.
• Assess audit findings, determine actionable gaps and lead practical remediation with control owners.
• Draft and maintain policies, procedures, Statements of Applicability, risk treatment plans and other ISMS documentation.
• Maintain risk registers, facilitate risk assessments and present material risks to executives.
• Conduct third‑party security assessments and support supplier assurance processes.

Required profile

• Proven experience delivering GRC and ISMS programmes in a consulting environment.
• Strong ability to translate framework requirements into actionable work for control owners.
• Excellent communication skills with executives, auditors and technical teams.
• Self‑starter who can recognise risks early and engage the right expertise.

Required skills

• ISO 27001
• SOC 2
• GRC (Governance, Risk, Compliance) frameworks
• Risk assessment and treatment
• Audit preparation and remediation
• Policy and procedure development

What we offer

• Collaboration with a diverse cybersecurity team including architects and assurance partners.
• Opportunity to work on both established and emerging security frameworks.
• Supportive environment that values honesty and practical outcomes.