GRC Consultant (OneTrust)

Are you a GRC consultant with hands-on OneTrust experience who enjoys solving complex compliance challenges? We see you!

Why should this job matter for you?

We give you a platform to connect with global brands to solve governance, risk and compliance challenges that few can.

If you are interested in helping global players strengthen their GRC programmes, implement risk and compliance controls, or navigate evolving regulatory requirements, we might be the right fit for you.

If you live in the London area, you will be based 2-3 days in our London office and the rest from home. If you don't but you think you would be a great asset to our team, we would be happy to have you work remotely.

There may be some light occasional travel required.

We offer 26 days of annual leave, in addition to UK bank holidays, pension contributions and a work-from-anywhere policy for 6 weeks each year.

Our clients are in a constant search for experts in this field and consultants they can trust. This is how we build meaningful partnerships with our clients, so we are on the constant lookout for colleagues to learn from.

In this role, you will

Advise clients across governance, risk and compliance, including framework design, controls, and assurance

Lead OneTrust configuration and implementation for GRC and privacy use cases

Bring an integrated view across privacy, security, AI and operational risk

Act as the bridge between regulatory requirements and the platform decisions that support them

In practice, that means owning GRC engagements from scoping through delivery, with OneTrust at the centre of how we bring those programmes to life. You will work alongside our consultants, translate complex regulatory questions into platform decisions, and make sure what gets built reflects the client's actual risk and compliance picture rather than the path of least resistance inside the tool.

You will contribute to how we work. Our GRC practice is growing, and the people who join now will help shape the methodologies, templates, and ways of working that we take to every future client.

Who we are looking for

Must haves

• - Have a positive mindset
• - Are driven and a self-starter
• - Know a second language
• - Worked in consulting before, whether at a professional services firm, a Big Four, or a specialist GRC, privacy or compliance firm
• - Have learned from past challenges and can think creatively out of challenges
• - Are familiar with adjacent privacy and GRC platforms such as ServiceNow GRC, Securiti, TrustArc, BigID, or similar

The rest can be learnt within our team.

Our Mission

We connect clients to tailored compliance solutions within privacy, AI governance, GRC.

When regulators add more requirements to privacy, AI and data landscapes, clients come to our door to address these challenges. That's our business. Solving compliance requirements before they become issues.