GRC Cyber Consultant

UK Remote, with occasional site travel
£450-£525
Likely Outside IR35
12 months

Bright Purple are looking for an experienced Cyber GRC Analyst to join a global security technology manufacturer on a 12 month contract. You'll play a key part in the organisation's EU Cyber Resilience Act (CRA) readiness, while maturing cyber risk management and governance across the business. Working closely with engineering, product management, quality, service and cyber security teams, you'll help turn compliance requirements into tracked, measurable deliverables.

• Cyber GRC, compliance, risk management or audit experience
• Hands-on experience maintaining risk registers, running risk assessments and tracking remediation
• Experience supporting regulatory compliance programmes
• Familiarity with Cyber Resilience Act requirements
• Knowledge of NIST 800-53, ISO 27001, NIS2 and IEC 62443
• AuditBoard or similar GRC tooling experience
• Ability to develop KPIs and clear compliance reporting
• Experience writing cyber security policies, standards and procedures
• Strong stakeholder engagement and documentation skills

You'll own and mature the Cyber Security Risk Register, support audit preparation and security assessments, help with the implementation of AuditBoard, and maintain System Security Plans and associated compliance documentation.

This is a 12 month contract, Inside/Outside IR35, paying £ XXX to £ XXX per day.

The role is UK remote, with occasional travel to client sites in England.

Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry.