Cyber Governance Consultant

Responsibilities

• Help clients design and implement cyber guidelines and guardrails tailored to their specific needs
• Perform gap analysis and rationalization of controls against regulatory frameworks
• Conduct threat modelling, risk identification, assessment, and mitigation planning
• Manage data protection and storage analysis, including Data Loss Prevention and Rights Management
• Execute 3rd Party Risk analysis, controls, audits, and cyber resilience/recovery analysis
• Oversee cloud and network security posture, including mobile data and device protection
• Manage policy and procedure development, testing, review, and compliance audit preparation

Requirements

• Experience designing or implementing secure solutions based on regulatory frameworks (e.g., ISO, NIST, NIS, TISAX, DORA, NCSC CAF, or IEC62443)
• Proven experience in GRC (Governance, Risk, and Compliance) consulting
• Ability to balance security needs with compliance requirements using a pragmatic approach to usability and cost
• Experience creating business cases or roadmaps to meet regulatory requirements and industry best practices
• Ability to obtain Security Check (SC) clearance
• Continuous UK residency for the last 5 years

Benefits

• Hybrid working model blending office, client site, and home working
• Access to wellbeing resources, including Mental Health Champions and wellbeing apps like Thrive and Peppy
• Opportunity to join an accredited Great Place to Work for Wellbeing
• Professional community of experts providing continuous learning and support

About the Company

Capgemini is an AI-powered global business and technology transformation partner. With a heritage of nearly 60 years and a team of 420,000 members in more than 50 countries, we deliver end-to-end services across strategy, technology, design, engineering, and business operations to help the world's leading organisations innovate and grow.