Governance, Risk & Compliance (GRC) Consultant
Posted 3
views
Summary
A 4-month outside-IR35 contract for an experienced GRC consultant to support LCCC's NIST Cybersecurity Framework (CSF) 2.0 maturity assessment programme — developing CSF profile documentation, running capability assessments and gap analysis, and producing evidence and reporting artefacts. Hybrid role based at Canary Wharf, London, with office attendance when needed.
Governance, Risk & Compliance (GRC) Consultant
Contract: Initial 4-month engagement
Daily rate: £600-£800 a day
Outside IR35 (subject to final determination and contractual agreement)
Daily rate: £600-£800 a day
Outside IR35 (subject to final determination and contractual agreement)
Location: Canary Wharf
Hybrid. Attendance at LCCC offices will be required where necessary to support workshops, stakeholder engagement, evidence gathering and delivery of agreed project outcomes
About the Engagement
Hybrid. Attendance at LCCC offices will be required where necessary to support workshops, stakeholder engagement, evidence gathering and delivery of agreed project outcomes
About the Engagement
LCCC is seeking two experienced Governance, Risk & Compliance (GRC) consultants to support the delivery of a NIST Cybersecurity Framework (CSF) 2.0 maturity assessment programme.
This engagement has been established to deliver specific project outcomes within a defined timeframe, supporting LCCC's strategic objectives for 2026/27 and an externally scheduled assessment programme.
The successful consultants will provide specialist expertise to develop NIST CSF 2.0 documentation, undertake assessment activities, and produce the evidence and artefacts required to support the maturity assessment.
The engagement will focus on delivering the following outcomes:
- Development of NIST CSF 2.0 profile documentation.
- Assessment of current capabilities against the NIST CSF 2.0 framework.
- Gap analysis and identification of areas for improvement.
- Collection, review and organisation of supporting evidence.
- Production of assessment outputs, reports and associated documentation.
- Recommendations to support improvements in governance, risk and compliance practices.
- Delivery of agreed project artefacts in line with programme milestones.
Deliverables
Expected deliverables include:
- NIST CSF 2.0 profile documentation.
- Assessment and gap analysis outputs.
- Evidence repositories and supporting documentation.
- Improvement recommendations and supporting artefacts.
- Documentation required to support the maturity assessment process.
Engagement Details
This engagement is focused on the delivery of defined outcomes and project artefacts within an agreed timeframe.
The successful consultants will be expected to provide specialist expertise and determine the approach to delivering the agreed outputs, subject to programme milestones, governance requirements and contractual obligations.
No line management responsibilities form part of this engagement.
- Demonstrable experience applying the NIST Cybersecurity Framework, ideally NIST CSF 2.0.
- Strong governance, risk and compliance experience within technology and cyber security environments.
- Experience conducting maturity assessments, control assessments or compliance reviews.
- Ability to produce high quality governance, assurance and compliance documentation.
- Experience delivering specialist consultancy services within defined project environments.