Security Risk & Governance Consultant


Company:	Hays Specialist Recruitment
Salary:	£600 - £600
Hours:	Full-time
Location:	M1 4BT
Job type:	Contract
Posting date:	19 Aug 2026
Closing date:	26 Aug 2026

Apply for this job

Summary

Your new company

We are currently partnered with one of the largest UK Government bodies - working with them on an exclusive basis to recruit a number of Technology contractors across multiple running programmes.

This organisation is looking for an experienced Security Risk and Governance Consultant to join them on a contract basis, to help them strengthen their approach to cyber and information security.

The contract on offer is for 6 months (with likely extensions)

The role will be working on a remote basis - with the potential requirement of going on site to one of their UK offices if required

Your new role

We are seeking an experienced risk practitioner to provide specialist consultancy support for a six-months to strengthen the organisation's approach to cyber and information security risk oversight. The engagement will focus on designing a pragmatic and decision-useful security metrics approach, establishing a robust methodology for data capture and trend reporting, and mapping recognised governance and assurance frameworks to strategic and operational risk in a way that supports senior decision-making, risk appetite, and the ongoing work of Security Risk and Compliance Leads.This role is business critical. It will strengthen the organisations ability to understand, measure, and communicate cyber and information security risk.

The deliverables will provide the metrics, methodology, and governance mapping needed to improve senior leadership visibility, support risk-based prioritisation, and enable more consistent and defensible security decisions across the organisation.

Key Responsibilities

Lead the identification, definition, and prioritisation of meaningful security risk metrics that support risk appetite, risk visibility, and informed decision-making.

Develop a clear and practical methodology for capturing, baselining, and reporting security risk metrics, including an approach for evidencing movement, direction of travel, and emerging trends over time.

Design and recommend an enhanced approach for communicating security risk insights, metric performance, and risk movement to senior leaders in a concise and actionable format.

Undertake mapping between key security governance and assurance frameworks, including GovS007, NIST, GovAssure, and Cyber Essentials, and the organisation's strategic and operational risk landscape.

Translate framework and assurance requirements into practical governance, risk, and reporting outputs that are accessible to both technical and non-technical stakeholders.

Produce and refine reporting artefacts, governance materials, and supporting documentation required to improve oversight of cyber and information security risk.

Work with and support Security Risk and Compliance Leads to shape, validate, and refine the proposed metrics, methodology, and framework mappings.

Engage with relevant stakeholders to test assumptions, validate metrics, and confirm framework mappings, ensuring outputs are aligned to organisational priorities and executive needs.

Provide recommendations to enhance existing risk reporting and governance arrangements, with a focus on improving transparency, consistency, and senior leadership oversight.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Apply for this job