National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Senior Associate, Cybersecurity compliance (global role in a virtual working environment)

Grant Thornton International Ltd
Glasgow
1 month ago
Create job alert

About Grant Thornton


Grant Thornton is one of the world’s leading professional services networks with member firms in 150 markets, 76,000 people and global revenues of $8bn. Member firms offer audit, tax, and advisory services to privately owned companies, publicly listed companies, public sector and not for profit organisations, both domestically and internationally.

Grant Thornton International Ltd (GTIL) is the umbrella legal entity for the Grant Thornton global network of member firms. GTIL sets the strategic direction, convenes member firms, connects global communities, and protects the brand and reputation of the network. GTIL and the member firms will continually improve the sustainability of their operations and strive to make a positive impact on clients, people, markets, and the communities in which we operate, in line with the UN’s Sustainable Development Goals (SDGs).


Overall role purpose


In our Go Beyond network strategy 2025 our vision is to become ‘the most valued network in the profession’.


The primary purpose of this role is to support Grant Thornton International Ltd.’s internal cybersecurity assessment programme, which monitors our global network of Member Firms for compliance against our information security framework.


The ideal candidate will have experience evaluating IT Infrastructure Security technologies, IT general computer controls, industry frameworks (e.g. NIST) and will bring strong information technology audit or security consulting experience to the programme.


Location


United Kingdom/Europe


Main responsibilities


The Senior Associate will support with the implementation of the cybersecurity compliance programme, including:


  • Collaboration with IT assurance engagement teams across the GT network
  • Review of data and evidence obtained in the field, including reviews for completeness, consistency and clarity.
  • Evaluate cybersecurity risks and advise on risk mitigation activities.
  • Engagement with compliance colleagues, Technology and Business leaders, including the delivery of reporting material and presentations.
  • Tracking and coordination of follow up remediation cycles for those firms with findings of non-compliance.
  • Drive developments and improvements to the programme for future assessment cycles.


This role will also include broader support to the team such as:


  • Respond to firm enquiries and mailbox management.
  • Provide advice and guidance on a variety of security topics.
  • Develop guides, templates and other material to support the implementation of security standards.
  • Research security best practices and provide appropriate reporting.


Person specification


Education/qualifications


Bachelor’s degree in IT/Computer Science desirable

One of or similar to the following is desirable:


  • CompTIA Security+ or CASP+
  • Associate of (ISC)2
  • ISO27001 Practitioner


Experience – Essential


  • Demonstrable experience in a similar role.
  • Prior experience within a security compliance assurance or auditing position.
  • Understanding of relevant regulatory requirements and assurance processes, including various auditing standards such as NIST and ISO27001
  • Analytical skills to collect, analyse and interpret information and/or data into useful insight
  • Excellent communication skills, both verbal and written, with the ability to initiate and lead conversations with senior stakeholders
  • Ability to prioritise and manage a varying workload


Experience - Desirable


  • Experience with using GRC solutions as part of a risk management programme.
  • Understanding of cyber security best practices including knowledge of the general cyber threat landscape and common security controls architecture.
  • Due to the global scope of the role, any multi-language capability would be highly desirable.


Benefits


There are many benefits of being part of Grant Thornton International, working with a global and diverse team in a virtual setting is just one of them. We pride ourselves on our inclusive culture and believe it's one of our most valuable assets.


We also recognise the importance of time off at Grant Thornton International. Taking time away can lead to improved wellbeing and better productivity, which is why we don’t cap your leave. So if you need to take that extra Friday off (and Monday too), no problem.


We believe work is no longer a location, it is what we do. This should help all of us deliver our best work, while achieving the right balance in our lives. We want to build a culture of virtual inclusivity. One where all our people have the ability to choose what works best for them but also provides our people the best shared working experience utilising the digital tools we have available. GTIL will provide individuals with the necessary support and equipment to work effectively from home. We also have a collaborative space to offer should you prefer working outside of your home.


We will offer you access to digital learning options, as well as external training, should you role and development needs require this.


We fully understand the importance of balancing your life and we aim to support that with remote working and flexibility within your role. We understand the time you spend outside of work helps shape what you bring into work, so we encourage flexibility on both sides. However, if you prefer to work from the office, this is also something we offer.


We also understand the importance of working comfortably in a remote office - most likely your home, which is why we offer all staff a monthly home office allowance to ensure you're well equipped and able to undertake your role to the fullest.


These are just some of the benefits of working at Grant Thornton International. We also have a wide range of attractive core benefits including pension, health insurance, wellbeing programmes and much much more.

Related Jobs

View all jobs

Senior Associate, Cybersecurity compliance (global role in a virtual working environment)

Senior Associate, Cybersecurity compliance (global role in a virtual working environment)

Senior Associate, Cybersecurity compliance (global role in a virtual working environment)

Senior Associate, Cybersecurity compliance (global role in a virtual working environment)

Cybersecurity & Data Privacy Associate

Senior Cyber Security Engineer

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

How to Find Hidden Cyber Security Jobs in the UK Using Professional Bodies like BCS, CIISec & More

The demand for skilled cyber security professionals in the UK has never been higher. With threats increasing in sophistication and frequency, organisations are urgently hiring ethical hackers, threat analysts, GRC specialists, and security architects. But many of the most valuable roles—particularly in government, defence, and critical infrastructure—are never publicly advertised. Instead, these jobs are shared behind the scenes through trusted networks, private communities, and professional bodies. In this article, we explore how to uncover hidden cyber security jobs in the UK using organisations like the BCS (The Chartered Institute for IT), CIISec (The Chartered Institute of Information Security), ISACA, and ISC² UK Chapter. We’ll show you how to use membership directories, special interest groups, CPD events and informal networks to gain early access to roles most people never see.

How to Get a Better Cyber Security Job After a Lay-Off or Redundancy

Redundancy is never easy—especially in a fast-moving field like cyber security, where your skills and experience are constantly evolving. But if you’ve recently been made redundant from a cyber security role, know this: the UK cyber workforce remains in high demand, and your expertise is more valuable than ever. Whether you’re a SOC analyst, penetration tester, incident responder, security architect or GRC specialist, there are still thousands of opportunities across sectors including finance, defence, government, retail, and critical infrastructure. This guide will help you turn redundancy into a career relaunch, with a clear action plan tailored to the UK cyber security job market.

Cyber Security Jobs Salary Calculator 2025: Check Your Market Value in Seconds

Why yesterday’s pay survey no longer protects you. “Could I earn more at a managed SOC?” “Is that fintech’s offer really competitive?” Every UK cyber‑security professional asks some version of those questions—usually after another colleague lands a pay rise, a recruiter sends a tempting JD, or a fresh breach makes headline news. Yet salary guides published even last year feel as out‑of‑date as a forgotten antivirus signature. Since 2024, ransomware gangs switched to double‑extortion, deepfake phishing exploded, & the EU’s NIS2/DORA regulations bled into UK contracts despite Brexit. With each shift, salary bands move. To cut through stale averages, CybersecurityJobs.tech distilled a three‑factor formula that lets you estimate a realistic 2025 salary in under a minute. Feed in your role, your UK region, & your seniority level. The output arms you with data‑driven leverage for your next appraisal, job application, or freelance rate card. This article explains the formula, reveals the forces pushing cyber pay ever higher, & outlines five practical moves to boost your market value within ninety days.