Fractional GRC & Information Security Compliance Consultant

Please login or register as jobseeker to apply for this job.

TYPE OF WORK

Part Time

SALARY

N/A

HOURS PER WEEK

4

DATE UPDATED

Aug 28, 2026

JOB OVERVIEW

# Fractional GRC & Information Security Compliance Consultant

### GDPR, Cyber Essentials, IASME & ISO 27001 Readiness

Votari is an early-stage UK election-technology company building verifiable digital voting infrastructure.

We are looking for a hands-on **GRC / Information Security Compliance Consultant** to take ownership of our privacy, security and certification readiness.

This is not a strategy-only advisory role.

We already have substantial technical architecture documentation, a Data Protection Impact Assessment, privacy documentation, data-flow analysis and existing GDPR/security research. We need someone who can take that foundation and turn it into an operational compliance programme.

The immediate objectives are:

* Bring our GDPR compliance documentation up to date
* Complete our Record of Processing Activities
* Review our controller / processor position and data-processing relationships
* Review subprocessors, international transfers and DPAs
* Update privacy, retention, DSAR and breach-response procedures
* Maintain and update our DPIA
* Build a practical security risk register
* Formalise core information-security policies
* Prepare and guide us through Cyber Essentials
* Prepare for IASME Cyber Assurance
* Establish the foundations for ISO 27001 certification
* Organise evidence and documentation suitable for enterprise and government procurement

You would act as the operational owner of the process and coordinate specialist legal, penetration-testing or certification providers where required.

## What we are looking for

We are particularly interested in someone who has personally taken small technology companies or SaaS businesses through compliance and certification programmes.

Strong experience in several of the following is important:

* ISO 27001 implementation
* Cyber Essentials / Cyber Essentials Plus
* IASME Cyber Assurance
* GDPR operational compliance
* Record of Processing Activities
* DPIAs
* Information-security risk management
* Security policies and control frameworks
* Supplier / subprocessor reviews
* Cloud and SaaS environments
* Enterprise security questionnaires
* Government or regulated-industry procurement

Useful professional credentials include:

* ISO 27001 Lead Implementer
* ISO 27001 Lead Auditor
* CIPP/E
* CISM
* CISSP
* IASME / Cyber Essentials experience

Certifications are useful, but practical implementation experience matters more.

## Important

We are not looking for:

* a generic cybersecurity consultant
* a penetration tester
* a lawyer
* someone who only produces high-level compliance presentations
* someone whose experience is primarily managing compliance teams inside large enterprises

We need someone comfortable doing the actual work: reviewing systems, writing policies, creating registers, gathering evidence, closing gaps and driving certification activity through to completion.

## Initial engagement

We expect the initial engagement to run for approximately **8–12 weeks**, initially around **one day per week**, with flexibility around assessment or certification periods.

If the engagement works well, this may continue as a lighter fractional compliance role.

## When applying

Please answer the following:

1. Tell us about one company with fewer than approximately 20 employees that you personally helped through Cyber Essentials, ISO 27001 or a similar compliance programme.

2. What did you personally produce or implement during that engagement?

3. Have you personally prepared a company for ISO 27001 certification? If yes, what parts of the process did you own?

4. What experience do you have implementing GDPR operational requirements such as RoPA, DPIAs, processor registers, retention policies, DSAR procedures and breach-response processes?

5. Have you worked with UK Cyber Essentials or IASME Cyber Assurance?

6. If you joined Votari next week, what would you expect to complete during your first 30 days?

Please include your expected hourly or daily rate and your availability.

Generic AI-generated proposals that do not address the questions above will not be considered.

VIEW OTHER JOB POSTS FROM:
SHARE THIS POST
facebook linkedin
  BENCHMARKS  
Loading Time: Base Classes  0.0011
Controller Execution Time ( Jobseekers / Job )  0.0136
Total Execution Time  0.0157
  GET DATA  
No GET data exists
  MEMORY USAGE  
1,511,224 bytes
  POST DATA  
No POST data exists
  URI STRING  
jobseekers/job/Fractional-GRC-Information-Security-Compliance-Consultant-1718832
  CLASS/METHOD  
jobseekers/job
  DATABASE:  onlinejobs (Jobseekers:$db)   QUERIES: 13 (0.0073 seconds)  (Hide)
0.0004   SELECT *
                                
FROM exrates
                                WHERE rate_name 
'USD-PHP' 
0.0006   SELECT *
FROM `employer_jobs`
WHERE `job_id` = 1718832
 LIMIT 1 
0.0005   SELECT *
FROM `employers`
WHERE `employer_id` = 891308
 LIMIT 1 
0.0004   SELECT COUNT(*) AS `numrows`
FROM `t_thread` `t`
LEFT JOIN `t_thread_misc` `miscON `t`.`id` = `misc`.`thread_id`
WHERE `t`.`job_id` = 1718832
AND `misc`.`idIS NULL 
0.0005   SELECT e.business_namee.logoe.websitee.rebill_datee.date_added member_datehitsDATEDIFF('2026-09-03',ej.date_added) duration_daysDATEDIFF('2026-09-03',e.rebill_date) duration_rebillej.*, e.deactivate FROM employers eemployer_jobs ej WHERE e.employer_id ej.employer_id AND
                                   ((
e.user_level >= '500' AND ej.date_added <= e.rebill_date)
                                   OR 
e.employer_id '' OR (ej.date_approved <> '2000-01-01' and DATEDIFF('2026-09-03',ej.date_added) <= 14 ))
                                   AND 
e.deactivate != AND ej.deleted AND job_id '1718832' 
0.0004   SELECT *
FROM `employer_jobs_skills` `ejs`
LEFT JOIN `skills_categories` `scON `ejs`.`skill_id` = `sc`.`id`
WHERE `job_id` = 1718832 
0.0010   UPDATE employer_jobs SET hit_counts '***Aug-28-2026=463***Aug-29-2026=45***Aug-30-2026=8***Sep-03-2026=3' WHERE job_id'1718832'  
0.0007   UPDATE employer_jobs SET monthly_hits '***Aug-2026=516***Sep-2026=3' WHERE job_id'1718832'  
0.0010   SELECT date_sent FROM jobseeker_sent_emails WHERE jobseeker_id '' AND job_id '1718832' AND status LIKE 'sent%' ORDER BY id DESC  
0.0003   SELECT *
FROM `employer_jobs_skills` `ejs`
LEFT JOIN `skills_categories` `scON `ejs`.`skill_id` = `sc`.`id`
WHERE `job_id` = 1718832 
0.0010   SELECT COUNT(*) AS `numrows`
FROM `employer_jobs`
WHERE `employer_id` = '891308'
AND `date_added` >= '2022-06-08' 
0.0004   select from teasers 
0.0003   SELECT FROM skill_categories WHERE skill_cat_id='' 
  HTTP HEADERS  (Show)
  SESSION DATA  (Show)
  CONFIG VARIABLES  (Show)