Security Framework & Controls SME
About this role
Security Framework & Controls SME
Location: Fully Remote
Day Rate: £600 – £700 per day
Contract Length: Initial 10 weeks (with strong scope for extension)
Industry: IT Services / Global Information Security
Discipline: Information Security / Cyber Security Consulting
About Us
We are Bridge Staffing Agency, a dedicated recruitment partner committed to connecting exceptional talent with organizations where they can make a lasting impact. We take pride in building collaborative relationships and tailoring our search solutions to your professional goals, your pace, and your people.
The Opportunity
We are partnering with a global organization to find an experienced contract Security Framework & Controls SME who has a proven track record of designing, developing, and implementing robust security control frameworks.
In this critical subject matter expert role, you will take full ownership of defining the next level of operational security controls beneath existing information security policies, ensuring high-level requirements are translated into clear, practical, and implementable measures.
Key Responsibilities
Develop and define detailed security controls sitting beneath existing policies and standards, ensuring they can be applied consistently across business units.
Own comprehensive controls mapping across global security frameworks and standards, linking policies, standards, controls, and compliance evidence.
Design technology-agnostic controls suited for a complex, federated global environment, ensuring they are practical, scalable, and relevant.
Partner closely with diverse business and technology stakeholders to articulate control requirements, explain their necessity, and guide implementation.
Act as an autonomous senior SME capable of taking full ownership of deliverables with minimal direction.
What We’re Looking For
Proven commercial experience designing, developing, and implementing security control frameworks within global organizations.
Deep practical knowledge and experience mapping across major security frameworks, including NIST, ISO 27001, and wider regulatory standards.
Strong ability to craft technology-agnostic, scalable controls suitable for large, federated corporate structures.
Excellent communication and stakeholder management skills with the ability to explain complex security concepts clearly.