Security GRC Lead

Reference: yn7etvtewaamindy8nko

We are seeking an experienced Security GRC Lead to drive the development, implementation and continuous improvement of governance, risk and compliance practices across the organisation. This is a key role for a security professional who can translate regulatory obligations and business requirements into practical, proportionate controls that protect information, technology and customers.

You will lead the security governance framework, ensuring policies, standards and procedures remain current, effective and aligned with recognised industry practices. You will maintain the information security risk register, coordinate risk assessments, advise on risk treatment plans and provide clear reporting to senior stakeholders. The role will also involve monitoring control performance, identifying areas for improvement and supporting a culture of accountability and continuous security enhancement.

Key responsibilities include managing internal and external audits, coordinating evidence collection, tracking remediation activity and ensuring that regulatory and contractual commitments are met. You will support assessments against relevant frameworks such as ISO 27001, NIST, CIS Controls or equivalent, and contribute to business continuity, third-party risk management, data protection and supplier assurance activities. You will also develop meaningful metrics and management information to communicate security posture, trends and emerging risks.

Working closely with technology, legal, privacy, procurement and operational teams, you will provide pragmatic guidance on security requirements throughout the project and supplier lifecycle. You will help embed security by design, review exceptions and ensure that agreed controls are understood and consistently applied.

The successful candidate will have substantial experience in information security governance, risk and compliance, together with a strong understanding of security frameworks, audit principles and regulatory expectations. Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable. You will be an excellent communicator, confident engaging with senior audiences and capable of influencing without direct authority. Strong analytical, organisational and stakeholder management skills are essential, as is the ability to balance commercial priorities with effective risk management.

COMPETITIVE SALARY
Added 29/10/2026
Reference: yn7etvtewaamindy8nko

Other similar jobs

Security Operations Lead

Added 02/11/2026

We are seeking an experienced Security Operations Lead to oversee the day-to-day delivery and continuous improvement of a modern security operations function. This is a key role for a confident security professional who can combine strong technical knowledge with effective leadership, ensuring that threats are identified, investigated and addressed promptly. You will lead the monitoring, triage and investigation of security alerts across a varied technology estate, coordinating the response to incidents and ensuring that appropriate containment, eradication and recovery actions are completed. You will help maintain and improve security monitoring capabilities, including SIEM, endpoint detection and response, vulnerability management and...

Learn more

Information Security GRC Lead

Added 21/09/2026

We are seeking an experienced Information Security GRC Lead to strengthen governance, risk management and compliance capabilities across a complex technology and business environment. This role will provide strategic direction while remaining closely involved in the delivery of practical security initiatives, ensuring that information security risks are identified, assessed and managed in line with business priorities and regulatory expectations. Key responsibilities will include developing and maintaining information security policies, standards and control frameworks; coordinating enterprise-wide risk assessments; managing risk treatment plans and tracking remediation activities; and preparing clear reporting for senior leadership and relevant governance forums. You will lead internal...

Learn more

Information Security GRC Lead

Added 08/09/2026

We are seeking an experienced Information Security GRC Lead to strengthen and mature governance, risk and compliance activities across the organisation. In this role, you will lead the development, implementation and continuous improvement of information security policies, standards, procedures and control frameworks. You will work closely with technology, legal, privacy, risk, audit and business stakeholders to ensure that security requirements are clearly defined, consistently applied and aligned with business objectives and regulatory obligations. Your responsibilities will include maintaining the information security risk management programme, coordinating risk assessments, documenting remediation plans and monitoring progress against agreed actions. You will lead internal...

Learn more

Lead Cybersecurity GRC Consultant

Added 14/09/2026

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance activities. In this role, you will lead the development, implementation and continuous improvement of cybersecurity frameworks, policies, standards and control environments. You will work with technology, privacy, legal, internal audit and business stakeholders to identify information security risks, assess their potential impact and ensure that appropriate mitigation plans are defined, owned and tracked. Your responsibilities will include leading risk assessments, control reviews, compliance readiness activities and third-party security assessments. You will map regulatory and industry requirements to internal controls, support audit preparation and...

Learn more

Lead Cybersecurity GRC Consultant

Added 14/09/2026

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance initiatives. In this role, you will lead the development, implementation and continuous improvement of cybersecurity frameworks, policies, standards and procedures aligned with recognised industry practices and regulatory requirements. You will work closely with technology, risk, legal, compliance, audit and business stakeholders to strengthen security governance and embed effective risk management across the organisation. Key responsibilities include leading cybersecurity risk assessments, control reviews, compliance gap analyses and remediation programmes. You will advise on regulatory obligations, customer and third-party assurance requirements, and the design and...

Learn more

Lead Cybersecurity GRC Consultant

Added 14/09/2026

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance activities. In this role, you will lead the development, implementation and continuous improvement of cybersecurity policies, standards, procedures and control frameworks. You will work closely with technology, security, legal, privacy, audit and business stakeholders to ensure that security risks are identified, assessed and managed in line with organisational objectives and regulatory expectations. Key responsibilities include leading enterprise security risk assessments, maintaining risk registers and treatment plans, and advising on appropriate mitigation strategies. You will coordinate internal and external audits, support regulatory and...

Learn more

Lead Cybersecurity GRC Consultant

Added 14/09/2026

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic leadership across governance, risk, and compliance initiatives. This role will help strengthen the organisation’s cybersecurity posture by translating business objectives, regulatory obligations, and industry standards into practical security policies, controls, and improvement programmes. You will work closely with technology, risk, legal, audit, privacy, and business stakeholders to promote a consistent, risk-based approach to information security. Key responsibilities include leading cybersecurity risk assessments, control reviews, maturity assessments, and remediation planning; maintaining and improving security governance frameworks; and supporting compliance with applicable regulations, contractual requirements, and recognised standards such as ISO...

Learn more

Lead Cybersecurity GRC Consultant

Added 14/09/2026

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance initiatives. In this role, you will help strengthen the organisation’s security posture by developing and maintaining cybersecurity policies, standards, procedures and control frameworks aligned with recognised industry practices and regulatory requirements. You will work closely with technology, risk, legal, audit and business stakeholders to translate security objectives into practical, measurable and sustainable outcomes. Your responsibilities will include leading cybersecurity risk assessments, control evaluations, compliance reviews and third-party risk assessments; identifying gaps; and recommending prioritised remediation plans. You will coordinate evidence collection and...

Learn more

Lead Cybersecurity GRC Consultant

Added 14/09/2026

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic direction and hands-on leadership across governance, risk and compliance activities. In this role, you will advise senior stakeholders on cybersecurity risk, regulatory obligations and control effectiveness, while helping to strengthen security governance and embed sustainable risk management practices across the organisation. You will lead complex engagements from assessment through to remediation, ensuring that security objectives are aligned with business priorities. Key responsibilities will include developing and maintaining cybersecurity policies, standards, frameworks and control libraries; conducting risk assessments, control reviews, maturity assessments and compliance gap analyses; and preparing clear...

Learn more

Lead Cybersecurity GRC Consultant

Added 14/09/2026

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance initiatives. This role will lead the development, implementation and continuous improvement of cybersecurity frameworks, policies, standards and controls aligned with recognised industry practices and applicable regulatory requirements. You will work closely with technology, privacy, legal, risk and business stakeholders to strengthen security governance and support informed risk-based decision-making. Key responsibilities include managing enterprise security risk assessments, maintaining risk registers and treatment plans, coordinating internal and external audits, and overseeing compliance activities against frameworks such as ISO 27001, NIST, SOC 2 or equivalent standards....

Learn more

GRC Security Consultant - Operational Security

Added 23/10/2026

We are seeking a GRC Security Consultant – Operational Security to support the development, implementation and continual improvement of security governance, risk and compliance activities. This role will work closely with technical and business stakeholders to ensure that operational security practices are effective, proportionate and aligned with relevant policies, standards and regulatory obligations. You will assess security risks across operational processes, systems and services, documenting findings and working with control owners to agree practical remediation plans. Responsibilities will include supporting risk assessments, maintaining security registers, reviewing policies and procedures, monitoring control performance and preparing clear reports for management and governance...

Learn more

Security Consultant - Operational Security & GRC

Added 07/10/2026

We are seeking a Security Consultant specialising in Operational Security and Governance, Risk and Compliance (GRC) to help strengthen security capabilities across a complex and evolving technology environment. In this role, you will advise stakeholders on security risks, support the development and implementation of effective controls, and help ensure that operational practices align with relevant policies, standards and regulatory requirements. You will work closely with technology, risk, audit, privacy and business teams to promote practical, proportionate and sustainable security outcomes. Your responsibilities will include conducting security and risk assessments, identifying control gaps, maintaining risk and compliance documentation, and supporting remediation...

Learn more

Information Security and AI GRC Manager

Added 26/10/2026

We are seeking an experienced Information Security and AI GRC Manager to lead the development and continuous improvement of governance, risk and compliance frameworks across information security and artificial intelligence. This is an influential role for a collaborative professional who can translate regulatory expectations, emerging risks and business objectives into practical controls and clear guidance. You will develop and maintain policies, standards and procedures covering information security, data protection, artificial intelligence governance, third-party risk and operational resilience. Working with technology, legal, privacy, risk and business teams, you will ensure that security and AI-related risks are identified, assessed, recorded and managed...

Learn more

Information Security (GRC) Specialist

Added 20/10/2026

We are seeking an Information Security (GRC) Specialist to support the development, maintenance and continuous improvement of governance, risk and compliance practices across the organisation. This is an opportunity to contribute to a mature information security environment, helping to ensure that business activities, technology services and third-party relationships are managed in line with relevant policies, regulatory obligations and industry standards. Key responsibilities will include maintaining information security policies, standards and procedures; coordinating risk assessments and supporting the creation and tracking of remediation plans; monitoring compliance with applicable legislation, contractual requirements and recognised frameworks; and preparing clear reports for senior stakeholders....

Learn more

Information Security Analyst – GRC & Risk

Added 20/10/2026

We are seeking an Information Security Analyst – GRC & Risk to support the development, implementation and continuous improvement of effective information security governance, risk and compliance practices. This role will help protect information assets, strengthen organisational resilience and ensure that security activities align with applicable regulations, industry standards and business objectives. You will work closely with technology, legal, compliance, audit and operational teams, providing clear, practical advice on information security risks and controls. Key responsibilities will include maintaining security policies, standards, procedures and risk registers; conducting information security and third-party risk assessments; supporting the identification, evaluation and treatment of...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.