Security GRC Lead
We are seeking an experienced Security GRC Lead to drive the development, implementation and continuous improvement of governance, risk and compliance practices across the organisation. This is a key role for a security professional who can translate regulatory obligations and business requirements into practical, proportionate controls that protect information, technology and customers.
You will lead the security governance framework, ensuring policies, standards and procedures remain current, effective and aligned with recognised industry practices. You will maintain the information security risk register, coordinate risk assessments, advise on risk treatment plans and provide clear reporting to senior stakeholders. The role will also involve monitoring control performance, identifying areas for improvement and supporting a culture of accountability and continuous security enhancement.
Key responsibilities include managing internal and external audits, coordinating evidence collection, tracking remediation activity and ensuring that regulatory and contractual commitments are met. You will support assessments against relevant frameworks such as ISO 27001, NIST, CIS Controls or equivalent, and contribute to business continuity, third-party risk management, data protection and supplier assurance activities. You will also develop meaningful metrics and management information to communicate security posture, trends and emerging risks.
Working closely with technology, legal, privacy, procurement and operational teams, you will provide pragmatic guidance on security requirements throughout the project and supplier lifecycle. You will help embed security by design, review exceptions and ensure that agreed controls are understood and consistently applied.
The successful candidate will have substantial experience in information security governance, risk and compliance, together with a strong understanding of security frameworks, audit principles and regulatory expectations. Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable. You will be an excellent communicator, confident engaging with senior audiences and capable of influencing without direct authority. Strong analytical, organisational and stakeholder management skills are essential, as is the ability to balance commercial priorities with effective risk management.
Security GRC Lead
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Consultant
- Security Analyst
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Senior Security Consultant-Sec...
- Manager Application Security
- Data Privacy Co-Ordinator
- Information Security Manager
- Senior Technical Consultant-Se...
- Red Team Operator (Cyber Resil...
- Cyber Security Analyst
- CTI Lead
- Microsoft IAM Consultant / Ass...
- Security Architect
- IT Security Operations Lead
- Cyber Policy Lead