Job Search

We are seeking a Senior GRC / Security Assurance Officer to strengthen governance, risk management and information security assurance across the organisation. This role will support the development, implementation and continuous improvement of security frameworks, policies, standards and controls, ensuring they align with relevant legislation, regulatory obligations and recognised industry practices. You will work closely with technology, operational and business stakeholders to promote effective risk ownership and embed security into day-to-day decision-making.

Key responsibilities will include maintaining the information security risk register; coordinating risk assessments, control reviews and remediation plans; supporting internal and external audits; and preparing clear reports for senior management and governance forums. You will oversee assurance activities such as compliance reviews, control testing, supplier and third-party assessments, and evidence collection. The role will also contribute to security awareness initiatives, policy reviews, business continuity planning, incident lessons learned and the monitoring of agreed security improvement actions. Where required, you will provide practical advice on risk treatment, control design and regulatory or contractual requirements.

The successful candidate will have substantial experience in governance, risk, compliance, security assurance or a closely related discipline, ideally within a complex or regulated environment. You should have strong knowledge of information security principles and frameworks such as ISO 27001, NIST, CIS Controls or equivalent, together with experience interpreting regulatory, privacy and contractual obligations. Relevant professional qualifications, such as CISA, CRISC, CISSP, ISO 27001 Lead Auditor or equivalent, are desirable. Excellent analytical, written and verbal communication skills are essential, as is the ability to challenge constructively, manage competing priorities and build trusted relationships at all levels. You will be organised, pragmatic and confident translating technical and compliance matters into clear, actionable recommendations.