CGRC Lead

This is an exciting opportunity to join a business investing heavily in its cyber security capability. Reporting to the Group Information Security Officer (GISO), you’ll take ownership of cyber governance across the Group, working closely with senior stakeholders to strengthen security, risk and compliance practices., * Maintain and develop the Group cyber risk register.

• Develop and maintain security policies, standards and governance documentation.
• Support and improve cyber governance frameworks including NIST CSF, CIS Controls and ISO 27001.
• Conduct cyber risk assessments across projects, systems and suppliers.
• Coordinate internal and external audits and compliance activities.
• Produce cyber risk and assurance reporting for senior leadership.
• Support third-party security assurance and supplier risk management.
• Promote cyber security awareness and good governance across the organisation.

This role would suit a proactive Cyber GRC professional who enjoys working autonomously, influencing change and building strong relationships across multiple businesses., You’ll have experience in Cyber Governance, Risk & Compliance and be confident working independently within a collaborative environment.

You’ll also bring:

• Strong knowledge of NIST CSF, CIS Controls and ISO 27001.
• Experience conducting cyber risk assessments and supporting audits.
• The ability to develop policies, standards and governance documentation.
• Excellent communication skills, with confidence engaging senior stakeholders.
• A proactive approach with the ability to manage multiple priorities.

Experience with GRC platforms, ISO 27001 certification, GDPR/NIS2, cloud security (Microsoft 365/Azure) or security certifications (CISA, CISSP, CRISC, Security+ etc.) would be advantageous.