> Markdown version of [/jobs/ext/2049104-technology-risk-grc-lead](https://www.wearedevelopers.com/jobs/ext/2049104-technology-risk-grc-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Technology Risk & GRC Lead - **Company:** Xpertise Recruitment - **Location:** Liverpool, UK - **Experience:** Expert - **Salary:** £195,000.0 - £221,000.0 - **Contract:** Temporary contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Identity and Access Management, PRINCE2, SAP (Applications), SAP Implementation, SAP Security - **Published:** August 14, 2026 - **Apply:** https://www.careerboard.com/pt/en/find-jobs-in-United-Kingdom/-C394A12093F5C47EF6/ ## About the Role * Proven experience as a Technology Risk Lead, GRC Lead, IT Risk Manager, Technology Risk Manager, Information Security Governance Manager, or similar * Strong background in governance, risk management, compliance, audit, technology assurance, or cyber security governance * Experience operating across multiple business functions within complex enterprise environments * Strong understanding of risk registers, controls frameworks, policy management, and assurance processes * Knowledge of recognised frameworks such as ISO 27001, NIST, COBIT, ITIL, or equivalent * Experience supporting large-scale technology, ERP, or SAP transformation programmes * Excellent stakeholder management, communication, and influencing skills Desirable Experience * ISO 27001, CISSP, CISM, CISA, CRISC, CGEIT, PRINCE2, or similar certifications * Experience working within regulated or highly governed environments * SAP security, access governance, and Segregation of Duties (SoD) expertise * Exposure to enterprise risk management, operational risk, or finance risk functions, You will be a commercially minded and hands-on Technology Risk & GRC professional with a proven track record of implementing governance, risk, and compliance improvements. Comfortable operating across both strategic and operational levels, you will be confident influencing senior stakeholders, navigating organisational complexity, and driving measurable outcomes rather than simply producing recommendations. ## Description Xpertise Recruitment are seeking an experienced Technology Risk & GRC Lead to drive governance, risk management, compliance, cyber security oversight, and technology assurance activities across a complex enterprise environment. This is a highly visible role requiring a pragmatic, delivery-focused professional who can drive tangible outcomes across technology and business functions. The successful candidate will work across Technology, Cyber Security, Finance, SAP Delivery, Digital, and Operational Risk teams to strengthen governance, improve controls, and embed effective risk management practices. About the Opportunity Unlike organisations with a dedicated GRC function, governance, risk, and compliance responsibilities are distributed across multiple teams. This role requires someone who can provide leadership, coordination, and oversight while building strong relationships across the business to ensure a consistent and effective approach to risk, controls, compliance, and assurance. Why Join? * High-profile role with significant exposure to executive and senior leadership teams * Opportunity to shape and mature governance, risk, and compliance capabilities across the organisation * Key involvement in cyber security governance, technology assurance, and SAP transformation initiatives * Opportunity to deliver meaningful improvements within a complex enterprise environment * Competitive day rate and Outside IR35 engagement, * Lead and coordinate technology risk, governance, and compliance activities across business and technology functions * Establish and enhance risk management frameworks, policies, standards, controls, and reporting processes * Facilitate risk assessments and control reviews across IT, cyber security, SAP, operational, and third-party environments * Drive compliance activities aligned with regulatory, legal, and industry requirements * Support internal audits, external audits, assurance reviews, and remediation programmes * Monitor control effectiveness and oversee corrective action plans * Partner with Cyber Security and Digital teams to strengthen security governance and technology risk management * Provide governance oversight across SAP and wider technology transformation programmes, including access governance and Segregation of Duties controls * Present risk insights, findings, and recommendations to senior stakeholders and executive leadership teams ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [AI Pair Programming with GitHub Copilot at SAP: Looking Back, Looking Forward!](https://www.wearedevelopers.com/videos/1546-ai-pair-programming-with-github-copilot-at-sap-looking-back-looking-forward) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [Beyond GPT: Building Unified GenAI Platforms for the Enterprise of Tomorrow](https://www.wearedevelopers.com/videos/1525-beyond-gpt-building-unified-genai-platforms-for-the-enterprise-of-tomorrow) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Top HR Tech Conferences in 2024](https://www.wearedevelopers.com/magazine/303-top-hr-tech-conferences-in-2024) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)