Technology Risk & GRC Lead

Xpertise Recruitment are seeking an experienced Technology Risk & GRC Lead to drive governance, risk management, compliance, cyber security oversight, and technology assurance activities across a complex enterprise environment.

This is a highly visible role requiring a pragmatic, delivery-focused professional who can drive tangible outcomes across technology and business functions.

The successful candidate will work across Technology, Cyber Security, Finance, SAP Delivery, Digital, and Operational Risk teams to strengthen governance, improve controls, and embed effective risk management practices.

About the Opportunity

Unlike organisations with a dedicated GRC function, governance, risk, and compliance responsibilities are distributed across multiple teams. This role requires someone who can provide leadership, coordination, and oversight while building strong relationships across the business to ensure a consistent and effective approach to risk, controls, compliance, and assurance.

Why Join?

• High-profile role with significant exposure to executive and senior leadership teams
• Opportunity to shape and mature governance, risk, and compliance capabilities across the organisation
• Key involvement in cyber security governance, technology assurance, and SAP transformation initiatives
• Opportunity to deliver meaningful improvements within a complex enterprise environment
• Competitive day rate and Outside IR35 engagement, * Lead and coordinate technology risk, governance, and compliance activities across business and technology functions
• Establish and enhance risk management frameworks, policies, standards, controls, and reporting processes
• Facilitate risk assessments and control reviews across IT, cyber security, SAP, operational, and third-party environments
• Drive compliance activities aligned with regulatory, legal, and industry requirements
• Support internal audits, external audits, assurance reviews, and remediation programmes
• Monitor control effectiveness and oversee corrective action plans
• Partner with Cyber Security and Digital teams to strengthen security governance and technology risk management
• Provide governance oversight across SAP and wider technology transformation programmes, including access governance and Segregation of Duties controls
• Present risk insights, findings, and recommendations to senior stakeholders and executive leadership teams

• Proven experience as a Technology Risk Lead, GRC Lead, IT Risk Manager, Technology Risk Manager, Information Security Governance Manager, or similar
• Strong background in governance, risk management, compliance, audit, technology assurance, or cyber security governance
• Experience operating across multiple business functions within complex enterprise environments
• Strong understanding of risk registers, controls frameworks, policy management, and assurance processes
• Knowledge of recognised frameworks such as ISO 27001, NIST, COBIT, ITIL, or equivalent
• Experience supporting large-scale technology, ERP, or SAP transformation programmes
• Excellent stakeholder management, communication, and influencing skills

Desirable Experience

• ISO 27001, CISSP, CISM, CISA, CRISC, CGEIT, PRINCE2, or similar certifications
• Experience working within regulated or highly governed environments
• SAP security, access governance, and Segregation of Duties (SoD) expertise
• Exposure to enterprise risk management, operational risk, or finance risk functions, You will be a commercially minded and hands-on Technology Risk & GRC professional with a proven track record of implementing governance, risk, and compliance improvements. Comfortable operating across both strategic and operational levels, you will be confident influencing senior stakeholders, navigating organisational complexity, and driving measurable outcomes rather than simply producing recommendations.