IT GRC Lead

Robert Half are recruiting a Group IT GRC Lead on behalf of a Group organisation. Reporting into the Group ISO, you will lead cyber governance, risk and compliance initiatives, supporting the development of security frameworks, managing cyber risk and ensuring compliance across multiple business units

The right person for this role will be pragmatic, logical and methodical in thinking. Having the confidence to report up to board and disseminate information to the various business units is essential.

• Strong knowledge of NIST CSF, CIS Controls and ISO 27001
• Ownership of GRC and Cyber best practices
• Experience conducting risk assessments, audits and compliance reviews
• Ability to develop security policies, standards and governance processes
• Strong stakeholder management and communication skills, including reporting to senior leadership
• Understanding of vulnerability management and security controls

Desirable Requirements

• Experience with GRC platforms
• Exposure to supplier assurance and ISO 27001 certification audits
• Understanding of cloud security, particularly Microsoft 365 and Azure
• Relevant certifications such asSecurity+, CISA, CRISC, CISSP or ISO 27001 Lead Implementer