GRC Lead

<p class="text-muted mb-3">GRC Lead</p>

<p class="text-muted mb-3">Preston - hybrid</p>

<p class="text-muted mb-3">£70,000 - £75,000 + perm benefits</p>

<p class="text-muted mb-3">We're seeking an experienced GRC Lead to join a growing cyber security function, taking ownership of governance, risk and compliance activities across a complex stakeholder and supplier landscape.</p>

<p class="text-muted mb-3">This is a fantastic opportunity for a governance-focused cyber security professional who enjoys driving compliance, managing risk, influencing stakeholders and improving security maturity across an organisation. As the GRC Lead, you will act as a key point of contact between business stakeholders, suppliers and security teams, ensuring risks, controls and compliance obligations are effectively managed and reported.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Lead cyber governance, risk and compliance activities across the organisation.</p>

<p class="text-muted mb-3">Drive risk identification, assessment and remediation activities.</p>

<p class="text-muted mb-3">Oversee compliance against internal policies, regulatory</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements and security frameworks.</h5>

<p class="text-muted mb-3">Coordinate and challenge suppliers to ensure security obligations are being met.</p>

<p class="text-muted mb-3">Support internal and external audits, control reviews and assurance activities.</p>

<p class="text-muted mb-3">Maintain and enhance governance processes, risk registers and reporting frameworks.</p>

<p class="text-muted mb-3">Produce clear and meaningful reporting for senior stakeholders.</p>

<p class="text-muted mb-3">Promote a risk-aware culture and drive continuous improvement initiatives.</p>

<p class="text-muted mb-3">Experience in;</p>

<p class="text-muted mb-3">Cyber Security Governance, Risk & Compliance (GRC)</p>

<p class="text-muted mb-3">Risk Management and Control Framework</p>

<p class="text-muted mb-3">Audit, Assurance and Compliance Activities</p>

<p class="text-muted mb-3">Stakeholder and Supplier Engagement</p>

<p class="text-muted mb-3">Governance Reporting and Risk Communication</p>

<p class="text-muted mb-3">Working independently and driving outcomes</p>