Head Of Governance, Risk & Compliance

I’m recruiting for a Head of Governance, Risk & Compliance with a specialist software provider to the insurance industry.

This is a broad senior role spanning GRC, regulatory compliance, internal audit, Quality Assurance, risk, SDLC governance and AI governance , with a key focus on ensuring software development and releases remain aligned with evolving regulation .

My client already has an established governance environment, including ISO 27001, PCI-DSS and Cyber Essentials Plus , so this is about strengthening and evolving what's already in place rather than starting from scratch.

I’m looking for someone with:

• Strong GRC/Compliance experience
• Exposure to technology/software and ideally insurance
• An understanding of application development and SDLC
• The ability to interpret regulation and turn it into practical controls
• Strong stakeholder management and influencing skills
• Experience across risk, controls and internal audit
• Knowledge of areas such as DORA, NIS2 and CRA would be valuable, but direct DORA experience isn’t essential .

The sweet spot is someone whose background is weighted towards GRC/Compliance , but who has sufficient technology knowledge to work confidently with development and technical teams.