AI-Driven GRC Lead: InfoSec, Risk & Compliance

JD Williams & Company Limited; Manchester; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working (1-2 days per week in 1

Job summary

N Brown is seeking an Information Security Governance, Risk and Compliance Lead to modernise risk and compliance in a cloud-first Digital Operations setup. You will guide a team of GRC analysts, drive automation, and ensure regulatory obligations are met across PCI DSS and GDPR.

You will partner with stakeholders to balance robust governance with agile delivery, reporting on KRIs and control effectiveness, and shaping policy and guardrails for a modern security program.

Qualifications

• Experience implementing AI/LLMs to enhance GRC workflows.
• Deep understanding of ISO27001 and NIST CSF in agile, cloud-first environments.
• Experience with cloud platforms (AWS/Azure) and risk-based controls.
• Proficiency with enterprise workflow tools and automation rules.
• Ability to translate security risks into business impact for stakeholders.
• Proven leadership and coaching of GRC analysts.
• Proactive identification of evidence gaps and remediation actions.

Responsibilities

• Lead AI-driven tools to automate routine GRC tasks and evidence gathering.
• Own end-to-end risk lifecycle; assess and review risk in line with governance forums.
• Oversee security due diligence for the supply chain using automation.
• Define, test and mature key controls with clear assurance delivery.
• Maintain PCI DSS, GDPR, and UK DPA 2018 compliance posture.
• Drive security awareness strategy across Tribes and functions.
• Provide automated reporting on KRIs, control effectiveness and remediation.
• Maintain Information Security Policy framework and guardrails.

Skills

AI & Automation

Risk Management

Third-Party Assurance

Control Excellence

Regulatory Compliance

Security Culture

Governance Oversight

Policy & Guardrails

Audit Liaison

Job description

N Brown is seeking an Information Security Governance, Risk and Compliance Lead to modernise risk and compliance in a cloud-first Digital Operations setup. You will guide a team of GRC analysts, drive automation, and ensure regulatory obligations are met across PCI DSS and GDPR.

You will partner with stakeholders to balance robust governance with agile delivery, reporting on KRIs and control effectiveness, and shaping policy and guardrails for a modern security program.