Compliance Lead

Consortium; Bedford; Hybrid; GBP 70,000 - 95,000; Full time

Job summary

National Highways is recruiting a Compliance Lead within our Security Governance, Risk and Compliance (GRC) function to strengthen security compliance capability and drive robust controls across the organisation. You will lead the Compliance workstream, guiding GRC Analysts and ensuring obligations are assessed, monitored and managed.

This hybrid role involves collaboration with senior leaders, suppliers and technical teams to translate regulatory requirements into practical outcomes and

Qualifications

• Experience in security governance, risk and compliance with demonstrated impact.
• Ability to lead cross-functional teams and deliver through others.
• Experience supporting security audits, risk assessments and assurance reviews.

Responsibilities

• Lead and coordinate the Compliance workstream and provide oversight to GRC Analysts.
• Oversee security compliance assessments, audits and assurance reviews with evidence-based findings.
• Act as a senior SME for security compliance obligations and control requirements.
• Develop and deliver reporting on security compliance posture and remediation progress.
• Drive remediation of gaps with owners and leaders to ensure timely closure.

Skills

Security governance

Risk management

Compliance

Team leadership

Security audits

Stakeholder communication

Analytical thinking

Cyber security basics

Public sector security (UK)

Job description

Compliance Lead role within National Highways' Security Governance, Risk and Compliance function

Hybrid role with two days per week in office across any UK National Highways location

Requirement for SC clearance and five years UK residency for vetting

Responsibilities include leading compliance workstream, overseeing security audits, and driving remediation of compliance gaps

Qualifications include experience in security governance, risk, and compliance and strong analytical and communication skills

About the job.

As part of the development of our Digital Services function, we are recruiting to strengthen internal digital capability within Cyber Security, Digital Operational Services, and Digital Corporate and Shared Services. These roles are central to building sustainable in-house expertise that supports the management, development and delivery of digital solutions across the transport network.

As a Compliance Lead within our Security Governance, Risk and Compliance (GRC) function, you will play a key role in maintaining and strengthening National Highways' security compliance capability. You will lead the Compliance workstream, providing direction and oversight to GRC Analysts and ensuring our compliance obligations are effectively assessed, monitored, reported and managed.

Working across Digital Services and the wider organisation, you will partner with senior leaders, technical teams, suppliers and specialist functions to provide expert advice on security compliance, regulatory requirements and control effectiveness. You will help ensure compliance gaps are clearly understood risks are appropriately managed and mitigating actions are driven through to completion.

You will be part of a newly forming capability engagement and management supply chain, working across change programmes and business-as-usual activity to embed effective security compliance practices. This is an opportunity to develop your expertise and influence within a growing security function while contributing to the resilience and security of a nationally significant organisation.

This is a hybrid role, requiring two days per week in the office, and can be based at any National Highways office location across the UK, with some travel to attend team meetings.

Successful candidates will be required to hold or be willing to obtain SC clearance before starting employment. Five years' UK residency is normally required for the vetting process, although individual circumstances will be considered as part of the recruitment process.

• Lead and coordinate the Compliance workstream, providing direction, prioritisation and oversight to ensure high-quality outputs aligned with organisational and regulatory expectations.
• Oversee security compliance assessments, audits and assurance reviews across systems, services and business areas, ensuring findings are evidence-based, actionable and appropriately managed.
• Act as a senior subject matter expert, providing specialist advice to programmes, projects, operational teams and senior leaders on security compliance obligations, control requirements and identified gaps.
• Develop and deliver clear and accurate reporting on the organisation's security compliance posture, highlighting trends, risks, gaps and recommendations for improvement.
• Drive the remediation of compliance gaps, working with control owners, system owners and business leaders to ensure actions are assigned, tracked and completed, escalating risks where appropriate.

About you.

• Experience leading teams or workstreams within security governance, risk, compliance, audit or assurance, with the ability to prioritise activity and deliver through others.
• Experience leading or supporting security audits, risk assessments and assurance reviews, with the ability to evaluate controls, policies and evidence and produce clear findings.
• Strong understanding of cyber and information security principles, including security compliance requirements within a complex, multi-supplier environment.
• Strong analytical and communication skills, with the ability to interpret complex information and clearly communicate security risks and compliance requirements to both technical and non-technical audiences.
• Knowledge of UK public sector security and regulatory requirements, with the ability to stay current with relevant legislation, government requirements and recognised security frameworks.

About us.

Here at National Highways, we manage and improve England's motorways and major A roads, helping our customers have safer, smoother and more reliable journeys. Our priorities are safety, customers and delivery, and at the core of this, are our values of passion, integrity, safety, teamwork and ownership.

The Digital Services Directorate is helping to reshape the way National Highways operates by delivering digital, data, and technology services across all areas, from frontline to back office, in a modern and efficient manner. Our vision is to develop integrated information and technology that empowers our colleagues and provides real-time information to our customers, as well as integrating with intelligent vehicle and transport systems as they evolve, to enhance journey safety and reliability.

External candidates will be offered a starting salary at the lower end of the pay scale, while current employees will be appointed in accordance with our established pay policy.

We are committed to creating a diverse environment and welcome applicants from all backgrounds.