Cyber GRC Lead – Hybrid, Regulated Infrastructure

Matchtech; Greater London; Hybrid; GBP 90,000 - 125,000; Full time

Job summary

Matchtech is seeking a Cyber Security Governance, Risk & Compliance Lead for a permanent role in London, offering hybrid working. The role focuses on regulatory engagement with Ofgem and auditors, NIS/NIS2, ECAF, and ISO 27001 to enhance cyber resilience and compliance across the organisation.

The successful candidate will drive risk assessments, supplier risk, and governance across the cyber security program, reporting to senior leadership and the Board.

Qualifications

• Significant experience in cyber security governance, risk and compliance within regulated environments.
• Strong knowledge of risk assessments, risk registers and treatment plans.
• Experience with third‑party management and supplier risk assessments.
• Understanding of NIS Regulations, NIS2, Ofgem, ECAF and ISO 27001 governance.

Responsibilities

• Act as the primary point of contact for cyber security regulatory engagement with Ofgem, auditors and external stakeholders.
• Coordinate regulatory submissions, NIS self‑assessments, improvement plans and evidence packs.
• Lead assurance activities across NIS Regulations, NIS2, Ofgem requirements, ECAF and ISO 27001.
• Monitor evolving cyber security legislation and guidance, translating into actionable compliance actions.
• Maintain Cyber Security Risk Register with current threat scenarios and mitigations.
• Support governance and status reporting of the Cyber Security Roadmap and third‑party deliverables.
• Develop and maintain a cyber security supply chain assurance programme with due diligence.

Skills

Cyber governance

Risk management

Regulatory compliance

Stakeholder management

Audit support

Supplier risk

ISMS understanding

Job description

Matchtech is seeking a Cyber Security Governance, Risk & Compliance Lead for a permanent role in London, offering hybrid working. The role focuses on regulatory engagement with Ofgem and auditors, NIS/NIS2, ECAF, and ISO 27001 to enhance cyber resilience and compliance across the organisation.

The successful candidate will drive risk assessments, supplier risk, and governance across the cyber security program, reporting to senior leadership and the Board.