Cyber GRC Lead — Practical Risk & Compliance Champion

Elevation Recruitment Group; Leeds; Hybrid; GBP 50,000 - 60,000; Full time

Job summary

Elevation Tech & Transformation is recruiting a Cyber Governance, Risk & Compliance (GRC) Lead for a growing UK organisation. This hybrid Leeds-based role involves owning the Group cyber risk register, developing policies and embedding governance processes, with UK travel to subsidiaries.

You’ll apply NIST CSF and CIS Controls in practice, conduct risk assessments and report to senior leadership, building strong relationships across technical and business teams.

Qualifications

• Hands-on Cyber GRC experience with practical implementation.
• Familiar with NIST CSF and CIS Controls.
• Experience with ISO 27001, GDPR/NIS2 and cloud platforms.

Responsibilities

• Own and maintain the Group cyber risk register.
• Develop and embed security policies, standards and governance processes.
• Apply NIST CSF and CIS Controls in real-world environments.
• Support alignment with NIST CSF, CIS Controls and ISO 27001.
• Conduct cyber risk assessments across projects, systems and suppliers.
• Travel to subsidiaries and sites across the UK to build relationships and improve cyber maturity.
• Coordinate audits, assurance and compliance activity.
• Provide cyber risk reporting to senior leadership.
• Support third-party security assurance and supplier risk management.

Skills

Cyber GRC

NIST CSF

CIS Controls

ISO 27001

GDPR/NIS2

Tools

GRC platforms

Microsoft 365/Azure

Job description

Elevation Tech & Transformation is recruiting a Cyber Governance, Risk & Compliance (GRC) Lead for a growing UK organisation. This hybrid Leeds-based role involves owning the Group cyber risk register, developing policies and embedding governance processes, with UK travel to subsidiaries.

You’ll apply NIST CSF and CIS Controls in practice, conduct risk assessments and report to senior leadership, building strong relationships across technical and business teams.