Gov Cyber GRC Lead – Security Policy & Risk Strategy

Cabinet Office; City of Westminster; On-site; GBP 80,000 - 110,000; Full time

Job summary

Cabinet Office seeks an Information Security Governance, Risk & Compliance Manager to lead the GRC team, drive the cyber governance strategy, and ensure resilience across critical systems. You will bridge executive strategy and technical implementation, advising SIROs and risk committees while embedding SbD and GovS 007 controls.

Reporting to the Head of Information Security, you will own risk methodologies, oversee the central GRC tool, manage spend, and maintain security maturity across

Qualifications

• Experience in cyber risk management and information security governance.
• Ability to align security strategy with GovS 007, CAF, ISO 27001 and NIST CSF.
• Strong leadership to manage a GRC team and engage senior stakeholders.

Responsibilities

• Drive the departmental cyber security governance strategy and GovS 007 alignment.
• Lead GRC platform engineering, risk reporting, and central risk maturity efforts.
• Oversee GovAssure programme and embed Secure by Design across digital initiatives.
• Represent Cyber Security on governance boards and lead risk workshops with technical and business leads.
• Manage budgets and contract relations for GRC tooling and security education platforms.

Job description

Cabinet Office seeks an Information Security Governance, Risk & Compliance Manager to lead the GRC team, drive the cyber governance strategy, and ensure resilience across critical systems. You will bridge executive strategy and technical implementation, advising SIROs and risk committees while embedding SbD and GovS 007 controls.

Reporting to the Head of Information Security, you will own risk methodologies, oversee the central GRC tool, manage spend, and maintain security maturity across