Governance Risk and Compliance Lead (GRC) - Cyber

JR United Kingdom; London; On-site; GBP 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a Governance, Risk, and Compliance Lead to enhance its cybersecurity framework. This key role involves leading risk assessments, ensuring compliance, and mentoring junior professionals in a collaborative environment. With a focus on third-party risk management and regulatory compliance, you'll have the opportunity to shape the security landscape of a global financial institution. Join a dynamic team that values continuous learning and offers significant career progression. If you're ready to tackle complex challenges in a fast-paced setting, this role is for you.

Qualifications

• 6+ years of GRC experience in cybersecurity, ideally in financial services.
• Proven capability in third-party risk management and compliance frameworks.

Responsibilities

• Lead third-party risk assessments and improve vendor governance processes.
• Develop and deliver enterprise-wide awareness training and phishing simulations.

Skills

Governance, Risk, and Compliance (GRC)

Third-party risk management

Regulatory compliance

Audit readiness

Communication skills

Education

Bachelor's degree in a relevant field

Certifications (CISA, CRISC, CISM, CISSP)

Tools

InfoSec training solutions (e.g., Ninjio)

Third-party risk platforms (e.g., Venminder)

Microsoft O365 suite

Job description

Social network you want to login/join with:

Governance Risk and Compliance Lead (GRC) - Cyber, London

Client: Marlin Selection Recruitment

Location: London, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 1

Posted: 02.05.2025

Expiry Date: 16.06.2025

Job Description:

GRC Lead – Cybersecurity (Financial Services)

London | Competitive Package

We're partnering with a leading global financial services firm to appoint a Governance, Risk, and Compliance (GRC) Lead into their high-performing Information Security function. This is an exciting opportunity to join a fast-paced, globally recognised institution with a mature cyber programme and significant investment in its security posture.

As a trusted search partner, we’re looking for an experienced and strategic GRC professional who can bring deep subject matter expertise across third-party risk, regulatory compliance, audit readiness, and awareness training. You’ll play a pivotal role in helping the firm navigate the evolving threat landscape while maintaining compliance with complex global regulations.

The Opportunity

Sitting within a dynamic global InfoSec team, you’ll be responsible for:

• Leading third-party risk assessments and driving continuous improvement of vendor governance processes.
• Owning client due diligence responses, ensuring the business meets external compliance and assurance requirements.
• Developing and delivering enterprise-wide awareness training, phishing simulations, and educational campaigns.
• Advising technical teams and stakeholders on controls around access management, incident handling, BCP, SDLC, and data protection.
• Supporting audits and regulatory engagements, including evidence gathering and remediation tracking.
• Facilitating a governance programme around risk acceptances and policy exceptions.
• Mentoring junior GRC professionals and driving internal knowledge sharing.

What We’re Looking For

We’re keen to speak with individuals who bring:

• 6+ years of experience in GRC within cybersecurity, ideally in financial services or highly regulated environments.
• Proven capability in third-party risk management, client due diligence, and compliance frameworks (e.g., NIST, ISO 27001, DORA).
• Experience in managing audits and regulatory engagements across multiple jurisdictions.
• Excellent communication skills – able to translate complex technical concepts to non-technical stakeholders.
• A collaborative, proactive approach with the ability to thrive in a global, fast-moving organisation.
• Bonus points if you hold certifications such as CISA, CRISC, CISM, CISSP or equivalent.

Tools You Might Use

Familiarity with platforms such as:

• InfoSec training solutions (e.g., Ninjio)
• Third-party risk platforms (e.g., Venminder, CyberGRX, Upguard)
• Microsoft O365 suite

Why Apply?

This is a high-impact role offering direct visibility with senior stakeholders, the chance to shape security posture across a global organisation, and real opportunities for career progression. You’ll be supported by a collaborative team culture, continuous learning, and the ability to influence how cyber risk is managed across a major financial institution.

If you would like to discuss this role in confidence, reach out to Javed Hussain at 0208 142 3930 or [emailprotected]