Governance, Risk & Compliance Lead

Elevation Recruitment Group; Leeds; Hybrid; GBP 65,000 - 105,000; Full time

Job summary

Elevation Recruitment Group is partnering with a growing UK organisation to recruit a Cyber Governance, Risk & Compliance (GRC) Lead. Hybrid in Leeds with UK travel, reporting to the Group Information Security Officer, you will own governance across the Group.

You will develop policies, conduct risk assessments, coordinate audits and produce senior leadership reports. This requires strong knowledge of NIST CSF, CIS Controls and ISO 27001 and experience with GRC platforms.

Qualifications

• Strong knowledge of NIST CSF, CIS Controls and ISO 27001.
• Experience conducting cyber risk assessments and supporting audits.
• Ability to develop policies, standards and governance documentation.

Responsibilities

• Maintain and develop governance frameworks and documentation.
• Coordinate internal and external audits and regulatory requirements.
• Produce cyber risk and assurance reporting for senior leadership.
• Support third-party security assurance and supplier risk management.

Skills

NIST CSF

CIS Controls

ISO 27001

Cyber risk assessment

Policy development

Stakeholder engagement

Tools

GRC platforms

Job description

Cyber Governance, Risk & Compliance (GRC) Lead

Location: Hybrid (Leeds with UK travel)

Elevation Tech & Transformation are exclusively recruiting for a newly created Cyber Governance, Risk & Compliance (GRC) Lead on behalf of a growing UK organisation.

This is an exciting opportunity to join a business investing heavily in its cyber security capability. Reporting to the Group Information Security Officer (GISO), you'll take ownership of cyber governance across the Group, working closely with senior stakeholders to strengthen security, risk and compliance practices.

This role would suit a proactive Cyber GRC professional who enjoys working autonomously, influencing change and building strong relationships across multiple businesses.

Key Responsibilities

• Maintain and develop the Group cyber risk register.
• Develop and maintain security policies, standards and governance documentation.
• Support and improve cyber governance frameworks including NIST CSF, CIS Controls and ISO 27001.
• Conduct cyber risk assessments across projects, systems and suppliers.
• Coordinate internal and external audits and compliance activities.
• Produce cyber risk and assurance reporting for senior leadership.
• Support third-party security assurance and supplier risk management.
• Promote cyber security awareness and good governance across the organisation.

About You

You'll have experience in Cyber Governance, Risk & Compliance and be confident working independently within a collaborative environment.

You'll also bring:

• Strong knowledge of NIST CSF, CIS Controls and ISO 27001.
• Experience conducting cyber risk assessments and supporting audits.
• The ability to develop policies, standards and governance documentation.
• Excellent communication skills, with confidence engaging senior stakeholders.
• A proactive approach with the ability to manage multiple priorities.

Experience with GRC platforms, ISO 27001 certification, GDPR/NIS2, cloud security (Microsoft 365/Azure) or security certifications (CISA, CISSP, CRISC, Security+ etc.) would be advantageous.

This is a fantastic opportunity to join a growing organisation where you'll have genuine ownership, visibility and the chance to shape cyber governance across the Group.