Governance, Risk & Compliance Manager

Are you a cybersecurity professional seeking an exciting new opportunity? This is an opportunity to lead at the front line of cybersecurity, delivering value to our varied client base.

As Governance, Risk & Compliance (GRC) Manager, you will be leading all aspects of the development and implementation of comprehensive risk management and compliance strategies. You will work closely with senior leadership to align GRC initiatives with business objectives and manage a team of developing and experienced GRC professionals.

You will play a lead role in helping our clients understand their security challenges and then specify, plan, and implement projects to improve their security posture.

What you will be doing:

1. Lead security activities for large client engagements, maintaining stakeholder relationships and aligning security controls with objectives.
2. Understand and address customer requirements creatively and innovatively.
3. Formulate security strategy using technical and management principles.
4. Prioritize market trends, business strategies, and identify the benefits of alternative strategies.
5. Foster innovation within ADS Cyber Security and support.
6. Lead complex audits and assessment programs.
7. Implement compliance programs against legal, regulatory, and industry standards.
8. Lead security aspects of bid responses and opportunity identification.
9. Develop technical control roadmaps aligning organizational plans with requirements.
10. Promote awareness of cybersecurity threats and methodologies within the team.
11. Support recruitment activities and engage with the Cyber Security Community of Expertise.

What you will bring:

1. Successful track record leading GRC teams and large client engagements.
2. Cyber/information security qualification (e.g., CISSP, CISM, CCSP, ISO27001 Lead Auditor, CRISC).
3. Strong client management and relationship-building skills.
4. Effective communication across technical and non-technical audiences, assessing risk and understanding new technologies.
5. Experience in leading engagements including ISMS implementation, risk assessments, and compliance audits.
6. Proficient project management, balancing multiple initiatives and priorities.
7. Strong leadership, influencing, and people management abilities.

It would be great if you had:

1. Cloud security implementation experience.
2. Identity and Access Management.
3. Operational Technology.
4. Security Architecture Principles.

If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply. We’d love to hear from you!

Security Clearance Level: Must be eligible for Security Clearance
Referral Bonus: £1500
Salary: Will be in line with experience and development needs

Although this role is advertised as full-time, we believe that flexibility at work can promote work/life balance, increase motivation, reduce stress, and improve performance and productivity. We support different ways of working and can offer a range of flexible working arrangements. If you’re interested and need to work flexibly, we encourage you to apply and discuss what might be possible.

Loved reading about this job and want to know more about ADS?

Sopra Steria’s Aerospace, Defence and Security business designs, develops, and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client’s goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and take pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK’s most complex safety- and security-critical markets.