Government Cyber GRC & Risk Lead

Government Recruitment Service; Greater London; On-site; GBP 59,000 - 71,000; Full time

Job summary

Government Recruitment Service is seeking an Information Security Governance, Risk & Compliance Manager (GRC) to lead the department's cyber governance program in London. You will drive risk-based decision making, align security policy with GovS 007, CAF, ISO 27001 and NIST CSF, and lead the central GRC function across the department.

You will provide expert risk advice to senior leaders and system owners, manage a GRC toolkit, and oversee assurance activities across the enterprise, ensuring

Qualifications

• Experience in cyber risk management and enterprise governance.
• Knowledge of GovS 007, CAF, ISO 27001 and NIST CSF.
• Experience leading a GRC team and providing risk guidance to senior stakeholders.

Responsibilities

• Drive the department's cyber security governance strategy and ensure alignment with GovS 007 and CAF.
• Lead the GovAssure programme and embed Secure by Design across initiatives.
• Own the cyber risk framework, policies, standards and risk thresholds for the department.
• Manage third-party and supply chain cyber risk assurance and engage with governance boards.

Skills

Risk management

Governance

Security policy

Stakeholder management

Leadership

Job description

Government Recruitment Service is seeking an Information Security Governance, Risk & Compliance Manager (GRC) to lead the department's cyber governance program in London. You will drive risk-based decision making, align security policy with GovS 007, CAF, ISO 27001 and NIST CSF, and lead the central GRC function across the department.

You will provide expert risk advice to senior leaders and system owners, manage a GRC toolkit, and oversee assurance activities across the enterprise, ensuring