GRC Cyber Security Manager | Strategic Risk & Compliance

Essex Partnership NHS Foundation Trust; Grays; On-site; GBP 49,000 - 57,000; Full time

Benefits offered by this job

27 days annual leave

Pension of up to 14.5%

Relocation package

Staff discounts

Season ticket loans

Job summary

Essex Partnership University NHS Foundation Trust is recruiting a Cyber Security Manager – Governance, Risk & Compliance (GRC) to lead cyber assurance across the Trust. Reporting to the Associate Director of Information Security, you will shape risk management, governance frameworks and compliance in a complex NHS environment.

You will work with senior stakeholders, coordinate audits, and oversee a penetration testing program, incident preparedness and team development.

Qualifications

• Expert knowledge of cyber security governance, risk and compliance.
• Experience with ISO 27001, CAF, DSPT, COBIT or similar standards.
• Proven ability to lead risk management, audits and assurance programmes.
• Experience managing security incidents, vulnerability management and monitoring.
• Demonstrated success leading teams, driving change and meeting deadlines.
• Excellent analytical, problem-solving and decision-making skills.
• Outstanding communication and stakeholder engagement with senior levels.
• Experience in large complex organisations (NHS/public sector desirable).
• Relevant professional certifications (CISM, CISA, CRISC, CGRC) or equivalent.
• Driven, proactive, resilient under pressure; collaborative and adaptable.
• Passionate about cyber security and emerging technologies.
• Able to simplify complexity and bring clarity to issues.

Responsibilities

• Lead governance and assurance, aligning with ISO 27001, CAF and DSPT; deliver assurance reports to senior and board-level stakeholders.
• Identify, assess and mitigate cyber risks; coordinate audits and evidence.
• Lead penetration testing programme and monitor remediation, KRIs and control effectiveness.
• Develop incident response planning and tabletop exercises with cross-functional teams.
• Lead and develop the cyber security team, managing resources and priorities.
• Engage stakeholders and communicate complex risks to senior leadership.

Skills

GRC leadership

ISO 27001

COBIT

DSPT

risk management

audits

stakeholder engagement

leadership

communication

public sector experience

certifications (CISM, CISA, CRISC, CGR

Job description

Essex Partnership University NHS Foundation Trust is recruiting a Cyber Security Manager – Governance, Risk & Compliance (GRC) to lead cyber assurance across the Trust. Reporting to the Associate Director of Information Security, you will shape risk management, governance frameworks and compliance in a complex NHS environment.

You will work with senior stakeholders, coordinate audits, and oversee a penetration testing program, incident preparedness and team development.