GRC Information Security Lead: Governance, Risk & Compliance

Cabinet Office; Bristol; In loco; GBP 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

Cabinet Office is seeking an Information Security Governance, Risk & Compliance (GRC) Manager to lead the GRC team and drive the organisation's cyber governance strategy. Reporting to the Head of Information Security, you will ensure resilience of critical systems and digital services against evolving threats.

You will govern the risk framework, manage GovAssure, embed Secure by Design, and present risk trade-offs to senior leadership while overseeing budgets and GRC tooling contracts.

Competenze

• Experience delivering cyber risk governance and assurance frameworks.
• Ability to define and maintain risk methodologies and thresholds.
• Strong collaboration with senior leadership and stakeholders.

Mansioni

• Own and lead the GRC framework and risk management processes.
• Manage GovAssure programme and central GRC tooling.
• Embed Secure by Design across lifecycle of digital projects.
• Present risk trade-offs to non-technical leadership on governance boards.
• Oversee budget and contract management for GRC tooling and education platforms.
• Lead risk workshops and provide actionable risk intelligence.

Conoscenze

Governance

Risk management

Policy development

GRC tooling

Stakeholder management

Strumenti

GRC platforms

Descrizione del lavoro

Cabinet Office is seeking an Information Security Governance, Risk & Compliance (GRC) Manager to lead the GRC team and drive the organisation's cyber governance strategy. Reporting to the Head of Information Security, you will ensure resilience of critical systems and digital services against evolving threats.

You will govern the risk framework, manage GovAssure, embed Secure by Design, and present risk trade-offs to senior leadership while overseeing budgets and GRC tooling contracts.