GRC Lead

Walkers; Greater London; On-site; GBP 85,000 - 110,000; Full time

Job summary

Walkers is seeking a Governance, Risk and Compliance Lead to manage the ISMS globally, developing policy, risk management and audit capabilities. You will liaise with senior management across regions and drive security improvements within a 40% hybrid London office environment.

The role requires ISO 27001/2 2022 expertise, risk framework experience, and relevant certifications alongside strong communication and leadership skills for coordinating audits and training across dispersed teams.

Qualifications

• Proven experience in assessing information security risk and developing an ISMS.
• Experience of ISO 27001/2 version 2022.
• Experience of risk frameworks such as ISO 27005/31000.
• Knowledge of applicable data privacy practices and laws.
• Demonstrable experience in a similar role.
• ISO 27001 Lead Implementer / Lead Auditor certification or, extensive security audit experience
• CISSP and CISM or equivalent certifications
• Strong written, oral and presentation communication skills.

Responsibilities

• Oversee ISMS across Walkers globally and report to ISSC.
• Lead policy development, risk assessment and audits.
• Coordinate internal and external audits and certifications.
• Manage third-party security providers and consultants.
• Develop security awareness program and phishing simulations.
• Drive improvement of security governance and documentation.

Skills

ISMS management

Risk assessment

ISO 27001/2 knowledge

Security governance

Audit coordination

Security awareness

Communication skills

Presentation skills

Project coordination

Self-motivation

Education

ISO 27001 Lead Implementer / Lead Auditor certification

CISSP / CISM certification

Bachelor's degree in IT/related field

Job description

Office: London (40% min hybrid required)

We are a leading international law firm for global corporations, financial institutions, capital market participants and investment fund managers. With a global presence spanning the Americas, Europe, the Middle East and Asia, we advise on the laws of Bermuda, the British Virgin Islands, the Cayman Islands, Guernsey, Ireland and Jersey.

We treat everyone as the intelligent professional they are. Our approach is to trust and empower our people to deliver consistently, and enable them to succeed. Diversity is our secret weapon – it’s the sheer breadth of Walkers people that makes us who we are – gathered from across the globe and fluent in languages, jurisdictions and cultures that help us to mirror our clients and keep our own thinking in tune with the world in which we operate.

Overview Of Role

The Governance, Risk, and Compliance Lead will be responsible for the management of the Information Security Management System (ISMS) across Walkers globally. This covers a broad range of information security activities including policy development, risk management, internal and external audit and compliance. It will involve communication with senior management across all regions, liaising with internal teams, and development of the firm’s security capabilities to meet the changing needs of clients. The role will be responsible for managing the change governance of projects through business change partnering.

Duties, Responsibilities & Person Specification

• ISMS Management
• Communicate to senior management on risks and requirements
• Understand business objectives and support development of budget for information security objectives
• Develop and maintain security compliance program
• Provide support where necessary to local offices to update and maintain country specific IS documentation
• Establish security metrics to assess effectiveness
• Coordinate and maintain the management review process
• Make written and oral reports to ISSC
• Security Audits
• Manage internal and external audits and certifications
• Manage third party providers including security consultants and assessors
• Security Awareness
• Ownership of the Security Awareness Program and the Security Awareness Centre and support of Security Culture Change including owning and managing the quarterly phishing simulation campaigns and the third party relationship.
• Improvement management
• Manage identified improvements through to completion
• Policy
• Develop, maintain and publish security strategies, policies and procedures
• Manage security policy and implementation
• Support global IT departments on implementation of security policy and products

Education, Skills & Experience

• Proven experience in assessing information security risk and developing an ISMS.
• Experience of ISO 27001/2 version 2022.
• Experience of risk frameworks such as ISO 27005/31000.
• Knowledge of applicable data privacy practices and laws.
• Demonstrable experience in a similar role.
• ISO 27001 Lead Implementer / Lead Auditor certification or, extensive security audit experience
• CISSP and CISM or equivalent certifications
• Strong written, oral and presentation communication skills.
• Excellent inter-personal skills and ability to present ideas and proposals in user‑friendly language.
• A passion for information security and keeping current on emerging technologies, regulations, threats and trends.
• Highly self‑motivated and directed, with a hands‑on approach.
• Good technical‑writing skills and the ability to prepare quality documentation, reports and training material.
• Able to effectively prioritise tasks in a high‑pressure environment.
• Experience working in a geographically dispersed team‑oriented, collaborative environment.

Please note; this position requires the ability and willingness to occasionally work outside normal working hours/days when requested. Additionally, an understanding that international business travel may be necessary.

Walkers global is an equal opportunity employer. Equality and diversity are key to our global identity and an integral part of our goal to continue being an employer of choice. We are committed to a work environment that supports all individuals irrespective of gender, ethnicity, nationality, race, religion, marital status, age, disability, pregnancy, sexual orientation, gender identity or any other applicable legally protected characteristics. We make every effort to ensure that employment opportunities are open and accessible to all purely on the basis of personal ability.