GRC Lead

Adecco Portugal; Lancashire; Hybrid; GBP 70,000 - 75,000; Full time

Job summary

The GRC Lead role in Preston offers hybrid working and ownership of governance, risk and compliance across a complex stakeholder and supplier landscape. You will drive risk identification, remediation and reporting to senior stakeholders, and ensure controls align with policy and regulatory requirements.

Key duties include leading governance across the organisation, coordinating audits, maintaining risk registers and reporting frameworks, and challenging suppliers to meet security obligations

Qualifications

• Experience in Cyber Security GRC, risk management and compliance.
• Ability to drive governance across complex stakeholder and supplier landscape.
• Proven ability to report risk and compliance metrics to senior stakeholders.

Responsibilities

• Lead cyber governance, risk and compliance activities across the organisation.
• Drive risk identification, assessment and remediation activities.
• Oversee compliance against internal policies, regulatory requirements and security frameworks.
• Coordinate and challenge suppliers to ensure security obligations are being met.
• Support internal and external audits, control reviews and assurance activities.
• Maintain and enhance governance processes, risk registers and reporting frameworks.
• Produce clear and meaningful reporting for senior stakeholders.
• Promote a risk-aware culture and drive continuous improvement initiatives.

Skills

GRC

Risk Management

Stakeholder Engagement

Audits

Reporting

Job description

GRC Lead

Preston - hybrid

£70,000 - £75,000 + perm benefits

We're seeking an experienced GRC Lead to join a growing cyber security function, taking ownership of governance, risk and compliance activities across a complex stakeholder and supplier landscape. This is a fantastic opportunity for a governance-focused cyber security professional who enjoys driving compliance, managing risk, influencing stakeholders and improving security maturity across an organisation. As the GRC Lead, you will act as a key point of contact between business stakeholders, suppliers and security teams, ensuring risks, controls and compliance obligations are effectively managed and reported.

Key Responsibilities

• Lead cyber governance, risk and compliance activities across the organisation.
• Drive risk identification, assessment and remediation activities.
• Oversee compliance against internal policies, regulatory requirements and security frameworks.
• Coordinate and challenge suppliers to ensure security obligations are being met.
• Support internal and external audits, control reviews and assurance activities.
• Maintain and enhance governance processes, risk registers and reporting frameworks.
• Produce clear and meaningful reporting for senior stakeholders.
• Promote a risk-aware culture and drive continuous improvement initiatives.

Experience in;

• Cyber Security Governance, Risk & Compliance (GRC)
• Risk Management and Control Framework
• Audit, Assurance and Compliance Activities
• Stakeholder and Supplier Engagement
• Governance Reporting and Risk Communication
• Working independently and driving outcomes