GRC Lead

BOSS ERP Consulting; Manchester; Hybrid; GBP 49,000 - 89,000; Full time

Benefits offered by this job

Hybrid working pattern

Job summary

BOSS ERP Consulting in the United Kingdom seeks a GRC Lead to oversee cyber security risks across a multi-supplier landscape from Manchester, with a hybrid pattern (80% remote/20% onsite). This six-month contract role focuses on governance, supplier risk, and compliance, offering a day rate of £500 inside IR35.

The candidate will coordinate risk assessments, drive remediation actions, and deliver governance reporting across supplier engagements, ensuring alignment with ISO 27001, NIST CSF, and

Qualifications

• Active SC clearance and British citizenship required.
• Must not have left the UK for more than 28 consecutive days in the last 5 years.
• Experience in cyber security risk oversight across suppliers.
• Familiar with ISO 27001, NIST CSF, NCSC guidance, and Secure by Design principles.

Responsibilities

• Maintain oversight of cyber security risks across suppliers.
• Ensure risks are identified, assessed, recorded, tracked, and escalated.
• Govern risk acceptance and exception management processes.
• Support risk-based prioritisation across security disciplines.
• Coordinate supplier compliance activities within the SIAM framework.
• Validate supplier adherence to agreed security requirements.
• Monitor security performance against contractual obligations.
• Drive accountability for control weaknesses, non-compliance, and improvement actions.
• Maintain visibility of compliance obligations and control requirements.
• Support compliance against relevant frameworks and standards.
• Coordinate remediation of identified compliance gaps.
• Produce consolidated security governance reporting.
• Provide visibility of security risks, compliance status, control effectiveness, supplier performance, and assurance findings.
• Present governance information to client stakeholders and governance forums.
• Support strategic planning and risk-informed decision making.
• Drive security governance maturity improvements across the supplier landscape.
• Identify opportunities to improve risk management, compliance processes, assurance effectiveness, and security governance practices.
• Support continuous improvement programmes across the cyber security operating model.
• Facilitate cross-supplier resolution of governance issues.

Skills

Cyber security governance

Supplier risk oversight

Risk management

Compliance processes

Assurance effectiveness

Security governance practices

ISO 27001

NIST CSF

NCSC guidance

Secure by Design

Tools

SIAM framework

Job description

Salary: £49,000 - 89,000 per year

Requirements

• We require an active SC clearance and British citizenship.
• We require that the candidate has not been outside the UK for more than 28 consecutive days during the last 5 years.
• We are looking for experience in cyber security risk oversight across suppliers.
• We are looking for experience with risk management, compliance processes, assurance effectiveness, and security governance practices.
• We require familiarity with frameworks and standards such as ISO 27001, NIST CSF, NCSC guidance, and Secure by Design principles.

Responsibilities

• We maintain oversight of cyber security risks across suppliers.
• We ensure risks are identified, assessed, recorded, tracked, and escalated appropriately.
• We govern risk acceptance and exception management processes.
• We support risk-based prioritisation across security disciplines.
• We coordinate supplier compliance activities within the SIAM framework.
• We validate supplier adherence to agreed security requirements.
• We monitor security performance against contractual obligations.
• We drive accountability for control weaknesses, non-compliance, and improvement actions.
• We maintain visibility of compliance obligations and control requirements.
• We support compliance against relevant frameworks and standards.
• We coordinate remediation of identified compliance gaps.
• We produce consolidated security governance reporting.
• We provide visibility of security risks, compliance status, control effectiveness, supplier performance, and assurance findings.
• We present governance information to client stakeholders and governance forums.
• We support strategic planning and risk-informed decision making.
• We drive security governance maturity improvements across the supplier landscape.
• We identify opportunities to improve risk management, compliance processes, assurance effectiveness, and security governance practices.
• We support continuous improvement programmes across the cyber security operating model.
• We facilitate cross-supplier resolution of governance issues.

Technologies

• Support
• Security

More

We are recruiting for a GRC Lead contract role based in Manchester with a hybrid working pattern of 80% remote and 20% onsite. The assignment is for an initial 6 months, with possible extension, and is offered at a day rate of £500 inside IR35. The role focuses on cyber security governance, supplier risk, compliance, assurance, and reporting across the supplier landscape.

last updated 38 week of 2026