GRC Lead

Adecco Portugal; Preston; Hybrid; GBP 70,000 - 75,000; Full time

Benefits offered by this job

Hybrid work arrangement

Permanent role with benefits

Job summary

A GRC Lead position in Preston offers a hybrid working arrangement with a strong emphasis on governance, risk and compliance across a complex stakeholder and supplier landscape. You will drive risk identification, remediation and assurance activities, ensuring regulatory and internal controls are met.

Ideal candidates will have extensive GRC and audit experience, stakeholder engagement skills and the ability to report clearly to senior leadership while promoting continuous security maturity

Qualifications

• Extensive experience in cyber security GRC and risk management.
• Ability to manage governance, risk and compliance across multiple stakeholders.
• Experience coordinating supplier security obligations and audits.
• Strong reporting and risk communication to senior stakeholders.
• Independent worker with proven outcome delivery.

Responsibilities

• Lead cyber governance, risk and compliance activities across the organisation.
• Drive risk identification, assessment and remediation activities.
• Oversee compliance against internal policies, regulatory requirements and security frameworks.
• Coordinate and challenge suppliers to ensure security obligations are being met.
• Support internal and external audits, control reviews and assurance activities.
• Maintain and enhance governance processes, risk registers and reporting frameworks.
• Produce clear and meaningful reporting for senior stakeholders.
• Promote a risk-aware culture and drive continuous improvement initiatives.

Skills

GRC

Governance

Risk management

Compliance

Audit

Stakeholder engagement

Job description

GRC Lead

Preston - hybrid

£70,000 - £75,000 + perm benefits

We're seeking an experienced GRC Lead to join a growing cyber security function, taking ownership of governance, risk and compliance activities across a complex stakeholder and supplier landscape. This is a fantastic opportunity for a governance-focused cyber security professional who enjoys driving compliance, managing risk, influencing stakeholders and improving security maturity across an organisation. As the GRC Lead, you will act as a key point of contact between business stakeholders, suppliers and security teams, ensuring risks, controls and compliance obligations are effectively managed and reported.

Key Responsibilities

• Lead cyber governance, risk and compliance activities across the organisation.
• Drive risk identification, assessment and remediation activities.
• Oversee compliance against internal policies, regulatory requirements and security frameworks.
• Coordinate and challenge suppliers to ensure security obligations are being met.
• Support internal and external audits, control reviews and assurance activities.
• Maintain and enhance governance processes, risk registers and reporting frameworks.
• Produce clear and meaningful reporting for senior stakeholders.
• Promote a risk-aware culture and drive continuous improvement initiatives.

Experience in

• Cyber Security Governance, Risk & Compliance (GRC)
• Risk Management and Control Framework
• Audit, Assurance and Compliance Activities
• Stakeholder and Supplier Engagement
• Governance Reporting and Risk Communication
• Working independently and driving outcomes