GRC Lead: AI-Driven Security, Risk & Compliance

JD Williams & Company Limited; Greater Manchester; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid working

Annual bonus scheme

Pension with company contributions

Mental Health support

Job summary

N Brown is seeking an Information Security Governance, Risk and Compliance Lead to modernise and automate GRC processes within a cloud-first Digital Operations environment. You will lead a team of GRC analysts, drive risk lifecycle management, and align controls with regulatory demands across PCI DSS, GDPR, and UK DPA 2018.

The role offers hybrid working in Manchester, a strong emphasis on AI-powered risk insights, and a culture of continuous improvement and innovation.

Qualifications

• ISO27001 and NIST CSF knowledge and practical application in agile, cloud-first environments.
• Experience using AI/LLMs to enhance risk or compliance workflows is a plus.
• Proficiency with enterprise workflow tools and automation rules.

Responsibilities

• AI & Automation: implement AI-driven tools to automate GRC tasks and regulatory mappings.
• Risk Management: own end-to-end risk lifecycle and ensure evidence-based reviews.
• Third-Party Assurance: conduct due diligence and re-reviews for the supply chain.
• Control Excellence: define, test, and mature key controls with clear evidence delivery.
• Regulatory Compliance: maintain PCI DSS, GDPR, and UK DPA 2018 posture.
• Security Culture: drive awareness strategies with data-driven simulations.
• Governance Oversight: provide automated KRIs and remediation reporting.
• Policy & Guardrails: maintain and evolve information security policies and guardrails.
• Audit Liaison: coordinate internal and external audit findings and remediation.

Skills

GRC mindset

Risk expert

Workflow tooling

Technical fluency

Influencer & partner

Problem solver

Leadership

Job description

N Brown is seeking an Information Security Governance, Risk and Compliance Lead to modernise and automate GRC processes within a cloud-first Digital Operations environment. You will lead a team of GRC analysts, drive risk lifecycle management, and align controls with regulatory demands across PCI DSS, GDPR, and UK DPA 2018.

The role offers hybrid working in Manchester, a strong emphasis on AI-powered risk insights, and a culture of continuous improvement and innovation.