GRC Lead: Cyber Governance & Risk Champion

Adecco Portugal; Lancashire; Hybrid; GBP 70,000 - 75,000; Full time

Job summary

The GRC Lead role in Preston offers hybrid working and ownership of governance, risk and compliance across a complex stakeholder and supplier landscape. You will drive risk identification, remediation and reporting to senior stakeholders, and ensure controls align with policy and regulatory requirements.

Key duties include leading governance across the organisation, coordinating audits, maintaining risk registers and reporting frameworks, and challenging suppliers to meet security obligations

Qualifications

• Experience in Cyber Security GRC, risk management and compliance.
• Ability to drive governance across complex stakeholder and supplier landscape.
• Proven ability to report risk and compliance metrics to senior stakeholders.

Responsibilities

• Lead cyber governance, risk and compliance activities across the organisation.
• Drive risk identification, assessment and remediation activities.
• Oversee compliance against internal policies, regulatory requirements and security frameworks.
• Coordinate and challenge suppliers to ensure security obligations are being met.
• Support internal and external audits, control reviews and assurance activities.
• Maintain and enhance governance processes, risk registers and reporting frameworks.
• Produce clear and meaningful reporting for senior stakeholders.
• Promote a risk-aware culture and drive continuous improvement initiatives.

Skills

GRC

Risk Management

Stakeholder Engagement

Audits

Reporting

Job description

The GRC Lead role in Preston offers hybrid working and ownership of governance, risk and compliance across a complex stakeholder and supplier landscape. You will drive risk identification, remediation and reporting to senior stakeholders, and ensure controls align with policy and regulatory requirements.

Key duties include leading governance across the organisation, coordinating audits, maintaining risk registers and reporting frameworks, and challenging suppliers to meet security obligations