GRC Leader, Security Risk & Compliance (Hybrid)

National Highways; West Midlands; Hybrid; GBP 70,000 - 95,000; Full time

Job summary

National Highways is recruiting a Governance, Risk and Compliance Manager to strengthen security governance, risk and assurance across Digital Services and the wider organisation. Reporting to the Head of Security Services, you will translate strategic direction into actionable plans and lead the GRC team to protect operations, data and reputation.

The role requires extensive leadership in regulated environments, with oversight of governance, risk management and regulatory compliance, including

Qualifications

• Significant leadership experience within governance, risk, compliance, audit or cyber security.
• Extensive experience of security governance, risk management and assurance within complex, multi-supplier or regulated environments.
• Deep knowledge of security controls, governance frameworks, risk methodologies and regulatory obligations, including experience of NIS or comparable regulatory requirements.
• Proven ability to develop and embed effective governance, compliance and assurance frameworks, translating complex risks into clear reporting and actionable recommendations for senior leaders.
• Excellent communication, influencing and stakeholder-management skills, with experience engaging confidently with senior leadership, regulators, auditors, suppliers and technical and operational teams.

Responsibilities

• Lead the tactical direction of the Governance, Risk and Compliance function, ensuring governance frameworks, risk processes and compliance programmes meet organisational, regulatory and industry expectations.
• Own and maintain the enterprise-wide security risk management framework alongside the Head of Security Services, ensuring risks are consistently assessed, prioritised, escalated and clearly communicated to senior leadership.
• Provide leadership and oversight of regulatory compliance, including relevant legislation, sector obligations and standards, with particular focus on National Highways' obligations under NIS and engagement with the Department for Transport.
• Lead second-line security assurance activities, providing independent oversight, challenge and verification of security controls, supplier compliance and operational practices.
• Drive continuous improvement across GRC processes, tooling, policies, reporting and operational maturity, ensuring security governance is effectively embedded across Digital Services and the wider organisation.

Skills

Governance

Risk management

Compliance

Security governance

Audit

Leadership

Stakeholder management

Job description

National Highways is recruiting a Governance, Risk and Compliance Manager to strengthen security governance, risk and assurance across Digital Services and the wider organisation. Reporting to the Head of Security Services, you will translate strategic direction into actionable plans and lead the GRC team to protect operations, data and reputation.

The role requires extensive leadership in regulated environments, with oversight of governance, risk management and regulatory compliance, including