GRC Manager

Hamilton Barnes ?; Swindon; On-site; GBP 45,000 - 48,000; Full time

Job summary

Hamilton Barnes is seeking a Governance, Risk and Compliance (GRC) Manager to own and shape the organisation's risk and compliance program in a security-cleared environment in the UK. You will develop, implement and maintain GRC frameworks covering operational, regulatory, cybersecurity, financial and third‑party risk, with direct input into policy, risk registers and board reporting.

Ideal candidates have 2–5 years in GRC, strong regulatory knowledge and hands-on auditing experience, plus the

Qualifications

• 2–5 years of experience in GRC or related fields.
• Knowledge of risk management frameworks and regulatory compliance.
• Experience with enterprise risk management, internal controls and audit processes.
• Experience with GDPR compliance including ROPA, LIA and DPIA.

Responsibilities

• Develop, implement and manage the organisation's GRC strategy, policies and procedures.
• Coordinate internal and external audits and remediate findings.
• Prepare risk and compliance reports for senior management.
• Identify, assess and monitor operational, regulatory, cyber, financial and third-party risks.
• Lead awareness and training programmes on governance, risk management and compliance.

Skills

GRC

Risk management

Compliance

Audit coordination

Stakeholder management

Policy development

Regulatory knowledge

Cybersecurity awareness

Tools

GRC platforms

Risk assessment tools

Auditing software

Job description

🚀 Governance, Risk and Compliance (GRC) Manager | £45,000 – £48,000 | UK, Security-Cleared Environment

A strong opportunity for an GRC professional to take ownership of a growing risk and compliance function within a security-cleared environment. You'll develop, implement and maintain the organisation's governance, risk management and compliance frameworks — working across the full risk landscape including operational, regulatory, cybersecurity, financial and third-party risk. .

If you're an GRC professional ready to lead compliance and governance at a senior level in a high-assurance environment, this is well worth a conversation.

✨ Why this role stands out:

1️⃣ Genuine strategic ownership — shape and lead the GRC function rather than maintain an existing one, with direct input into policy, risk frameworks, audit coordination and board-level reporting

2️⃣ Broad risk exposure across operational, regulatory, cyber, financial and third-party domains within a complex, security-cleared environment — including defence-relevant frameworks such as DCC, Secure by Design and JSP 453

3️⃣ Active support toward recognised industry certifications (CISA, CRISC, CISM, CISSP), with backing to grow your profile as the function matures

🔹 Develop, implement and manage the organisation's GRC strategy, policies and procedures

🔹 Conduct enterprise risk assessments and maintain the organisation's risk register

🔹 Identify, assess and monitor operational, regulatory, cybersecurity, financial and third-party risks

🔹 Ensure compliance with applicable regulations, legal requirements and industry standards

🔹 Coordinate internal and external audits and manage remediation of audit findings

🔹 Develop and maintain compliance monitoring and reporting mechanisms

🔹 Collaborate with business units to implement effective risk mitigation controls

🔹 Monitor changes in regulatory requirements and assess their impact on the organisation

🔹 Prepare and present risk and compliance reports to senior management and executive leadership

🔹 Lead awareness and training programmes on governance, risk management and compliance

🔹 Manage policy development, review, approval and periodic updates

🔹 Support business continuity, disaster recovery and information security governance initiatives

🔹 Evaluate third-party and vendor risks and oversee due diligence activities

🔹 Drive continuous improvement of the GRC framework through metrics, reporting and best practices

🔹 2–5 years of experience in GRC, audit, information security or related disciplines

🔹 Strong knowledge of risk management frameworks and regulatory compliance requirements

🔹 Experience with enterprise risk management, internal controls and audit processes

🔹 Experience with GRC platforms and risk management tools

🔹 Experience with GDPR compliance including ROPA, LIA and DPIA

🔹 Excellent analytical, problem-solving, communication and stakeholder management skills

📩 Interested? Get in touch to find out more or send your CV directly.

#GRC #GovernanceRiskCompliance #RiskManagement #CyberSecurity #SecurityCleared #CISSP #CISM #UKJobs #ComplianceJobs