GRC Manager: Security Governance, Risk & Compliance

National Highways; Manchester; Hybrid; GBP 75,000 - 95,000; Full time

Job summary

National Highways is recruiting a Governance, Risk and Compliance Manager to strengthen security governance across the organisation. You will lead the GRC team, translate strategic direction into a clear tactical plan and ensure assurance activities protect operations, data and reputation.

The role is hybrid with two days per week in the office, across the UK, with some travel. Candidates should be eligible for SC clearance and have five years' UK residency; vetting typically requires five

Qualifications

• Experience leading governance, risk and compliance in cyber security or regulated environments.
• Ability to translate strategy into actionable governance and reporting.
• Strong communication with senior leaders, regulators, auditors and suppliers.

Responsibilities

• Lead the tactical direction of the Governance, Risk and Compliance function, ensuring governance frameworks, risk processes and compliance programmes meet organisational, regulatory and industry expectations.
• Own and maintain the enterprise-wide security risk management framework alongside the Head of Security Services, ensuring risks are consistently assessed, prioritised and clearly communicated to senior leadership.
• Provide leadership and oversight of regulatory compliance, including relevant legislation, sector obligations and standards, with focus on NIS and engagement with the Department for Transport.
• Lead second-line security assurance activities, providing independent oversight, challenge and verification of security controls, supplier compliance and operational practices.
• Drive continuous improvement across GRC processes, tooling, policies, reporting and operational maturity, ensuring security governance is embedded across Digital Services and the wider organisation.

Job description

National Highways is recruiting a Governance, Risk and Compliance Manager to strengthen security governance across the organisation. You will lead the GRC team, translate strategic direction into a clear tactical plan and ensure assurance activities protect operations, data and reputation.

The role is hybrid with two days per week in the office, across the UK, with some travel. Candidates should be eligible for SC clearance and have five years' UK residency; vetting typically requires five