GRC Security & Compliance Lead — Supervisor

Hollister Incorporated; Wokingham; On-site; GBP 70,000 - 110,000; Full time

Job summary

Hollister Incorporated, located in Winnersh, seeks a Supervisor for Governance, Risk & Compliance (GRC) to lead cybersecurity governance, risk management, regulatory compliance, and audit readiness programs. The role coordinates with IT, Legal, Privacy, and Internal Audit to ensure controls align with business objectives and risk appetite.

You will supervise a GRC and data protection team, drive program maturity, and report risk trends and remediation progress to senior leadership.

Qualifications

• Bachelor's degree with 8–12 years of related experience.
• 3+ years of people leadership or demonstrated workstream leadership.
• Experience supporting ISO 27001, SOC 2, HIPAA, privacy or similar compliance programs.
• Experience with risk assessments, audits, remediation, and third‑party security risks.

Responsibilities

• Lead governance program development, policies, standards, and guidelines.
• Oversee cybersecurity risk assessments and risk register maintenance.
• Coordinate compliance programs and evidence collection for audits.
• Manage third‑party risk assessments and remediation activities.
• Lead security awareness, policy lifecycle, and culture initiatives.
• Supervise GRC and data protection team members and staffing.
• Engage stakeholders across Cybersecurity, IT, Legal, Privacy and Quality.
• Provide status updates on risks, controls, and remediation progress.

Skills

Leadership

Governance

Risk management

Compliance management

Audit readiness

Regulatory knowledge

Vendor risk management

Security awareness

Policy management

Communication with leadership

Education

Bachelor's Degree with 8-12 years of related experience

Tools

Microsoft Purview

Azure security

Job description

Hollister Incorporated, located in Winnersh, seeks a Supervisor for Governance, Risk & Compliance (GRC) to lead cybersecurity governance, risk management, regulatory compliance, and audit readiness programs. The role coordinates with IT, Legal, Privacy, and Internal Audit to ensure controls align with business objectives and risk appetite.

You will supervise a GRC and data protection team, drive program maturity, and report risk trends and remediation progress to senior leadership.