GRC & Security Compliance Leader — ISO 27001 Expert

TMX Group; City Of London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Trayport is seeking a GRC Manager to lead the governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services.

Lead a team, partner with Legal, Privacy, Procurement and IT, and influence executives with actionable risk insights to support risk-aware decision making.

Qualifications

• Knowledge of ISO 27001, NIST CSF, and regionally applicable privacy laws (GDPR, UK Data Protection Act 2018).
• Experience in risk management, controls testing and remediation
• Experience in leading audits and audit responses
• Strong communication skills with senior leadership and stakeholders
• Ability to translate security risk into business decisions
• Experience with cloud security controls and third-party risk management
• Agile mindset and collaborative leadership style

Responsibilities

• Execute UK and EU GRC strategy ensuring GDPR and regional privacy compliance.
• Maintain information security policy and security standards.
• Oversee risk management processes including identification, assessment, controls and reporting.
• Develop concise, data-driven risk and compliance reporting for executives.
• Manage audits including preparation, execution and remediation tracking.
• Maintain ISO 27001 certification and governance artifacts.
• Lead and develop the Risk & Compliance team; promote accountability and learning.
• Collaborate with Legal, Privacy, Procurement, Dev, and IT to embed security in products and processes.
• Champion security awareness and governance training across the organization.
• Represent Trayport security requirements in TMX governance forums.

Skills

ISO 27001

NIST CSF

GDPR

NIS 2.0

CIS controls

Cloud platforms

Risk reporting

Audits

Stakeholder management

Agile

Team leadership

Independent work

Strategic advisory

Education

Bachelor's degree

Job description

Trayport is seeking a GRC Manager to lead the governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services.

Lead a team, partner with Legal, Privacy, Procurement and IT, and influence executives with actionable risk insights to support risk-aware decision making.