GRC & Security Lead

Amiqus; United Kingdom; On-site; GBP 60,000 - 85,000; Full time

Job summary

A progressive technology firm in the United Kingdom seeks a GRC & Security Lead. This mid-senior level role involves overseeing cyber security, leading audits, and managing risks. The ideal candidate has extensive experience in security controls and cloud security, along with relevant certifications. A hands-on approach to governance and compliance is essential in this fast-paced environment where your ability to drive change will directly contribute to the company's growth.

Qualifications

• 5+ years’ experience leading and implementing security controls.
• Strong cloud security experience with a focus on threat identification.
• Hands‑on experience with GRC platforms.

Responsibilities

• Oversee cyber security and incident management.
• Lead internal and external audits.
• Act as compliance subject matter expert.

Skills

Cyber security leadership

Cloud security expertise

Excellent problem-solving skills

Clear communication skills

Education

Relevant certifications (CISM, CRISC, CISSP, ISO 27001 or similar)

Tools

ISMS frameworks

GRC platforms

Job description

The GRC & Security Lead at Amiqus is the hands‑on leader of our Security, Audit, Risk and Compliance (SARC) team – with a particular focus on cyber security and risk management. You’ll lead both internal and external audits, and oversee the protection, governance and security of our data.

Your responsibilities:

• Oversee cyber security, including security-by-design in product development, incident management, business continuity testing and third‑party risk management.
• Act as 2nd line of defence, ensuring risks are identified, documented and effectively managed across all business areas.
• Own and maintain key policies, internal tools (including Drata), and governance processes across security, audit, risk and compliance.
• Lead and support internal and external audits, ensuring readiness, action tracking, regulatory awareness and continuous improvement.
• Act as compliance SME, providing guidance on projects, product changes and organisational initiatives, and representing Amiqus within relevant industry groups and forums.
• Act as Incident Commander for Major and High category incidents in the business while overseeing business continuity and disaster recovery processes/ robustness.

In a perfect world, we’d hire someone who has:

• 5+ years’ experience leading and implementing security controls – from information and data security to wider organisational protection
• Strong cloud security experience, able to take a ‘red team’ based approach to identify and stress test for potential threats
• Practical expertise with ISMS frameworks e.g. ISO 27001
• Relevant certifications (CISM, CRISC, CISSP, ISO 27001 or similar) to back up your craft
• Hands‑on experience with GRC platforms, using them to streamline workflows and clearly communicate security posture
• Ability to identify, assess and explain security threats and vulnerabilities both cloud based and physical
• Excellent problem‑solving skills and sound judgement when making decisions under pressure
• Clear, concise communication skills – written, verbal and client‑facing, with experience in reporting to senior exec / board level
• The confidence to lead client conversations, representing Amiqus as the primary SARC point of contact

This is a fast‑growing, scale‑up environment – not a large scale corporation. Things move quickly. Whilst we have structure and excellent people – you’ll need to be able to deliver and implement things directly so we’re looking for someone who’s energised by making change, having specific impact and scaling themselves as we grow on our 10x plan. Talented people make Amiqus and staying true to our culture is important as we continue to develop and grow. Most importantly, this role will be filled by someone who shares the same values and work ethic as we do.

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology

Industries

Software Development