GRC Security Lead — Governance, Risk & Compliance

Hollister Incorporated; Winnersh; On-site; GBP 70,000 - 100,000; Full time

Job summary

Hollister Incorporated seeks an experienced Supervisor, Governance, Risk & Compliance to lead cybersecurity governance, risk and compliance programs from Winnersh, UK. The role oversees policy management, third-party risk, awareness, and audit readiness across IT, Legal and Business functions.

Ideal candidates will have leadership experience, ISO 27001/SOC 2/HIPAA/GDPR familiarity, and a track record delivering governance improvements aligned with business objectives and risk appetite.

Qualifications

• Progressive experience in cybersecurity, governance, risk management, compliance, audit, or information security.

Responsibilities

• Governance & Security Program Management: Lead development, implementation, and maintenance of governance programs, policies, standards, procedures, and guidelines.
• Cybersecurity Risk Management: Lead enterprise risk assessments and maintain the cybersecurity risk register.
• Compliance & Regulatory Oversight: Manage compliance programs (ISO 27001, SOC 2, HIPAA, GDPR, UK Cyber Essentials, NIST CSF).
• Audit & Assurance Management: Coordinate audits, prepare evidence, and report findings.
• Third-Party Risk Management: Oversee vendor due diligence and security assessments.
• Security Awareness, Policy & Culture: Lead security awareness training and policy lifecycle management.

Education

Bachelor’s Degree with 8-12 years of related experience

Job description

Hollister Incorporated seeks an experienced Supervisor, Governance, Risk & Compliance to lead cybersecurity governance, risk and compliance programs from Winnersh, UK. The role oversees policy management, third-party risk, awareness, and audit readiness across IT, Legal and Business functions.

Ideal candidates will have leadership experience, ISO 27001/SOC 2/HIPAA/GDPR familiarity, and a track record delivering governance improvements aligned with business objectives and risk appetite.