GRC Security Manager: Risk, Policy & GovS 007 Lead

Cabinet Office; Newcastle upon Tyne; On-site; GBP 90,000 - 120,000; Full time

Job summary

Cabinet Office is seeking an Information Security GRC Manager to act as the department SME on cyber risk management, security policy, and enterprise assurance. You will lead the GRC team, drive governance strategy, and protect critical digital services across government.

Reporting to the Head of Information Security, you will implement GovS 007, the NCSC CAF, ISO 27001, and NIST CSF, coordinating risk assessments and providing clear guidance to senior leaders across the organisation.

Qualifications

• Experience as subject matter expert in cyber risk management, security policy and enterprise assurance.
• Proven ability to lead and develop a GRC team and drive governance strategy.
• Ability to translate executive strategy into technical risk guidance and actions.

Responsibilities

• Own the cyber risk framework, defining methodologies, standards and thresholds for the department.
• Lead GRC platform engineering to automate workflows and improve risk visibility.
• Mature the Cyber Risk Register with timely risk ownership decisions.
• Drive third-party and supply chain assurance across the department and high-value contracts.
• Provide actionable risk insights to senior leadership and risk committees.

Skills

Cyber risk management

Security policy

Enterprise risk governance

Tools

GovAssure platform

GRC tooling

NCSC CAF

ISO/IEC 27001

NIST CSF

Job description

Cabinet Office is seeking an Information Security GRC Manager to act as the department SME on cyber risk management, security policy, and enterprise assurance. You will lead the GRC team, drive governance strategy, and protect critical digital services across government.

Reporting to the Head of Information Security, you will implement GovS 007, the NCSC CAF, ISO 27001, and NIST CSF, coordinating risk assessments and providing clear guidance to senior leaders across the organisation.