Group Cyber GRC Manager

Barclay Simpson; London; On-site; GBP 100,000 - 125,000; Full time

Job summary

A leading recruitment firm seeks a Group Cyber GRC Manager to shape strategy and enhance cyber risk management in a global environment. You will lead a high-performing team, engaging senior stakeholders and driving a strong security culture. The position offers hybrid working with a presence in London and requires expertise in cyber frameworks, along with relevant certifications.

Qualifications

• Proven success leading high-performing security or GRC teams.
• Strong stakeholder engagement and communication skills.
• Experience in large, federated, and complex global organisations.

Responsibilities

• Define and deliver the strategic roadmap for global Cyber GRC.
• Lead and develop a high-performing team across multiple regions.
• Oversee risk management, assurance, and compliance.

Skills

Leadership in GRC teams

Cyber risk management expertise

Stakeholder engagement

Communication skills

Power BI proficiency

Education

Certifications such as CISM, CISA, CRISC, CISSP or ISO27001

Job description

I’m currently working with a business that is looking to hire a Group Cyber GRC Manager. This is a fantastic opportunity to take ownership of a global cyber GRC function, shaping strategy and driving maturity across a complex, multinational environment.

The Role

• Define and deliver the strategic roadmap for global Cyber GRC.
• Lead and develop a high-performing team across multiple regions.
• Oversee risk management, assurance, and compliance aligned with frameworks such as NIST, ISO27001 and CIS.
• Drive third-party and M&A cyber risk management.
• Deliver clear, data-driven insights and dashboards for senior stakeholders.
• Champion a strong security culture and continuous improvement mindset.

What they are looking for:

• Proven success leading high-performing security or GRC teams.
• Expertise in cyber risk management, frameworks, and assurance.
• Strong stakeholder engagement and communication skills.
• Experience in large, federated, and complex global organisations would be particularly valuable.
• Certifications such as CISM, CISA, CRISC, CISSP or ISO27001 are highly desirable.
• Proficiency with Power BI and a pragmatic, hands-on approach.

This role offers hybrid working, with two to three days per week in a London office, combined with the opportunity to influence cyber security strategy on a truly global scale.

If this sounds of interest, Drop me a message, [e-mail], I’d be happy to share more details.