Group Head of Governance, Risk & Compliance

JD GROUP; Bury; On-site; GBP 125,000 - 150,000; Full time

Job summary

A leading omnichannel retailer is seeking a Group Head of Governance, Risk & Compliance to lead the global GRC strategy and ensure effective risk management across the organization. The ideal candidate will have over 12 years of progressive experience, including 5 years in a leadership role, with strong analytical skills and knowledge of compliance measures relevant to the retail industry. This position offers competitive benefits and a chance to be part of a dynamic team focused on growth and operational excellence.

Benefits

Incremental Holiday Allowance

Staff Discount

Bike Discount scheme

Discounted Gym membership

Personal development opportunities

Access to Apprenticeships

Qualifications

• Proven track record in team or departmental leadership.
• Understanding of compliance measures for large retail organizations.
• 12+ years of experience in governance, risk, compliance, or audit.

Responsibilities

• Define and implement group-wide GRC strategy, policies, and frameworks.
• Monitor performance against information security obligations.
• Build and lead a high-performing GRC function.

Skills

Risk management

Compliance knowledge

Leadership

Analytical skills

Education

Bachelor’s degree

Tools

Information security frameworks

Job description

Overview

The Group Head of Governance, Risk & Compliance (GRC) is responsible for leading the organisation’s global GRC strategy, ensuring effective risk management, compliance with applicable regulations, and robust governance frameworks. The role requires a strategic leader with deep expertise in ITGC, enterprise risk, internal controls, and regulator y compliance, capable of influencing senior stakeholders and embedding a strong risk culture across the group.

You will oversee the creation of risk and information security policies that serve to protect the organisation while aligning with corporate and departmental strategies, lead the operationalisation of risk management processes and help establish a company-wide risk-aware culture, drive the creation and maintenance of a robust, accurate and actionable risk register, and set risk and security goals and obligations that will help ensure that the organisation can demonstrate compliance with applicable regulatory requirements.

Job Title – GRC Lead

Location – BL9 8RR

Working rota – Monday-Friday

Working hours – 40 Hours

What You\'ll Be Doing

• Build and apply repeatable methodologies which monitor and manage the effectiveness of JD Sports’ information security function in response to evolving trends in good practice and the dynamic nature of the threat environment
• Monitor Systems Integrator and third-party performance against contractual information security obligations and oversee all implementation activity
• Define and implement the Group-wide GRC strategy, policies, and frameworks
• Promote a strong risk and compliance culture throughout the organization
• Ensure governance structures are effective, transparent, and aligned with industry best practices
• Report regularly to executive management, Audit Committee, and the Board on GRC performance, emerging risks, and ITGC effectiveness
• Identify and drive opportunities for service improvements
• Build and lead a high-performing GRC function, including compliance, risk, and ITGC specialists
• Foster cross-functional collaboration with IT Security, Finance, Internal Audit, and Legal
• Understand, manage, and mitigate risks while ensuring regulatory compliance and safeguarding information, IP, people, customers, shareholders and brand

What We\'re Looking For

• Develop, communicate, and agree on an appropriate JD Sports information security operations strategy that will help optimise and target investment and resources
• A proven track record in team or departmental leadership
• An understanding of the measures and processes needed to enable large retail organisations to remain compliant with relevant laws and regulations
• Strong analytical and problem-solving skills
• Bachelor’s degree
• 12+ years of progressive experience in governance, risk, compliance, or audit, with at least 5 years in a senior leadership role
• Relevant certifications such as CISA, CRISC, CISM, CIA, or CISSP are strongly desirable

The Company

The JD Group is a leading omnichannel retailer of Sports Fashion, Street & Premium Fashion, Outdoors and Gyms with over 60,000 colleagues over 3,400 stores across several retail fascia\'s in over 30 markets around the world.

We are an equal opportunities employer who embraces and values differences. We recognise the importance of an inclusive workplace culture in which everyone can thrive irrespective of their background or identity.

To be a part of this successful and continuously growing company, you will have the desire to ingrain our strategic goals of being a people first, a digital leader and customer focused organisation which provides operational excellence and is continuous with identifying new areas of growth into our day-to-day.

We know our employees work tirelessly to make JD Sports the success it is today and in turn, we offer them some amazing benefits:

• Incremental Holiday Allowance
• Staff Discount on qualifying purchases across Group retail stores and online
• Exclusive Colleague Bike Discount scheme
• Discounted Gym membership
• Personal development opportunities to learn and develop at work
• Access to Apprenticeships and accredited qualifications