Head of Cyber GRC & Security Risk Strategy

James Adams; Birmingham; Hybrid; GBP 110,000; Full time

Job summary

A leading global organization in the West Midlands is seeking a Head of Cyber GRC to take ownership of IT security compliance and GRC strategy. This senior role, reporting to the CIO, involves defining the GRC strategy aligned with regulatory requirements, managing risk, and ensuring audit readiness. The ideal candidate will have significant IT security experience and strong leadership skills. This position offers a salary of £110k plus bonuses and car allowances, with a hybrid working model of 3 days in the office.

Qualifications

• Significant experience in IT security, governance, risk and compliance.
• Strong understanding of global regulatory requirements and industry standards.
• Experience in large, complex, or highly regulated environments.

Responsibilities

• Defining and leading the enterprise IT GRC strategy.
• Overseeing IT risk management across systems and operations.
• Ensuring compliance with GDPR, SOX, NIS2, and managing audits.
• Developing and maintaining security policies and procedures.

Skills

IT security governance

Risk compliance

Stakeholder management

Regulatory knowledge

Job description

A leading global organization in the West Midlands is seeking a Head of Cyber GRC to take ownership of IT security compliance and GRC strategy. This senior role, reporting to the CIO, involves defining the GRC strategy aligned with regulatory requirements, managing risk, and ensuring audit readiness. The ideal candidate will have significant IT security experience and strong leadership skills. This position offers a salary of £110k plus bonuses and car allowances, with a hybrid working model of 3 days in the office.