Hybrid GRC Specialist: Cyber Security & Compliance

Dunelm; Leicester; Hybrid; GBP 65,000 - 95,000; Full time

Job summary

Dunelm, Leicester, is recruiting a Governance, Risk & Compliance Specialist to strengthen cyber security governance across the business. The role sits in a FTSE 250 retail organisation and involves coordinating audits, managing risk, and embedding security practices with stakeholders across technology, retail operations, finance and HR.

You will contribute to policy development, metrics, and supplier risk management while promoting a positive security culture and ensuring regulatory alignment.

Qualifications

• Experience in a Governance, Risk & Compliance, Information Security or Cyber Security role.
• Strong understanding of Cyber Security Risk, NIST CSF 2.0, PCI DSS, UK GDPR and Data Protection Act 2018.
• Experience conducting cyber risk assessments and audits.
• Experience supporting audits and regulatory compliance activities.
• Experience producing security metrics and executive reporting.
• Excellent stakeholder management and communication skills.

Responsibilities

• Develop and maintain Information Security policies, standards and procedures.
• Coordinate internal and external security audits.
• Administer the cyber security risk register and run risk assessments.
• Oversee supplier cyber security assurance and third-party risk.
• Collaborate with business teams to embed security governance.
• Develop governance KPIs/ KRIs and report to senior leadership.
• Promote security awareness and phishing simulations across stores and digital teams.

Skills

Governance

Risk management

Cyber security

NIST CSF 2.0

PCI DSS

UK GDPR

Stakeholder management

Communication

Audits

Policy writing

Third‑party security

Security metrics

Tools

LogicGate

OneTrust

Archer

AuditBoard

Job description

Dunelm, Leicester, is recruiting a Governance, Risk & Compliance Specialist to strengthen cyber security governance across the business. The role sits in a FTSE 250 retail organisation and involves coordinating audits, managing risk, and embedding security practices with stakeholders across technology, retail operations, finance and HR.

You will contribute to policy development, metrics, and supplier risk management while promoting a positive security culture and ensuring regulatory alignment.