Information Security and AI GRC Manager

ADEY Limited; Leeds; Presencial; GBP 85.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

25 days holiday entitlement

Save as you earn Sharesave Scheme

Cycle to work scheme

Contributory pension scheme - matched

Life assurance

Free flu vouchers

Wellbeing initiatives including on‑sit

Staff discount on Genuit Group product

Descripción de la vacante

Genuit Group is recruiting an Information Security and AI GRC Manager to develop and continually improve the Group's information security governance, risk and compliance (GRC) programme. You will lead assurance to the Executive and Board and support declarations on material controls under the UK Corporate Governance Code.

You will coordinate audits, manage risk registers, and drive AI governance in line with international standards. Strong stakeholder skills and UK/EU experience are essential.

Formación

• Lead information security governance, risk and compliance (GRC) programme.
• Certifications: ISACA CISA/CISM/CRISC or ISC2 CISSP preferred.
• Experience ISO 27001 Lead Auditor/Implementer in manufacturing.
• Knowledge of ISO 42001, ISO 22301, GDPR, NIS2 and related controls.

Responsabilidades

• Develop and improve the Group's information security GRC programme.
• Assess and strengthen security controls; provide assurance to Exec and Board.
• Plan and coordinate audits, testing and certification activities.
• Maintain risk registers and compliance obligations.
• Develop AI governance in line with ISO/IEC 42001.
• Produce assurance reporting for Chief Execs and Board.

Conocimientos

Information security governance

Risk management

Policy writing

Stakeholder management

Board communication

ISO 27001 knowledge

AI governance understanding

Control assurance

Audits and testing

GRC platforms experience

Herramientas

GRC platforms

Descripción del empleo

Genuit Group is recruiting an Information Security and AI GRC Manager to develop and continually improve the Group's information security governance, risk and compliance (GRC) programme. Reporting to the Group Head of Information and Cyber Security, you will lead the development and continuous improvement of Genuit Group's information security governance, risk and compliance (GRC) programme. This includes information security assurance, risk management, business continuity, supplier assurance and AI governance. You will assess and strengthen the Group's security controls, provide independent assurance to Executive leadership and the Board, and support the Board's declaration on material controls under Provision 29 of the UK Corporate Governance Code. Business and technology owners remain accountable for their controls and risks; your role is to provide the framework, challenge and assurance that supports them,

• Lead and maintain the Group's information security management approach in line with ISO/IEC 27001.
• Assess security maturity against recognised standards and frameworks and drive improvement plans.
• Provide evidence-based assurance over material information security and technology controls.
• Plan and coordinate control testing, audits and certification activities.
• Maintain information security risk registers and compliance obligations.
• Develop and manage information security and AI policies, standards and procedures.
• Support business continuity and resilience activities in line with ISO 22301.
• Coordinate supplier and third-party security assurance.
• Establish and maintain AI governance in line with ISO/IEC 42001.
• Produce clear assurance reporting for Executive and Board audiences
• ISACA CISA certification.
• Current ISO/IEC 27001 Lead Auditor and Lead Implementer certifications.
• Experience implementing and managing ISO/IEC 27001 within a manufacturing environment.
• Experience achieving ISO 27001 and Cyber Essentials/Cyber Essentials Plus certification.
• Strong knowledge of information security governance, risk management and control assurance.
• Working knowledge of ISO/IEC 42001, ISO 22301, CIS Critical Security Controls, UK GDPR and EU GDPR.
• Experience managing audits, control testing and remediation activities.
• Excellent policy-writing and stakeholder management skills, with the ability to communicate complex technical issues to senior stakeholders and Board audiences.
• Professional work experience in both the UK and EU.., ISO/IEC 42001 or ISO 22301 Lead Auditor/Implementer certification.
• ISACA CISM or CRISC, or ISC2 CISSP.
• AI governance qualifications such as IAPP AIGP or ISACA AI certifications.
• Knowledge of ISO 27701, NIST frameworks, EU AI Act, NIS2 or IEC 62443.
• Experience using GRC platforms and managing supplier assurance programmes.
• Genuit Group plc is a UK-listed manufacturer of sustainable water, climate and ground management solutions, operating across multiple sites and brands.
• Here at the Genuit Group we recognise and develop the contribution our people make to the Group's success and are committed to attracting talent from the widest pool. We have a role to play in making the built environment more sustainable, building a low carbon business ourselves as well as delivering sustainable solutions at scale.
• ISO/IEC 42001 - AI management system.
• ISO 22301 - business continuity management system.
• CIS Critical Security Controls v8.1.
• Cyber Essentials and Cyber Essentials Plus.
• Provision 29 of the UK Corporate Governance Code 2024 - Board declaration on the effectiveness of material controls., 25 days holiday entitlement
• Save as you earn Sharesave Scheme
• Cycle to work scheme
• Contributory pension scheme - matched up to 8%
• Life assurance
• Free flu vouchers
• Various health & wellbeing initiatives including complimentary occupational health on-site physiotherapy and counselling services
• Staff discount on all Genuit Group products