Information Security GRC Manager

JR United Kingdom; Slough; On-site; GBP 60,000 - 80,000; Full time

Job summary

A consultancy in Slough seeks an Information Security GRC Manager to refine governance and risk frameworks, drive compliance with standards like ISO 27001 and GDPR, and manage vendor risks. Ideal candidates have a relevant degree and certifications, along with solid experience in GRC leadership and communication.

Qualifications

• Working knowledge of legal/security needs in the housing association sector.
• Solid grasp of ISO 27001, NIST, GDPR, and PCI-DSS.
• Proven experience in GRC leadership.

Responsibilities

• Build and refine information security governance and risk frameworks.
• Lead audits (internal/external) and drive compliance (ISO 27001, GDPR, NIST).
• Own vendor risk, supplier assurance, and contract governance.

Skills

Risk analysis

Audit reporting

Policy writing

Stakeholder management

Communication skills

Education

Degree in Computer Science/IT

CISA

CRISC

CISMP

ISO 27001 Lead Auditor/Implementer

Job description

Social network you want to login/join with:

Information Security GRC Manager, slough

col-narrow-left

Client:

iO Associates - UK/EU

Location:

slough, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

Information Security GRC Manager

iO Associates have collaborated with our consultancy division to help in their search for an Information Security GRC Manager.

You will work towards refining the entire GRC programme - frameworks, audits, risk assessments, stakeholder communication - across a regulated environment. You'll also work with vendors and internal teams to ensure compliance and strong governance.
Key Responsibilities:

• Build and refine information security governance and risk frameworks
• Lead audits (internal/external) and drive compliance (ISO 27001, GDPR, NIST)
• Own vendor risk, supplier assurance, and contract governance
• Communicate risks and policies across the business
• Support KPI development and risk strategy planning

Requirements:

• Degree in Computer Science/ IT or relevant industry certifications such as CISA, CRISC, CISMP, ISO 27001 Lead Auditor/Implementer
• Working knowledge with legal/security needs in housing association sector and its regulatory environment
• Solid grasp of ISO 27001, NIST, GDPR, and PCI-DSS
• Proven experience in GRC leadership
• Skilled in risk analysis, audit reporting, and policy writing
• Excellent stakeholder management and communication skills
• Understanding of cloud security and Microsoft tools

If you are interested, please apply immediately as first stage interviews will be taking place this week.

Alternatively, feel free to reach me directly on h.barmi @ ioassociates . co . uk.