Information Technology Governance Manager

Electus Recruitment Solutions; Shrivenham; On-site; GBP 80,000 - 110,000; Full time

Job summary

Electus Recruitment Solutions is seeking a senior GRC lead to own governance, risk and compliance within a security-focused technology environment in Shrivenham. You will collaborate with senior stakeholders to strengthen risk management, ensure regulatory compliance and support resilience objectives.

You will develop and maintain GRC policies, manage risk assessments, oversee audits, and provide reporting and training to drive a mature compliance program across the organisation.

Qualifications

• Extensive experience in GRC, audit, information security and related disciplines.
• Strong knowledge of risk management, regulatory frameworks and compliance.
• Experience with enterprise risk, internal controls and audit processes.
• GDPR experience including ROPA, LIA and DPIA.
• Experience with GRC or risk management platforms.

Responsibilities

• Develop, implement and maintain GRC policies, frameworks and processes.
• Manage enterprise risk assessments and the organisational risk register.
• Identify, assess, and monitor operational, regulatory, cybersecurity, financial, and third-party risks.
• Lead internal and external audit activity and oversee remediation of findings.
• Provide GRC reporting and advice to senior management and lead training programs on GRC.

Skills

GRC expertise

Risk management

Audit management

Regulatory compliance

Stakeholder communication

GRC platforms

Tools

GRC platforms

Job description

Take ownership of governance, risk and compliance (GRC) within a security-focused technology environment.

You will work closely with senior stakeholders to strengthen risk management, maintain regulatory compliance and support the organisation's wider security and resilience objectives.

Key Responsibilities:

• Develop, implement and maintain GRC policies, frameworks and processes
• Manage enterprise risk assessments and the organisational risk register
• Identify, assess, and monitor operational, regulatory, cybersecurity, financial, and third-party risks
• Lead both internal and external audit activity and oversee remediation of findings
• Provide GRC reporting and advice to senior management and lead training programs on GRC

Requirements:

• Extensive experience in GRC, audit, information security and related disciplines
• Strong knowledge of risk management, regulatory frameworks and compliance
• Experience with enterprise risk, internal controls and audit processesGDPR experience, including ROPA, LIA and DPIA
• Experience with GRC or risk management platforms
• Strong analytical, communication and stakeholder management skills
• British Nationals with existing security clearance or eligibility to obtain high-level clearance
• Experience with Defence Cyber Certification (DCC) and/or CE/CE+ certification
• Understanding of Secure by Design (SbD) or JSP 453
• Knowledge of NIS2, SOC 2 and vendor risk management
• CISA, CRISC, CISM or CISSP certification

• Professional development and training, exposure to complex security and compliance environments, and the opportunity to make a significant impact within a specialist technology organisation.

Due to the nature of the work, successful applicants must be British Nationals eligible to hold or obtain the appropriate security clearance.