InfoSec GRC Lead — Hybrid Role (Chippenham)

Good Energy Group; Chippenham; Hybrid; GBP 50,000 - 60,000; Full time

Benefits offered by this job

Work from home allowance

Travel allowance

Development allowance

Annual bonus

Holiday entitlement

Ethical pension

Job summary

Good Energy Group is seeking an Information Security GRC Lead in Chippenham, Wiltshire. The role oversees information security governance, risk and compliance across IT security, resilience and control governance, coordinating with Technology Teams to implement and evidence controls.

The successful candidate will coordinate security activity, provide guidance, and track remediation without performing day-to-day technical administration. Hybrid work and growth opportunities are offered.

Qualifications

• As per guidelines, strong knowledge of IT security risk and control management.
• Experience coordinating IT security controls and vulnerability management.
• Familiarity with ISO27001, Cyber Essentials, NCSC CAF and PCI-DSS.
• Excellent verbal and written communication for non-technical audiences.
• Detail-oriented with clear, evidence-based documentation.
• Ability to translate complex security concepts into practical procedures.

Responsibilities

• IT Security Governance: oversee risks, controls, policies and standards.
• Security Control Assurance: evidence and remediate information security controls.
• Information Security Risk and Compliance: interpret standards, translate to actions.
• Security Incident Support: assist incident response and evidence collection.
• IT Disaster Recovery and Resilience: coordinate DR plans and testing.
• IT Change Management: support CAB and ensure secure actions.
• PCI-DSS Compliance: coordinate activity, testing and remediation tracking.
• Penetration Testing Coordination: coordinate testing and track findings with owners.
• Technology Policy and Awareness: develop policies and guidance.

Skills

IT Security Governance

Risk Management

Compliance Coordination

Communication Skills

Attention to detail

Tools

ISO27001

CREST Testing

Job description

Good Energy Group is seeking an Information Security GRC Lead in Chippenham, Wiltshire. The role oversees information security governance, risk and compliance across IT security, resilience and control governance, coordinating with Technology Teams to implement and evidence controls.

The successful candidate will coordinate security activity, provide guidance, and track remediation without performing day-to-day technical administration. Hybrid work and growth opportunities are offered.