IT Governance, Risk and Compliance (GRC) Manager

www.findapprenticeship.service.gov.uk - Jobboard; Newport; Hybrid; GBP 78,000; Full time

Job summary

A leading recruitment agency is seeking a GRC Manager to oversee cyber security risk management for a client in South Wales. The role offers up to £78,000 plus bonuses and includes responsibilities such as leading a compliance team and ensuring adherence to security frameworks. Candidates should have prior GRC leadership experience and eligibility for SC clearance. This hybrid position promotes work-life balance with generous leave and pension benefits.

Benefits

Up to £78,000 plus bonus

25 days leave plus bank holidays

Good pension scheme

Qualifications

• Experience of leading a GRC team.
• Firm grasp of infosec standards and frameworks.
• Eligibility for SC clearance.

Responsibilities

• Leading a team of cyber risk and compliance professionals.
• Defining and enhancing cyber risk assessment strategies and procedures.
• Conducting risk assessments and evaluating control effectiveness.
• Maintaining and updating security policies and the cyber risk register.
• Investigating and responding to policy breaches.

Skills

GRC leadership experience

Strong understanding of security frameworks (NIST, ISO 27001)

Proven experience completing internal and external cyber risk assessments

CNI experience

Job description

GRC Manager
Up to £78,000 + bonus
South Wales/Hybrid

I'm looking for a GRC Manager to oversee the identification, evaluation and management of risks from a cyber security perspective for a client based in South Wales.

The ideal candidate will have experience of leading a GRC team and a firm grasp of experience of commonplace infosec standards and frameworks.

The role requires eligibility for SC clearance and visa sponsorship cannot be offered.

What You'll Be Doing:

* Leading a team of cyber risk and compliance professionals
* Defining and enhancing cyber risk assessment strategies and procedures
* Conducting risk assessments and evaluating control effectiveness
* Maintaining and updating security policies and the cyber risk register
* Investigating and responding to policy breaches
* Recommending and supporting the implementation of mitigation strategies
* Ensuring compliance with industry standards and regulations
* Reporting risk findings and actions to the Risk Management Manager
* Supporting incident response planning with risk insights
* Continuously improving risk assessment methodologies

What I'm Looking For:

* GRC leadership experience
* Strong understanding of security frameworks (e.g., NIST, ISO 27001).
* Proven experience completing internal and external cyber risk assessments
* CNI experience would be very useful

What's in it for you:

* Up to £78,000 plus bonus
* 25 days leave plus bank holidays
* Good pension scheme

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk