Remote Cyber GRC Lead - Secure by Design & Risk

Citizens Advice; England; On-site; GBP 60,000 - 64,000; Full time

Job summary

Citizens Advice is seeking a Governance, Risk and Compliance Lead to shape the cyber GRC operating model, establish governance and assurance standards, and guide risk-based decisions across complex cyber threats. You’ll coordinate with DDaT and vendor management to secure our infrastructure and supply chain.

The role emphasizes proactive security enablement, risk-based prioritisation, and a path toward ISO 27001 alignment in the future, with a remote-first setup within England and Wales.

Qualifications

• Extensive cyber security governance, risk and compliance experience.
• Experience building governance and assurance processes for security.
• Knowledge of IASME Cyber Essentials and IASME Cyber Assurance.
• Future ISO 27001 integration and risk-based decisioning.

Responsibilities

• Define and embed the cyber GRC operating model.
• Establish governance and assurance processes and standards.
• Lead prioritisation of mitigations for high risk issues.
• Advise on risk tolerance and escalation when needed.

Skills

Cyber security

GRC leadership

Vendor risk management

Risk assessment

IASME standards

Job description

Citizens Advice is seeking a Governance, Risk and Compliance Lead to shape the cyber GRC operating model, establish governance and assurance standards, and guide risk-based decisions across complex cyber threats. You’ll coordinate with DDaT and vendor management to secure our infrastructure and supply chain.

The role emphasizes proactive security enablement, risk-based prioritisation, and a path toward ISO 27001 alignment in the future, with a remote-first setup within England and Wales.