Remote GRC Lead: Build & Shape Cyber Governance

Tria; Greater London, Manchester; Remote; GBP 90,000 - 120,000; Full time

Benefits offered by this job

20% Bonus

Car allowance

Private health

Remote work

Job summary

Tria is seeking an experienced GRC / Cyber Compliance Lead to build a new Group GRC capability. You will define the controls framework, risk reporting, and governance, reporting to Cyber Security leadership and the Board.

Key duties include establishing a mature GRC function, leading Cyber Essentials initiatives, and guiding audits and supplier assurance while enabling business growth and commercial opportunities.

Qualifications

• Experience in cyber information security GRC across large organisations.
• Capability to design or improve a GRC function from scratch.
• Knowledge of Cyber Essentials and ISO 27001 is beneficial.
• Ability to translate risk into board-level insights.

Responsibilities

• Design and own the Group's governance, risk and compliance framework.
• Develop cyber risk methodologies, assessment and treatment processes.
• Create KRIs, KPIs and security posture reporting for leadership.
• Lead governance around policies, standards, exceptions and ownership.
• Coordinate internal/external audits and assurance activities.
• Engage with suppliers and manage third-party security assurance.

Skills

GRC governance

Cyber risk management

Compliance frameworks

Security metrics & reporting

Audits & assurance

Stakeholder engagement

ISO 27001 / NIST

Job description

Tria is seeking an experienced GRC / Cyber Compliance Lead to build a new Group GRC capability. You will define the controls framework, risk reporting, and governance, reporting to Cyber Security leadership and the Board.

Key duties include establishing a mature GRC function, leading Cyber Essentials initiatives, and guiding audits and supplier assurance while enabling business growth and commercial opportunities.