Security Compliance Lead — GRC & Assurance

National Highways; Birmingham; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

National Highways is strengthening its digital security capability and seeks a Compliance Lead within the GRC function. You will lead the Compliance workstream, provide direction and oversight to analysts, and ensure findings are effectively managed.

You will partner with senior leaders and supplier teams to address regulatory requirements, drive remediation, and embed strong security compliance across a national organisation.

Qualifications

• Experience leading teams or workstreams in security governance, risk or compliance.
• Experience leading security audits, risk assessments and assurance reviews.
• Strong understanding of cyber and information security principles in a multi-supplier environment.
• Ability to communicate security risks and compliance requirements to technical and non-technical audiences.
• Knowledge of UK public sector security and regulatory requirements.

Responsibilities

• Lead and coordinate the Compliance workstream with direction, prioritisation and oversight.
• Oversee security compliance assessments, audits and assurance reviews across systems and services.
• Provide specialist advice on obligations, control requirements and identified gaps.
• Develop and deliver reporting on the organisation's security compliance posture and trends.
• Drive remediation of compliance gaps with owners and leadership, escalating risks where needed.

Skills

Security governance

Risk management

Compliance management

Audit & assurance

Security auditing

Regulatory compliance

UK public sector security requirements

Communication skills

Analytical skills

Job description

National Highways is strengthening its digital security capability and seeks a Compliance Lead within the GRC function. You will lead the Compliance workstream, provide direction and oversight to analysts, and ensure findings are effectively managed.

You will partner with senior leaders and supplier teams to address regulatory requirements, drive remediation, and embed strong security compliance across a national organisation.