Security Governance, Risk & Compliance Manager

National Highways; Guildford; Hybrid; GBP 70.000 - 90.000; Vollzeit

Zusammenfassung

National Highways is recruiting a Governance, Risk and Compliance Manager to lead the GRC function within Digital Services. You will translate strategy into a practical plan, oversee risk, compliance and assurance, and collaborate with senior leaders and regulators to protect operations and data.

The role requires managing governance frameworks, controlling risk exposure, and driving continuous improvement in a complex, regulated national environment.

Qualifikationen

• Significant leadership experience within governance, risk, compliance, audit or cyber security.
• Extensive experience of security governance, risk management and assurance in complex, multi-supplier or regulated environments.
• Deep knowledge of security controls, governance frameworks, risk methodologies and regulatory obligations.
• Proven ability to develop and embed governance, compliance and assurance frameworks, translating complex risks into clear reporting.
• Excellent communication, influencing and stakeholder-management skills with senior leaders, regulators, auditors, suppliers and teams.

Aufgaben

• Lead the tactical direction of the Governance, Risk and Compliance function, ensuring programmes meet expectations.
• Own and maintain the enterprise-wide security risk management framework with the Head of Security Services.
• Oversee regulatory compliance, including NIS obligations and engagement with the Department for Transport.
• Lead second-line security assurance, providing oversight of controls, supplier compliance and practices.
• Drive continuous improvement of GRC processes, tooling, policies, reporting and maturity.

Kenntnisse

Leadership

Governance

Risk management

Compliance

Audit

Cyber security

Stakeholder management

Communication

Regulatory knowledge

Jobbeschreibung

Governance, Risk and Compliance Manager - Job Advert

About the job.

As part of the development of our Digital Services function, we are recruiting to strengthen internal digital capability within Cyber Security, Digital Operational Services, and Digital Corporate and Shared Services. These roles are central to building sustainable in-house expertise that supports the management, development and delivery of digital solutions across the transport network.

As Governance, Risk and Compliance Manager at National Highways, you will play a key leadership role in strengthening how we manage security governance, risk and compliance across our organisation. Reporting to the Head of Security Services, you will translate the strategic direction for security into a clear tactical plan, ensuring our governance frameworks, risk processes and assurance activities effectively protect our operations, data, services and reputation.

You will lead the GRC team and work closely with senior leaders across Digital Services and the wider organisation, as well as regulators, auditors, suppliers and operational stakeholders. This is an opportunity to shape and continually improve our approach to security risk, compliance and assurance within a complex, nationally significant and highly regulated environment.

This is a hybrid role, requiring two days per week in the office, and can be based at any National Highways office location across the UK, with some travel to attend team meetings.

Successful candidates will be required to hold or be willing to obtain SC clearance before starting employment. Five years' UK residency is normally required for the vetting process, although individual circumstances will be considered as part of the recruitment process.

You will:

• Lead the tactical direction of the Governance, Risk and Compliance function, ensuring governance frameworks, risk processes and compliance programmes meet organisational, regulatory and industry expectations.
• Own and maintain the enterprise-wide security risk management framework alongside the Head of Security Services, ensuring risks are consistently assessed, prioritised, escalated and clearly communicated to senior leadership.
• Provide leadership and oversight of regulatory compliance, including relevant legislation, sector obligations and standards, with particular focus on National Highways' obligations under NIS and engagement with the Department for Transport.
• Lead second-line security assurance activities, providing independent oversight, challenge and verification of security controls, supplier compliance and operational practices.
• Drive continuous improvement across GRC processes, tooling, policies, reporting and operational maturity, ensuring security governance is effectively embedded across Digital Services and the wider organisation.

About you.

• Significant leadership experience within governance, risk, compliance, audit or cyber security, with a proven track record of developing and leading high-performing teams.
• Extensive experience of security governance, risk management and assurance within complex, multi-supplier or regulated environments.
• Deep knowledge of security controls, governance frameworks, risk methodologies and regulatory obligations, including experience of NIS or comparable regulatory requirements.
• Proven ability to develop and embed effective governance, compliance and assurance frameworks, translating complex risks into clear reporting and actionable recommendations for senior leaders.
• Excellent communication, influencing and stakeholder-management skills, with experience engaging confidently with senior leadership, regulators, auditors, suppliers and technical and operational teams.

About us.

Here at National Highways, we manage and improve England's motorways and major A roads, helping our customers have safer, smoother and more reliable journeys. Our priorities are safety, customers and delivery, and at the core of this, are our values of passion, integrity, safety, teamwork and ownership.

The Digital Services Directorate is helping to reshape the way National Highways operates by delivering digital, data, and technology services across all areas, from frontline to back office, in a modern and efficient manner. Our vision is to develop integrated information and technology that empowers our colleagues and provides real-time information to our customers, as well as integrating with intelligent vehicle and transport systems as they evolve, to enhance journey safety and reliability.

External candidates will be offered a starting salary at the lower end of the pay scale, while current employees will be appointed in accordance with our established pay policy.

We are committed to creating a diverse environment and welcome applicants from all backgrounds.