Security Governance, Risk & Compliance Manager

National Highways; Manchester; Hybrid; GBP 75,000 - 95,000; Full time

Job summary

National Highways is recruiting a Governance, Risk and Compliance Manager to strengthen security governance across the organisation. You will lead the GRC team, translate strategic direction into a clear tactical plan and ensure assurance activities protect operations, data and reputation.

The role is hybrid with two days per week in the office, across the UK, with some travel. Candidates should be eligible for SC clearance and have five years' UK residency; vetting typically requires five

Qualifications

• Experience leading governance, risk and compliance in cyber security or regulated environments.
• Ability to translate strategy into actionable governance and reporting.
• Strong communication with senior leaders, regulators, auditors and suppliers.

Responsibilities

• Lead the tactical direction of the Governance, Risk and Compliance function, ensuring governance frameworks, risk processes and compliance programmes meet organisational, regulatory and industry expectations.
• Own and maintain the enterprise-wide security risk management framework alongside the Head of Security Services, ensuring risks are consistently assessed, prioritised and clearly communicated to senior leadership.
• Provide leadership and oversight of regulatory compliance, including relevant legislation, sector obligations and standards, with focus on NIS and engagement with the Department for Transport.
• Lead second-line security assurance activities, providing independent oversight, challenge and verification of security controls, supplier compliance and operational practices.
• Drive continuous improvement across GRC processes, tooling, policies, reporting and operational maturity, ensuring security governance is embedded across Digital Services and the wider organisation.

Job description

Governance, Risk and Compliance Manager - Job Advert

About the job.

As part of the development of our Digital Services function, we are recruiting to strengthen internal digital capability within Cyber Security, Digital Operational Services, and Digital Corporate and Shared Services. These roles are central to building sustainable in-house expertise that supports the management, development and delivery of digital solutions across the transport network.

As Governance, Risk and Compliance Manager at National Highways, you will play a key leadership role in strengthening how we manage security governance, risk and compliance across our organisation. Reporting to the Head of Security Services, you will translate the strategic direction for security into a clear tactical plan, ensuring our governance frameworks, risk processes and assurance activities effectively protect our operations, data, services and reputation.

You will lead the GRC team and work closely with senior leaders across Digital Services and the wider organisation, as well as regulators, auditors, suppliers and operational stakeholders. This is an opportunity to shape and continually improve our approach to security risk, compliance and assurance within a complex, nationally significant and highly regulated environment.

This is a hybrid role, requiring two days per week in the office, and can be based at any National Highways office location across the UK, with some travel to attend team meetings.

Successful candidates will be required to hold or be willing to obtain SC clearance before starting employment. Five years' UK residency is normally required for the vetting process, although individual circumstances will be considered as part of the recruitment process.

You will:

• Lead the tactical direction of the Governance, Risk and Compliance function, ensuring governance frameworks, risk processes and compliance programmes meet organisational, regulatory and industry expectations.
• Own and maintain the enterprise-wide security risk management framework alongside the Head of Security Services, ensuring risks are consistently assessed, prioritised, escalated and clearly communicated to senior leadership.
• Provide leadership and oversight of regulatory compliance, including relevant legislation, sector obligations and standards, with particular focus on National Highways' obligations under NIS and engagement with the Department for Transport.
• Lead second-line security assurance activities, providing independent oversight, challenge and verification of security controls, supplier compliance and operational practices.
• Drive continuous improvement across GRC processes, tooling, policies, reporting and operational maturity, ensuring security governance is effectively embedded across Digital Services and the wider organisation.

About you.

• Significant leadership experience within governance, risk, compliance, audit or cyber security, with a proven track record of developing and leading high-performing teams.
• Extensive experience of security governance, risk management and assurance within complex, multi-supplier or regulated environments.
• Deep knowledge of security controls, governance frameworks, risk methodologies and regulatory obligations, including experience of NIS or comparable regulatory requirements.
• Proven ability to develop and embed effective governance, compliance and assurance frameworks, translating complex risks into clear reporting and actionable recommendations for senior leaders.
• Excellent communication, influencing and stakeholder-management skills, with experience engaging confidently with senior leadership, regulators, auditors, suppliers and technical and operational teams.

About us.

Here at National Highways, we manage and improve England's motorways and major A roads, helping our customers have safer, smoother and more reliable journeys. Our priorities are safety, customers and delivery, and at the core of this, are our values of passion, integrity, safety, teamwork and ownership.

The Digital Services Directorate is helping to reshape the way National Highways operates by delivering digital, data, and technology services across all areas, from frontline to back office, in a modern and efficient manner. Our vision is to develop integrated information and technology that empowers our colleagues and provides real-time information to our customers, as well as integrating with intelligent vehicle and transport systems as they evolve, to enhance journey safety and reliability.

External candidates will be offered a starting salary at the lower end of the pay scale, while current employees will be appointed in accordance with our established pay policy.

We are committed to creating a diverse environment and welcome applicants from all backgrounds.