Security GRC Lead - Risk, Compliance & Assurance

Rowden; Filton; Hybrid; GBP 50,000 - 75,000; Full time

Benefits offered by this job

Hybrid working model

Disability Confident Committed

Job summary

Rowden in Bristol is seeking a Security Governance, Risk and Compliance Officer to join our expanding security team. You will provide governance, risk and compliance support across the organisation, collaborating with security architects and engineers to embed robust security practices.

Candidates from diverse backgrounds are welcome; on-the-job training will build specialist knowledge. A minimum of 3 days per week on-site at our Bristol HQ is required, with eligibility for SC clearance and sole

Qualifications

• Experience in governance, risk, compliance, information security, audit or assurance roles.
• Solid understanding of security governance and compliance principles.
• Working knowledge of ISO 27001 and information security risk management.
• Experience maintaining policies, controls and evidence; supporting audits.
• Strong written skills to produce clear policies and risk reports.
• Sound risk judgement and ability to make proportionate decisions.
• Detail-oriented with disciplined record-keeping.
• Strong communication skills to translate standards into actions.
• Ability to challenge and advise at all levels.
• Ability to manage multiple priorities and maintain quality.

Responsibilities

• Advise programme and engineering teams on governance, risk and compliance; identify security requirements.
• Collaborate with customer stakeholders to align security with realistic solutions.
• Own and develop risk management and assurance documentation and Secure by Design artefacts for new projects.
• Support security aspects of bids and contracts; liaise with authorities and accrediting bodies.
• Ensure compliance with UK defence and government requirements, including MOD and NCSC standards.
• Track changes to legislation, standards and guidance (NCSC, MOD, ISO, GDPR).
• Promote security awareness and training to build a strong security culture.

Skills

Governance & Risk

Information Security

Policy & Documentation

Audits

Risk Assessment

Stakeholder Communication

Proactive & Proportionate

Continuous Improvement

Regulatory Compliance

Prioritisation & Pace

Education

Cyber security degree

Security certifications

Job description

Rowden in Bristol is seeking a Security Governance, Risk and Compliance Officer to join our expanding security team. You will provide governance, risk and compliance support across the organisation, collaborating with security architects and engineers to embed robust security practices.

Candidates from diverse backgrounds are welcome; on-the-job training will build specialist knowledge. A minimum of 3 days per week on-site at our Bristol HQ is required, with eligibility for SC clearance and sole