Security GRC Leader: Governance, Risk & Compliance

National Highways; Guildford; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

National Highways is recruiting a Governance, Risk and Compliance Manager to lead the GRC function within Digital Services. You will translate strategy into a practical plan, oversee risk, compliance and assurance, and collaborate with senior leaders and regulators to protect operations and data.

The role requires managing governance frameworks, controlling risk exposure, and driving continuous improvement in a complex, regulated national environment.

Qualifications

• Significant leadership experience within governance, risk, compliance, audit or cyber security.
• Extensive experience of security governance, risk management and assurance in complex, multi-supplier or regulated environments.
• Deep knowledge of security controls, governance frameworks, risk methodologies and regulatory obligations.
• Proven ability to develop and embed governance, compliance and assurance frameworks, translating complex risks into clear reporting.
• Excellent communication, influencing and stakeholder-management skills with senior leaders, regulators, auditors, suppliers and teams.

Responsibilities

• Lead the tactical direction of the Governance, Risk and Compliance function, ensuring programmes meet expectations.
• Own and maintain the enterprise-wide security risk management framework with the Head of Security Services.
• Oversee regulatory compliance, including NIS obligations and engagement with the Department for Transport.
• Lead second-line security assurance, providing oversight of controls, supplier compliance and practices.
• Drive continuous improvement of GRC processes, tooling, policies, reporting and maturity.

Skills

Leadership

Governance

Risk management

Compliance

Audit

Cyber security

Stakeholder management

Communication

Regulatory knowledge

Job description

National Highways is recruiting a Governance, Risk and Compliance Manager to lead the GRC function within Digital Services. You will translate strategy into a practical plan, oversee risk, compliance and assurance, and collaborate with senior leaders and regulators to protect operations and data.

The role requires managing governance frameworks, controlling risk exposure, and driving continuous improvement in a complex, regulated national environment.