Security GRC Specialist — Governance, Risk & Compliance

Rowden; Bristol; Hybrid; GBP 50,000 - 60,000; Full time

Job summary

Rowden in Bristol seeks a Security Governance, Risk & Compliance Officer to join a growing security team. You will provide governance, risk and compliance support across the organisation, helping to embed security in delivery.

You’ll work with security architects and engineers, building risk documentation and supporting audits. The role offers on-site collaboration and structured on-the-job training, with clear career growth as the security function scales.

Qualifications

• Experience in security governance, risk and compliance, information security, audit or assurance.
• Understanding of security governance and compliance principles.
• Working knowledge of ISO 27001 and information security risk management.
• Experience maintaining policies, controls and evidence and supporting audits.
• Strong written skills to produce clear policies and risk documentation.

Responsibilities

• Advise programme and engineering teams on governance, risk and compliance; identify security requirements.
• Collaborate with customer stakeholders to push for effective and realistic security solutions.
• Own and develop risk management and assurance documentation and Secure by Design artefacts.
• Support security aspects of bids/contracts and liaise with authorities and accrediting bodies.
• Ensure compliance with UK defence/government requirements including MOD standards and NCSC guidance.
• Track changes to legislation and standards including UK GDPR and Data Protection Act 2018.
• Deliver security awareness and training to build a strong security culture.

Skills

Security governance

Risk management

Compliance

ISO 27001

Audit & assurance

Policy development

Documentation

Stakeholder communication

Decision-making

Security training

Education

Degree in cyber security

Certifications in security (e.g., CISSP/CISM)

Job description

Rowden in Bristol seeks a Security Governance, Risk & Compliance Officer to join a growing security team. You will provide governance, risk and compliance support across the organisation, helping to embed security in delivery.

You’ll work with security architects and engineers, building risk documentation and supporting audits. The role offers on-site collaboration and structured on-the-job training, with clear career growth as the security function scales.