Senior Cyber GRC & Technical Controls Lead

air-recruitment; Greater London; Hybrid; GBP 108,000 - 132,000; Full time

Benefits offered by this job

Job summary

air-recruitment is seeking a Senior Cyber GRC Specialist – Technical Controls for a London-based hybrid role with a leading global investment manager. You will bridge governance, risk and compliance with hands-on security controls across networks, OS, cloud, IAM and Secure DevOps.

The role requires deep knowledge of NIST and ISO 27001, experience in regulated finance, and the ability to translate cyber risks into business impact.

Qualifications

• Extensive experience in cybersecurity governance, risk and compliance.
• Solid technical background in cyber engineering and security controls.
• Knowledge of NIST and ISO 27001 frameworks.
• Experience in financial services or regulated environments.
• Understanding of FCA requirements and DORA.
• Ability to translate cyber risks into business impact and regulatory implications.

Responsibilities

• Develop and maintain cybersecurity policies, standards and procedures
• Ensure security policies align with regulatory requirements and recognised industry frameworks
• Integrate effective security practices and controls across technical and non-technical departments
• Conduct cyber risk assessments to identify vulnerabilities and emerging threats
• Help develop, implement and monitor appropriate risk-mitigation strategies
• Design and evaluate control metrics to assess the effectiveness of cybersecurity measures
• Embed cyber risk within wider enterprise risk registers and board-level reporting
• Monitor compliance with internal policies, regulatory requirements and industry standards
• Produce clear compliance reports and updates for senior management
• Monitor regulatory developments and create appropriate compliance roadmaps
• Support cybersecurity awareness and training across the organisation
• Participate in incident response and post-incident reviews
• Help develop and implement corrective measures following security incidents
• Provide credible cybersecurity guidance to stakeholders across the business

Skills

Cyber GRC

Regulatory compliance

NIST

ISO 27001

Cloud security

IAM

Secure DevOps

Stakeholder management

Risk assessment

Job description

air-recruitment is seeking a Senior Cyber GRC Specialist – Technical Controls for a London-based hybrid role with a leading global investment manager. You will bridge governance, risk and compliance with hands-on security controls across networks, OS, cloud, IAM and Secure DevOps.

The role requires deep knowledge of NIST and ISO 27001, experience in regulated finance, and the ability to translate cyber risks into business impact.