Senior GRC Manager: ISO 27001, GDPR & Risk

TMX Group; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Trayport is seeking a GRC Manager to lead governance, risk and compliance for UK and EU regions. You will drive GDPR compliance, maintain ISO 27001, manage risk assessments and audit responses, and partner with Legal, Privacy and IT to embed security across products and services.

You will report to the Head of Information Security, mentor the Risk & Compliance team, and influence cross-functional teams to sustain a security-first culture across Trayport’s global footprint, including London,

Qualifications

• Strong knowledge of ISO 27001, NIST CSF, NIS 2.0 and GDPR.
• Experience with CIS controls.
• Familiarity with cloud platforms: AWS, Azure or GCP.
• Proven ability to deliver risk reporting to executive teams.
• Experience leading audits and audit responses.
• Excellent communication skills (oral and written) to senior leadership.
• Analytical and proactive with risk and compliance focus.
• Ability to influence cross-functional teams.
• Balance control with pragmatic business needs.
• Experience integrating risk management with supplier risk assessments.
• Agile learner and team player.

Responsibilities

• Execute UK and EU GRC strategy, ensuring GDPR compliance.
• Maintain information security policy and security standards.
• Oversee risk management processes including risk identification, assessment, controls and reporting.
• Develop data-driven risk and compliance reporting for senior management and stakeholders.
• Manage customer, internal and external audits and remediation tracking.
• Maintain documentation and evidence of certifications and attestations.
• Maintain ISO 27001 certification and governance outputs.
• Recruit, manage and develop the Risk & Compliance team.
• Participate in ISO leadership strategy and governance forums.
• Advise executives with actionable risk insights for decision making.
• Partner with Legal, Privacy, Procurement, Dev, IT to embed security in products and processes.
• Champion security awareness and governance training across Trayport.
• Develop and maintain security policies aligned with threats and compliance needs.
• Maintain KPI reports on identified security issues.
• Collaborate with TMX Group teams to ensure cross-discipline security execution.
• Represent Trayport security in TMX forums such as AI Committee and Risk/Compliance Boards.
• Influence across business units and stay updated on regulations and standards.
• Liaise with external suppliers to ensure smooth delivery.

Skills

ISO 27001

NIST CSF

GDPR

Audit reporting

Stakeholder comms

Risk assessment

Cloud platforms

Education

Bachelor's degree

Tools

AWS

Azure

GCP

ISO 27001 Lead

Job description

Trayport is seeking a GRC Manager to lead governance, risk and compliance for UK and EU regions. You will drive GDPR compliance, maintain ISO 27001, manage risk assessments and audit responses, and partner with Legal, Privacy and IT to embed security across products and services.

You will report to the Head of Information Security, mentor the Risk & Compliance team, and influence cross-functional teams to sustain a security-first culture across Trayport’s global footprint, including London,