Senior GRC Manager: Risk, Compliance & Security

Prolinx; England; On-site; GBP 70,000 - 110,000; Full time

Job summary

Prolinx is seeking a Governance, Risk, and Compliance (GRC) Manager in the United Kingdom to develop, implement, and maintain the organisation's GRC framework. The role will ensure business operations comply with laws, regulations, and internal policies while proactively identifying and mitigating risks.

Responsibilities include leading risk assessments, maintaining risk registers, coordinating audits, and driving continuous improvement of the GRC framework.

Qualifications

• 5-10 years of experience in Governance, Risk, Compliance, Audit, Information Security, or related disciplines.
• Strong knowledge of risk management frameworks and regulatory compliance requirements.
• Experience with enterprise risk management, internal controls, and audit processes.
• Excellent analytical, problem-solving, communication, and stakeholder management skills.
• Experience with GDPR regulations and compliance (ROPA, LIA and DPIA).

Responsibilities

• Develop, implement, and manage the organisation's GRC strategy, policies, and procedures.
• Conduct enterprise risk assessments and maintain the organisation's risk register.
• Identify, assess, and monitor operational, regulatory, cybersecurity, financial, and third-party risks.
• Ensure compliance with applicable regulations, legal requirements, and industry standards.
• Coordinate internal and external audits and manage remediation of audit findings.
• Develop and maintain compliance monitoring and reporting mechanisms.
• Collaborate with business units to implement effective risk mitigation controls.
• Monitor changes in regulatory requirements and assess their impact on the organisation.
• Prepare and present risk and compliance reports to senior management and executive leadership.
• Lead awareness and training programs on governance, risk management, and compliance.
• Manage policy development, review, approval, and periodic updates.
• Support business continuity, disaster recovery, and information security governance initiatives.
• Evaluate third-party/vendor risks and oversee due diligence activities.
• Drive continuous improvement of the GRC framework through metrics, reporting, and best practices.

Skills

Governance, Risk, Compliance

Risk management

Stakeholder management

Analytical thinking

Communication

Information security

GDPR compliance

Security clearance

Tools

GRC platforms

Risk management tools

Audit processes

Job description

Prolinx is seeking a Governance, Risk, and Compliance (GRC) Manager in the United Kingdom to develop, implement, and maintain the organisation's GRC framework. The role will ensure business operations comply with laws, regulations, and internal policies while proactively identifying and mitigating risks.

Responsibilities include leading risk assessments, maintaining risk registers, coordinating audits, and driving continuous improvement of the GRC framework.