Senior Information Security GRC Leader | Risk & Compliance

Michael James Associates; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Michael James Associates is recruiting an experienced Senior Information Security GRC Specialist to join our cyber security team in The City, London. You will lead governance, risk and compliance activities across the organisation, collaborating with technology and business stakeholders to strengthen security posture.

Responsibilities include developing policies, conducting risk assessments, producing risk reporting, and ensuring regulatory alignment with GDPR, NIST and other frameworks.

Qualifications

• Extensive experience within Information Security, ideally 10+ years, with a strong background in GRC, cyber risk and security governance.
• Proven ability to translate security risks into clear business language and recommendations.
• Strong communication, reporting and stakeholder management skills.

Responsibilities

• Contribute to development and delivery of information security strategy and governance.
• Manage cyber and information security risk activities, including risk assessments, control reviews, audits and remediation.
• Develop, review and maintain security policies, standards, controls and risk documentation.
• Maintain oversight of security risks and track actions through to resolution.
• Produce reporting on cyber risk, control performance, compliance and key security indicators.
• Ensure alignment with regulatory requirements and frameworks (NIST, GDPR, DORA).

Skills

GRC governance

Security risk management

Regulatory compliance

Stakeholder communication

Cyber risk reporting

Job description

Michael James Associates is recruiting an experienced Senior Information Security GRC Specialist to join our cyber security team in The City, London. You will lead governance, risk and compliance activities across the organisation, collaborating with technology and business stakeholders to strengthen security posture.

Responsibilities include developing policies, conducting risk assessments, producing risk reporting, and ensuring regulatory alignment with GDPR, NIST and other frameworks.