Senior Information Security (GRC) Specialist

La Fosse; Greater London; Hybrid; GBP 81,000 - 99,000; Full time

Benefits offered by this job

Pension

Benefits

Job summary

La Fosse in the United Kingdom is looking for a Senior Information Security (GRC) Specialist to drive governance, risk and compliance across the business.

The role focuses on shaping the GRC strategy, uplifting capabilities and guiding audits, with a London-based component and two days per week in the capital.

Qualifications

• Senior GRC specialist with broad governance, risk and compliance experience.
• Strong cyber risk management: identifying, tracking, prioritising and remediating risks.
• Experience applying NIST and IT control frameworks to uplift controls.
• Able to develop and implement security policies, standards and governance frameworks.
• Support audit activity and drive remediation.
• Guide the wider team on best GRC practices and information security strategy.

Responsibilities

• Shape security governance strategy and uplift capability across the business.
• Develop and implement security policies, standards and governance frameworks.
• Support audit activities and drive remediation across teams.
• Guide the wider team on best GRC practices and information security strategy.
• Collaborate with stakeholders and leadership to scale GRC.

Skills

GRC expertise

Cyber risk management

Policy development

Stakeholder communication

Job description

I’m working with a global organisation undergoing a major transformation in how they deliver Governance, Risk & Compliance. They’re looking for a Senior Information Security (GRC) Specialist to help their security governance strategy, uplift capability, and drive meaningful change across the business.

This role offers genuine progression, visibility, and the opportunity to influence how GRC operates at scale.

The right person will be:

• A broad senior GRC specialistwho can turn their hand to most areas of governance, risk and compliance.
• Strong in cyber risk management, including identifying, tracking, prioritising and remediating risks.
• Experienced applying NIST and IT control frameworks, with the ability to assess gaps and uplift controls.
• Confident developing and implementing security policies, standards and governance frameworks.
• Comfortable working with supporting audit activity and driving remediation.
• Able to guide the wider team on what good GRC practice looks like.
• Someone who wants to contribute to information security strategy.
• Motivated by transformation, uplift and continuous improvement.
• A strong communicator who can work with technical teams, business stakeholders and senior leadership.

Details:

Salary: up to £90,000

Location: 2x a week in London

Pension and benefits