Senior IT GRC Leader: Cybersecurity Risk & Compliance

Plexus Corp.; Livingston; On-site; GBP 90,000 - 120,000; Full time

Job summary

Plexus Corp. is seeking a seasoned IT Governance, Risk, and Compliance (GRC) leader to manage and mature the organization’s GRC program in alignment with global standards.

You will oversee policy development, risk assessments and audits, while coordinating third-party risk and driving continuous improvement across security controls. Ideal candidates have broad experience in GRC, strong leadership, and deep knowledge of regulatory requirements such as ISO 27001, NIST CSF, GDPR, and SOC 2.

Qualifications

• Bachelor's Degree with 8+ years of related experience or equivalent.
• Advanced leadership and decision-making capabilities in fast-paced environments.
• Strong knowledge of industry security frameworks and regulations.

Responsibilities

• Lead IT GRC program and drive development of framework, policies and procedures.
• Coordinate internal and external cybersecurity audits and remediation tracking.
• Oversee third-party risk management and supplier assessments.
• Socialize IT and cybersecurity policies across the organization.
• Drive continuous improvement of security controls and automate controls where feasible.
• Monitor KPIs/KRIs and report to executive leadership.

Skills

GRC leadership

Risk assessment

Policy development

Stakeholder communication

Project management

Leadership

Regulatory knowledge

Cybersecurity frameworks

Education

Bachelor's Degree

Tools

ServiceNow GRC

Vanta

Job description

Plexus Corp. is seeking a seasoned IT Governance, Risk, and Compliance (GRC) leader to manage and mature the organization’s GRC program in alignment with global standards.

You will oversee policy development, risk assessments and audits, while coordinating third-party risk and driving continuous improvement across security controls. Ideal candidates have broad experience in GRC, strong leadership, and deep knowledge of regulatory requirements such as ISO 27001, NIST CSF, GDPR, and SOC 2.