Senior Security GRC Specialist

TN United Kingdom; London; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading company in Cyber Security is seeking a Senior Security GRC Specialist to join their Governance Risk and Compliance team. The role involves managing compliance projects, conducting risk assessments, and updating security policies. The ideal candidate will have a strong background in information security and a passion for protecting the brand.

Qualifications

• Experience in managing compliance projects and conducting security assessments.
• Strong knowledge of PCI DSS and security policies.
• Ability to mentor junior team members.

Responsibilities

• Manage and maintain ASOS compliance projects, including coordinating audit activities.
• Assist in maintaining the CISO’s security risk registers and conducting security risk assessments.
• Support security assessments of third-party suppliers.

Skills

Information Security

Risk Management

Compliance

PCI DSS

Audit Coordination

Job description

An exciting opportunity has arisen for a Senior Security GRC Specialist to join the ASOS Governance Risk and Compliance (GRC) team in Cyber Security.

Reporting to the Security Governance, Risk and Compliance Manager, this role will assist in the development, enhancement, and execution of ASOS’s information security risk and compliance functions. Responsibilities include maintaining PCI DSS compliance, updating security policies and standards, and managing third-party supplier risks. The role also offers subject matter expertise and support in security risk management. We seek someone passionate about protecting colleagues and the ASOS brand, capable of thriving in a dynamic security landscape.

The candidate will operate at multiple levels: collaborating within the GRC team, working with the wider Security team, and supporting various ASOS business areas with their risk and compliance needs.

Key Responsibilities

1. Manage and maintain ASOS compliance projects, including coordinating audit activities.
2. Assist in maintaining the CISO’s security risk registers and conducting security risk assessments and workshops.
3. Support security assessments of third-party suppliers via the ASOS risk management platform.
4. Track and manage corrective action plans for audit findings, standards exceptions, and control deficiencies.
5. Support other security teams and business areas with risk and compliance requirements.
6. Write and update security policies and standards.

What Success Looks Like

1. Be an integral part of the GRC team, ensuring smooth GRC operations.
2. Build effective relationships across business areas.
3. Mentor and guide junior GRC team members.