Strategic GRC Controls & Assurance Lead

Fortice Ltd; Warwick; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Fortice Ltd in Warwick seeks an experienced GRC Controls & Oversight Lead to support governance, assurance, and control environments across IT and OT. The role requires hands-on oversight, engaging with multiple stakeholders to drive assurance activities to completion.

The successful candidate will navigate complex processes, manage remediation backlogs, and ensure evidence-based control effectiveness while aligning with regulatory obligations.

Qualifications

• Experience in GRC, assurance, audit, or oversight functions.
• Strong understanding of security and technology control environments across IT/OT.
• Experience with control testing, assurance reviews, or audits.
• Ability to analyse complex processes and identify control weaknesses.
• Experience managing large volumes of actions, findings, risks, and remediation.
• Strong stakeholder management and communication skills.
• Ability to interpret policies, standards and control requirements.
• Proven ability to work independently and drive tasks to completion.
• Highly organised with strong attention to detail.

Responsibilities

• Lead and coordinate controls assurance and testing across IT/OT.
• Review and validate control effectiveness against policies and standards.
• Identify deficiencies and track remediation efforts.
• Manage assurance backlogs and prioritise actions.
• Maintain oversight of risks, audit observations, and remediation plans.
• Collaborate with security, engineering, and business teams for evidence.
• Support audits with evidence collection and stakeholder engagement.
• Produce governance reporting and senior stakeholder updates.
• Ensure controls align with risk appetite and regulatory obligations.
• Facilitate governance forums and risk reviews as needed.
• Drive continuous improvement of governance processes.

Skills

GRC

Audit

Controls testing

Stakeholder management

Policy interpretation

Independent worker

Detail oriented

Regulatory know-how

Education

Degree in Information Security / Risk Mgmt

CRISC / CISA (adv)

ISO 27001 Lead Auditor (adv)

Tools

GRC tools

Audit software

ISMS frameworks

Job description

Fortice Ltd in Warwick seeks an experienced GRC Controls & Oversight Lead to support governance, assurance, and control environments across IT and OT. The role requires hands-on oversight, engaging with multiple stakeholders to drive assurance activities to completion.

The successful candidate will navigate complex processes, manage remediation backlogs, and ensure evidence-based control effectiveness while aligning with regulatory obligations.