Strategic GRC & Cyber Risk Manager

Government Recruitment Service; West of England; Presencial; GBP 59.000 - 71.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Disability Confident

Descripción de la vacante

Government Recruitment Service is seeking an Information Security Governance, Risk & Compliance Manager to lead cyber risk management, security policy, and enterprise assurance for the Cabinet Office Digital. You will bridge executive strategy with technical implementation, guiding risk advice to SIROs and risk committees while leveraging GovS 007, CAF, ISO 27001, and NIST standards.

You will manage the central GRC program, drive Secure by Design across programs, and oversee risk workshops,

Formación

• Proven experience leading GRC and security policy programs.
• Experience with GovS 007, CAF, ISO 27001 and NIST CSF.
• Ability to present risk to non-technical audiences.

Responsabilidades

• Drive the departmental cyber security governance strategy and frameworks.
• Oversee GovAssure programme across the Cabinet Office and guidance to service owners.
• Embed Secure by Design (SbD) across digital initiatives and data projects.
• Represent Cyber Security on governance boards and present risk trade-offs to leadership.
• Manage commercial requirements, budgets, and contracts for GRC tooling and education platforms.
• Lead and mature the Cyber Risk Register and risk data quality.
• Drive third-party and supply chain assurance programs and risk protocols.
• Provide actionable risk intelligence and regular threat trend insights.

Conocimientos

Governance

Risk management

Compliance

GovS 007

NCSC CAF

ISO 27001

NIST CSF

Descripción del empleo

Government Recruitment Service is seeking an Information Security Governance, Risk & Compliance Manager to lead cyber risk management, security policy, and enterprise assurance for the Cabinet Office Digital. You will bridge executive strategy with technical implementation, guiding risk advice to SIROs and risk committees while leveraging GovS 007, CAF, ISO 27001, and NIST standards.

You will manage the central GRC program, drive Secure by Design across programs, and oversee risk workshops,