Strategic GRC & Cyber Security Specialist

Dunelm; Leicester Forest East; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Salary Advance

Pension contributions

ShareSave scheme

Training and coaching

Wellbeing support

Job summary

Dunelm seeks a Governance, Risk & Compliance (GRC) Specialist to bolster our Information Security team and mature cyber security governance across the business. You will work with technology, retail operations, finance, legal, procurement and HR to embed security into processes and regulatory compliance.

The role requires strong stakeholder management, experience with GRC frameworks and third‑party risk programs, and the ability to drive metrics and continual improvement in a large retail

Qualifications

• Experience in Governance, Risk & Compliance, Information Security or Cyber Security.
• Strong understanding of Cyber Security Risk, CSF 2.0, PCI DSS.
• Experience conducting cyber risk assessments.
• Experience with third‑party security assurance programmes.
• Experience writing policies, standards and governance documentation.
• Experience supporting audits and regulatory compliance activities.
• Experience producing security metrics and executive reporting.

Responsibilities

• Develop, maintain and continually improve the Information Security Management System.
• Coordinate internal and external security audits.
• Support evidence collection for compliance activities.
• Monitor regulatory changes and assess business impact.
• Support security governance across all business functions.
• Administer the Cyber Security risk register toolset.
• Facilitate cyber risk assessments across projects and operations.
• Oversee supplier cyber security assurance processes.
• Produce reports for senior management and executives.
• Embed security governance in projects from inception.
• Develop governance and compliance KPIs and KRIs.
• Drive continual improvement across governance and compliance processes.
• Act as a trusted advisor to stakeholders.

Skills

Governance, Risk & Compliance

Information Security

Cyber Security

Regulatory compliance

Stakeholder management

Auditing

Policies & governance docs

Education

Bachelor's degree (or equivalent)

Cyber security certifications (e.g., CISSP, CISM)

Tools

LogicGate

OneTrust

AuditBoard

Job description

Dunelm seeks a Governance, Risk & Compliance (GRC) Specialist to bolster our Information Security team and mature cyber security governance across the business. You will work with technology, retail operations, finance, legal, procurement and HR to embed security into processes and regulatory compliance.

The role requires strong stakeholder management, experience with GRC frameworks and third‑party risk programs, and the ability to drive metrics and continual improvement in a large retail