Technology GRC Lead: Risk, Controls & Assurance

Jd Group; Bryn; On-site; GBP 120,000 - 180,000; Full time

Job summary

Jd Group is recruiting a Head of Technology GRC to lead the Group Technology GRC function, translating risk, governance and assurance strategy into effective services, controls and assurance activities across the Group.

The role sits in Information Security as a second-line function and requires senior leadership across technology risk, control frameworks and supplier risk, with a track record of continuous improvement and independent challenge.

Qualifications

• Experience leading Technology GRC, risk, controls or IT audit in a complex org.
• Strong understanding of governance, controls, and compliance requirements (ITGC, Provision 29).
• Experience designing and operating control frameworks and second-line testing.
• Experience embedding Controls by Design in delivery and change processes.
• Track record of remediation and closure of control deficiencies.

Responsibilities

• Lead and develop Group Technology GRC across risk, controls, assurance, policy and governance.
• Set priorities across the GRC portfolio balancing risk, regulatory needs and demand.
• Define ownership, metrics and escalation routes for the GRC leadership team.
• Translate strategy into sustainable operating model, processes and capabilities.
• Build a high-performing second-line function with clear separation from first line.
• Develop and maintain the Technology GRC service catalogue and governance structures.
• Oversee annual technology assurance programme and independent oversight.
• Lead transition of GRC from programme to permanent Group capability.

Skills

Technology GRC

IT governance

ITGC & regulatory

Third-party risk

Stakeholder management

Leadership

Risk management

Independent challenge

Education

Relevant degree or equivalent experience

Certifications: CISA/CRISC/CISM/CIA/CISSP desirable

Tools

GRC tooling

Job description

Jd Group is recruiting a Head of Technology GRC to lead the Group Technology GRC function, translating risk, governance and assurance strategy into effective services, controls and assurance activities across the Group.

The role sits in Information Security as a second-line function and requires senior leadership across technology risk, control frameworks and supplier risk, with a track record of continuous improvement and independent challenge.