Technology GRC Leader & Assurance Strategist

JDSports; Bury; On-site; GBP 120,000 - 160,000; Full time

Job summary

JDSports is seeking a Head of Technology GRC to lead the Group's risk, governance and assurance function across the technology estate. You will shape a sustainable second-line capability, drive policies and controls, and partner with executive leadership to manage cyber security, ITGC and third-party risk.

You will build a high-performing team, set priorities, and embed governance across multi-fascia environments, ensuring effective challenge and continuous improvement in risk management and

Qualifications

• Experience leading Technology GRC, Technology Risk, IT Controls, Technology Assurance or IT Audit within a complex organisation.
• Strong understanding of technology risk, governance and controls, including ITGC and Provision 29 requirements.
• Experience designing and operating technology control frameworks and second-line testing and assurance programmes.
• Experience embedding Controls by Design and integrating controls into technology delivery and change processes.
• Experience managing technology control deficiencies through remediation, risk acceptance, validation and closure.
• Experience operating GRC platforms and using risk, control and assurance data to support decision-making and reporting.
• Experience of third-party technology risk and assurance, including interpretation of SOC reports and independent assurance outputs.
• Experience applying relevant frameworks and regulatory requirements, including NIST, PCI DSS, data protection and emerging AI governance requirements.
• Experience operating in multi-entity or multi-fascia environments where governance is established centrally and executed locally.
• 10+ years of progressive experience in governance, risk, compliance, or audit, with at least 3 years in a Head of, leadership or equivalent role.

Responsibilities

• Lead and develop the Group Technology GRC function, providing clear direction, leadership and operational oversight across technology risk, controls and assurance, policy and governance, compliance and third-party technology risk.
• Set and manage priorities across the GRC portfolio, balancing risk, regulatory requirements, assurance commitments, business demand and available capacity.
• Set clear accountabilities and performance expectations for the GRC leadership team, ensuring each service has clear ownership, delivery measures, priorities and escalation routes.
• Translate the Technology Risk, Governance & Assurance strategy into an effective and sustainable operating model, services, processes and capabilities.
• Build and mature a high-performing second-line function that provides independent challenge, oversight and assurance across the technology control environment.
• Agree and lead the annual technology assurance programme with the Director of Technology Risk, Governance & Assurance, providing independent oversight of control effectiveness across ITGC, Provision 29, cyber security, identity and access management, technology change, operations, resilience, third-party technology risk, data and emerging technology domains.

Skills

Technology GRC

Leadership

Stakeholder management

Second-line assurance

Risk governance

IT controls

Regulatory knowledge

Education

Professional certifications (CISA/CISM/CISSP) desirable

Tools

GRC tooling

SOC reports comprehension

Job description

JDSports is seeking a Head of Technology GRC to lead the Group's risk, governance and assurance function across the technology estate. You will shape a sustainable second-line capability, drive policies and controls, and partner with executive leadership to manage cyber security, ITGC and third-party risk.

You will build a high-performing team, set priorities, and embed governance across multi-fascia environments, ensuring effective challenge and continuous improvement in risk management and