Information Security GRC Lead

• Job
• Title: Information Security GRC Lead
• Target
• Start
• Date: ASAP Contract
• Type: Permanent, Part Time, Full Time, Job Share option available
• Salary

Range: Up to £105,000 Location: Eastleigh, hybrid Closing Date for applications: Friday 14th August

Information Security GRC Lead: The Governance, Risk and Compliance (GRC) Leadis a senior leadership role within the Information Security function, responsible for defining, operating, and continuously improving theorganisation’s security governance, risk management, and compliance capabilities.

Reporting directly to the CISO, the roleensures that information security risks are identified, assessed, managed, andreported in line with organisational risk appetite, regulatory obligations, andindustry best practice.

The role provides authoritative oversight of securitycompliance frameworks, third‑party risk management, and human risk management, and ensures clear, high‑qualityrisk reporting to governance forums.

The GRC Lead also plays a key role in modernising GRC practices through the use ofautomation and AI‑enabled tools, including AI agents to supportrisk assessments and security awareness programmes.

Main Responsibilities as Information Security GRC Lead

• Lead and manage the Information Security GRC function, ensuring effective governance, risk, and compliance across the organisation.
• Define and maintain the information security governance framework, policies, standards, and procedures.
• Own and oversee the implementation and ongoing maintenance of key compliance frameworks, including: ISO/IEC 27001, PCI DSS and Alignment with NIST and ISF frameworks.
• Lead and oversee security risk management, ensuring risks are identified, assessed, treated, and tracked through to resolution or acceptance.
• Manage the organisation's third party and supplier security risk assessment programme, including due diligence, ongoing assurance, and risk remediation.
• Lead the human risk management programme, including security awareness, behaviour change initiatives, and insider risk considerations.
• Drive the use of AI enabled capabilities within GRC, including: AI agents to support and streamline risk assessments, AI assisted analysis of control effectiveness and risk trends, and AI enhanced security awareness and training programmes.
• Oversee IT risk and controls management, ensuring alignment between technology risks, security controls, and enterprise risk management.
• Produce clear, accurate, and timely information security KRIs and KPIs, including trend analysis and risk insights.
• Provide high quality reporting for security governance forums, executive committees, and second line risk functions.
• Coordinate and support internal and external audits, certifications, and assurance activities.
• Work closely with Security Architecture, Engineering, and Operations to ensure GRC requirements are practical, risk based, and effectively implemented.

Skills and experience you need as Information Security GRC Lead

• Significant experience in information security governance, risk, and compliance leadership roles.
• Proven experience implementing and maintaining ISO/IEC 27001 and PCI DSS compliance programmes.
• Strong understanding of security and risk frameworks, including NIST, SCF and ISF.
• Experience leading third-party / supplier security risk management programmes.
• Experience designing and operating security awareness and human risk management initiatives.
• Experience producing executive level risk, KRI, and KPI reporting for governance forums.
• Proven people leadership experience managing multi disciplinary teams.
• Strong leadership and stakeholder management capability.
• Relevant professional certifications, such as: CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Lead Auditor
• Experience implementing or using GRC tooling and automation platforms.
• Experience applying AI or automation to risk assessments, control testing, or awareness programmes.

Here are some of the benefits you can enjoy at Ageas

• Flexible Working- Smart Working @ Ageasgives employees flexibility around location (as long as it’s within the UK) and, for many of our roles, flexibility within the working day to manage other commitments, such as school drop offs etc.

We also offer all our vacancies part-time/job-shares.

We also offer a minimum of 35 days holiday (inc. bank holidays) and you can buy and sell days.

• Supporting your Health- Dental Insurance Health Cash Plan, Health Screening, Will Writing, Voluntary Critical Illness, Mental Health First Aiders, Well Being Activities – Mindfulness.
• Supporting your Wealth- 50% off esure and Sheilas' Wheels motor and home insurance, Annual Bonus Schemes, Annual Salary Reviews, Competitive Pension, Employee Savings, Employee Loans.
• Supporting you at Work- Well-being activities, mindfulness sessions, Sports and Social Club events and more.
• Supporting you and your Family- Maternity/pregnant parent/primary adopter entitlement of 16 weeks at full pay and paternity/non-pregnant parent/co-adopter at 8 weeks’ full pay.
• Benefits for Them- Partner Life Assurance and Critical Illness cover.
• Get some Tech- Deals on various gadgets including Wearables, Tablets and Laptops.
• Getting around- Car Salary Exchange, Cycle Scheme, Vehicle Breakdown Cover.
• Supporting you back to work- Returnto work programme after maternity leave.

About Ageas

We are one of the largest car and home insurers in the UK.

Our People help Ageas to be a thriving, creative and innovative place to work.

We show this in the service we provide to over four million customers.

As an inclusive employer, we encourage anyone to apply.

We’re a signatory of the Race at Work Charter and Women in Finance Charter, member of i CANand GAIN.

As a Disability Confident Leader, we are committed to ensuring our recruitment processes are fully inclusive.

That means if you are applying for a job with us, you will have fair access to support and adjustments throughout your recruitment experience.

If the list does not cover the support you need, please contact our Recruitment Team to discuss how they can help.

We also guarantee an interview for applicants with a disability who meet the minimum criteria for the role.

For more information, please see Ageas Everyone.

We have a zero-tolerance approach towards any form of harassment during the recruitment process, ensuring that everyone is treated with respect and professionalism.

Our aim is to have great people everywhere in our business and we’re always looking for outstanding people to join us.

Most roles across Ageas allow a proportion of your time to be spent working from home and we’re open to discussing flexible working, including full-time, part-time or job share arrangements.

To find out more about Ageas, see About Us.

#J-18808-Ljbffr