Senior Technology Governance, Risk & Compliance (GRC) Specialist in Leeds

Company description: Water Utility Company based in Yorkshire region of England.

We offer a competitive salary, depending on experience £51,563 - £64,474 (band 4a).

Annual incentive related bonus (£1000 maximum bonus opportunity for the performance year).

Attractive pension scheme (up to 12% company contribution).

Development opportunities in line with the Senior Technology GRC Specialist progression plan.

25 days annual leave plus bank holidays plus 2 extra wellness days!

Life assurance cover of 4 times pensionable salary.

A great benefits package choose from health cash plan scheme, critical illness insurance, dental insurance, life assurance flex and partner cover.

Retail savings scheme, online GP service, cycle to work scheme, gym membership discounts and many more!

Location: This role will initially be based in Bradford but we are moving our office to Leeds Valley Park in September 2026, so you’ll be based there in the future - Hybrid Working.

Work type: Permanent. 37 hours per week, Monday to Friday.

We have an exciting opportunity for a Senior Technology GRC Specialist to join the Information & Cyber Security team at Yorkshire Water and be a part of helping Yorkshire Water to provide the best service to our customers.

What we do: Everyone has an idea of what a water company does. Here in Yorkshire, we make sure that over 5.4 million people living in the region and the millions of people who visit our region each year can rely on our services, and have clean and safe drinking water on tap and that their wastewater is taken away. But for us, it’s so much more than this. We look after communities, protect the environment, and plan to look after Yorkshire’s water, today, tomorrow 24/7, 365 days a year. We provide essential water and wastewater services to every corner of the Yorkshire region and play a key role in the region’s health, wellbeing, and prosperity.

New environmental legislation, unprecedented levels of investment and changing expectations from customers means that this is an exciting time to discover opportunities within the water industry. The Information & Cyber Security team are a key part of how we plan to meet the changing expectations of customers and regulators.

The Senior Technology Governance, Risk and Compliance (GRC) Specialist reports directly to the Technology & Security Governance, Risk & Compliance Manager, who leads the GRC function on behalf of the Technology Senior Leadership Team. The role is responsible for ensuring Yorkshire Water’s Technology (IT) policies, standards and practices are effectively managed and aligned with industry best practices and recognised frameworks. Key responsibilities include conducting and managing technology risk assessments, audits and compliance reviews to identify risks, issues and areas for improvement, while recommending appropriate mitigation strategies. The Senior Technology GRC Specialist also provides expert advice, guidance, training and constructive challenge on governance, risk and compliance matters, helping to promote a strong culture of awareness and compliance across both the Technology function and the wider organisation. Working closely with Technology management teams, business units and internal and external stakeholders, the role supports the achievement of organisational objectives and ensures that Technology governance, risk and compliance obligations are effectively managed.

Where you fit in: As our Senior Technology GRC Specialist you will:

• Lead, mentor and develop Technology GRC analysts and junior team members, ensuring the team has the skills, knowledge and capabilities required to deliver effective governance, risk and compliance activities.
• Champion the value of governance, risk and compliance at management level, driving cultural change and embedding best-practice GRC principles across the organisation.
• Support the management and continual improvement of the Technology GRC and Risk Management Frameworks, ensuring alignment with regulatory requirements, industry standards and business objectives.
• Build and maintain effective relationships with senior leaders, business units, auditors, regulators, vendors and external agencies to support Technology governance, risk and compliance outcomes.
• Lead Technology compliance monitoring, controls testing and assurance activities, managing audits, findings, remediation plans, policy exemptions and ongoing compliance obligations.
• Conduct and facilitate Technology risk assessments, audits and reviews, maintaining risk registers, evaluating controls and providing proportionate recommendations to mitigate risk and strengthen resilience.
• Provide expert advice, guidance and training on Technology governance, risk and compliance matters, enabling informed decision-making and increasing organisational awareness.
• Develop, implement, maintain and assure Technology policies, standards and procedures, ensuring they remain effective, compliant and aligned with recognised frameworks and best practice.
• Support Technology incident investigations and regulatory reporting requirements, coordinating with stakeholders and data owners to ensure incidents are effectively managed and resolved in accordance with legal and company obligations.
• Manage Technology GRC reporting, metrics, KPIs and KRIs, while driving continuous improvement, influencing stakeholders, supporting commercial objectives and fostering strong collaboration across the organisation.

What skills & qualifications you will need:

• Certification in information technology, Computer Science, Information Systems or a related discipline, or equivalent demonstrable industry experience.
• Proven experience in Technology Governance, Risk and Compliance, with at least three years operating in a senior specialist or leadership role.
• Strong track record of partnering with senior leaders and stakeholders to provide expert advice, guidance and training on governance, risk and compliance matters.
• Comprehensive knowledge of recognised Technology GRC frameworks, standards and methodologies, including COBIT, ITIL, ISO 27001, NIST and GDPR.
• Highly developed influencing, negotiation and stakeholder management skills, with the ability to build credibility, drive engagement and inspire positive change.
• Excellent analytical, problem-solving and decision-making capabilities, with experience identifying, assessing and mitigating Technology risks through practical and effective controls.
• Strong communication, presentation, organisational and project management skills, with the ability to explain complex technical and compliance concepts to a wide range of audiences and manage competing priorities effectively.
• Demonstrates high levels of professionalism, integrity and discretion, alongside a proactive, innovative mindset and the ability to adapt to evolving technologies, risks and regulatory requirements.

You will also benefit from having:

• Experience operating in a strategic and/or operational leadership role within a commercial and/or highly regulated environment, with the ability to balance business objectives and regulatory obligations.
• Demonstrable experience in Technology and Information Security incident management and investigations, including working within established governance and reporting frameworks.
• Good understanding of General Data Protection Regulation (GDPR) requirements, with practical experience of working alongside legal, audit and compliance teams to ensure regulatory adherence.
• Proven experience conducting Technology compliance reviews and audits, alongside strong stakeholder, vendor and third-party management and negotiation skills.

Although we operate 24 hours a day, 365 days a year, it’s important to us that we support flexible working patterns and job share options (when we can), to help you make the best of both your work and home life. We know that juggling childcare responsibilities or getting that ideal work/life balance isn’t always easy!

If you’ve got experience as a Senior Technology GRC Specialist and want to help us deliver great service for our customers whilst looking after the environment, then be sure to apply today to find out what a career with Yorkshire Water can offer you.

Closing date 28th July.

If successful for the role, you will be required to undergo pre-employment checks that will include a Basic Disclosure Check, carried out through a Third-Party Company, prior to commencing employment. Depending on the role, you may also be required to go through the security vetting process for either a Counter Terrorist Check or Security Check clearance.

All our roles are subject to a medical questionnaire, and further medicals when required.

We are committed to removing barriers and ensuring our recruitment process is accessible to everyone. We offer a range of adjustments to make your application experience as comfortable and straightforward as possible. If you have an accessibility need, disability, or condition that requires changes to the recruitment process, please include this information in your application. We will then discuss any reasonable adjustments required.

Kelda Group reserve the right to close this position before the published closing date, should the need occur. We therefore advise that you complete and submit your application as soon as possible.

No agencies please.