At a Glance
- Tasks: Lead the development and management of governance, risk, and compliance frameworks.
- Company: Respected tech provider specialising in secure managed services for defence and public sectors.
- Benefits: Structured career coaching, tailored training, and comprehensive benefits package.
- Other info: Opportunity to promote a strong security culture and drive professional development.
- Why this job: Make a real impact by ensuring compliance and mitigating risks in a dynamic environment.
- Qualifications: 5+ years in GRC or related fields with strong analytical and communication skills.
The predicted salary is between 69750 - 85250 £ per year.
Governance, Risk and Compliance (GRC) Manager The GRC Manager will take ownership of developing, implementing, and maintaining the organisation's governance, risk management, and compliance frameworks.
You will ensure operational activities align with legal requirements, regulatory standards, and internal policies, while proactively identifying and mitigating enterprise risks.
About the Client
Our client is a highly respected technology and secure managed services provider, specialising in delivering resilient, high-assurance IT infrastructure and security solutions to defense and public sector partners.
They pride themselves on fostering continuous professional development through structured career coaching, tailored training pathways, and comprehensive benefit packages.
Role Summary
The GRC Manager will take ownership of developing, implementing, and maintaining the organisation's governance, risk management, and compliance frameworks.
You will ensure operational activities align with legal requirements, regulatory standards, and internal policies, while proactively identifying and mitigating enterprise risks.
Key Responsibilities
Develop, implement, and manage the overarching GRC strategy, policies, and procedural frameworks.
Conduct enterprise risk assessments and maintain the organisation's central risk register.
Monitor operational, regulatory, cybersecurity, financial, and third-party risks.
Ensure full compliance with relevant statutory regulations, legal standards, and framework requirements.
Coordinate internal and external audit activities, managing the swift remediation of findings.
Establish compliance monitoring mechanisms and present regular reporting to senior leadership.
Collaborate with internal business units to design and embed effective risk mitigation controls.
Monitor regulatory developments and assess their potential operational impact.
Support business continuity, disaster recovery, and information security governance initiatives.
Oversee third-party/vendor risk evaluations and perform required due diligence.
Lead organisation-wide training programmes to promote a strong security and compliance culture.
Required Skills and Experience
Essential
Experience:
Minimum of 5 years demonstrable experience within GRC, Information Security, Audit, or Risk disciplines.
Core
Knowledge:
Thorough understanding of enterprise risk management frameworks and internal audit processes.
Data
Protection:
Proven hands-on experience with GDPR compliance (including ROPA, LIA, and DPIA requirements).
Communication:
Excellent analytical, problem-solving, and senior stakeholder management abilities.
Technical
Aptitude: Experience utilising modern GRC software platforms and risk mapping tools.
Desirable:
Exposure to Defence Cyber Certification (DCC), Cyber Essentials (CE), or Cyber Essentials Plus (CE+).
Familiarity with Secure by Design (Sb D) principles and JSP 453 assurance activities.
Understanding of vendor risk management, SOC2, or NIS2 directives.
Previous experience performing duties as a Crypto Custodian or Alternate Custodian.
Relevant industry certifications such as CISA, CRISC, CISM, or CISSP.
TPBN1_UKTJ
Governance and Compliance Manager in Salisbury employer: Bulb Resourcing
As a Scrum Master at our innovative, multi-award-winning technology company in the UK, you will thrive in a dynamic work culture that champions agility and collaboration. We offer exceptional employee growth opportunities through continuous learning and development, alongside a supportive environment that empowers you to make a meaningful impact. Join us to be part of a forward-thinking team dedicated to transforming digital systems and delivering outstanding value.
