Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead IT GRC initiatives, manage audits, and ensure compliance effectiveness.
- Company: Join a forward-thinking firm focused on governance, risk, and compliance.
- Benefits: Enjoy a hybrid work style with competitive salary and growth opportunities.
- Why this job: Make a real impact in IT security while collaborating with leadership and clients.
- Qualifications: Extensive GRC experience and industry-related certifications preferred.
- Other info: Work in a dynamic environment that values cultural change and innovation.
The predicted salary is between 60000 - 84000 £ per year.
IT GRC Lead
Salary: 70,000 – 80,000
Work style: Hybrid 2 days a week in the Office
Location: Birmingham
Must-Have Skills and Experience:
Extensive experience in managing audits and driving continuous improvement of controls.
Expert understanding of control frameworks (e.g., ITIL, COBIT, NIST).
Strong communication skills.
Excellent Governance, Risk, and Compliance (GRC) skills.
Effective utilization and management of external suppliers.
Ability to react quickly, decisively, and professionally.
Industry-related legal, compliance, information security, or business continuity management certification (preferred).
Key Responsibilities:
Partner with IT & Business Leadership to provide assurance of control effectiveness.
Manage and facilitate client audits.
Ensure continuous improvement of standards.
Evaluate and determine relevant IT compliance requirements and controls.
Partner with key clients/auditors to support compliance requirements.
Automate and systemize IT & business controls.
Implement GRC tools and train management on control ownership.
Report regularly to top management.
Maintain an inventory of all regulatory, commercial, and organizational technology compliance requirements.
Facilitate the creation and modification of technology compliance policies.
Implement and maintain a compliance issue management tracking and resolution process.
Report IT compliance risk and control effectiveness to key stakeholders.
Lead the firm\’s response to internal and external audits and reviews.
Establish, monitor, and report on the state of IT compliance.
Create an IT compliance training and awareness program.
Lead self-assessments against global standards.
Benchmark against ISO27001+ and NIST.
Provide input and direction to the Cyber Security strategy.
Manage the Governance, Risk, and Compliance tool.
Update control standards and embed control ownership.
Drive cultural change to ensure IT security is a key consideration for new systems and processes.
Lead by example by living the values of the firm
GRC Manager employer: Hays
Contact Detail:
Hays Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land GRC Manager
✨Tip Number 1
Familiarize yourself with the specific control frameworks mentioned in the job description, such as ITIL, COBIT, and NIST. Being able to discuss these frameworks in detail during your conversations will demonstrate your expertise and understanding of the role.
✨Tip Number 2
Network with professionals in the GRC field, especially those who have experience in managing audits and compliance. Engaging with industry peers can provide you with valuable insights and potentially lead to referrals.
✨Tip Number 3
Prepare to showcase your strong communication skills by practicing how you would explain complex GRC concepts to non-technical stakeholders. This will be crucial in demonstrating your ability to partner effectively with IT and business leadership.
✨Tip Number 4
Stay updated on the latest trends and changes in compliance regulations and information security. Being knowledgeable about current events in the industry will help you stand out as a candidate who is proactive and well-informed.
We think you need these skills to ace GRC Manager
Some tips for your application 🫡
Highlight Relevant Experience: Make sure to emphasize your extensive experience in managing audits and improving controls. Use specific examples that demonstrate your expertise in control frameworks like ITIL, COBIT, or NIST.
Showcase Communication Skills: Since strong communication skills are a must-have, include instances where you effectively communicated with stakeholders or led teams. This will help illustrate your ability to partner with IT & Business Leadership.
Detail Your GRC Knowledge: Clearly outline your Governance, Risk, and Compliance (GRC) skills. Mention any relevant certifications you hold and how they relate to the responsibilities of the GRC Manager role.
Tailor Your Application: Customize your CV and cover letter to reflect the key responsibilities listed in the job description. Address how you can automate and systemize IT & business controls, and your approach to compliance training and awareness programs.
How to prepare for a job interview at Hays
✨Showcase Your Audit Management Experience
Be prepared to discuss your extensive experience in managing audits. Highlight specific examples where you drove continuous improvement of controls and how you partnered with IT and business leadership to ensure control effectiveness.
✨Demonstrate Your Knowledge of Control Frameworks
Familiarize yourself with key control frameworks like ITIL, COBIT, and NIST. Be ready to explain how you've applied these frameworks in previous roles and how they can benefit the organization you're interviewing with.
✨Communicate Effectively
Strong communication skills are essential for this role. Practice articulating complex GRC concepts in a clear and concise manner. Prepare to discuss how you've effectively communicated compliance requirements to various stakeholders in the past.
✨Prepare for Scenario-Based Questions
Expect scenario-based questions that assess your ability to react quickly and decisively. Think of situations where you had to manage compliance risks or lead responses to audits, and be ready to share your thought process and outcomes.
