Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead IT Security and GRC initiatives, shaping governance and compliance strategies.
- Company: Join a forward-thinking public sector organisation with a national impact.
- Benefits: Competitive salary, generous leave, strong pension, and hybrid working options.
- Why this job: Be part of a transformative team driving IT security innovation.
- Qualifications: Experience in IT governance, risk management, and cyber security frameworks.
- Other info: Dynamic role with opportunities for professional growth and development.
IT Security & GRC Manager
Permanent – £48k – £52k + strong benefits
Location: Hybrid – Bristol
Your new company
I am looking to recruit an IT Security & GRC Manager to join a great public sector organisation. You\’ll join a forward-thinking organisation with a national footprint and a user base exceeding 2,000 people. With ambitious plans for IT Security transformation, this is a fantastic opportunity to be part of a dynamic and evolving team. The organisation is investing in its IT and Security function and is looking for a leader who can inspire and drive change.
Your new role
This is an interesting opportunity to join a great organisation at a key time when they are investing in and transforming their IT and Security estate. You will be running the IT Security and GRC department, reporting into the Head of IT. Key parts of the role include:
- Shape and steer the direction of IT security governance, ensuring alignment with business strategy, HMG requirements, and evolving threat landscapes.
- Ensure the organisation meets the standards expected of a government department, embedding capabilities to Identify, Detect, Protect, Respond, and Recover in line with defined frameworks, standards, and practices.
- To lead modern IT/cyber security thinking and deliverable initiatives.
- Understand the risk landscape affecting IT systems and information. Prioritise risk treatment and resources based on impact, human factors, and cost-effectiveness.
- Assurance and compliance oversight and management
- Manage the IT Security, Governance, Risk and Compliance team, ensuring clear direction, support, and professional development.
What you\’ll need to succeed
- At least one of the following, ideally 2 of CISM / CISA / CISMP
- Strong demonstrable experience of IT and cyber governance, compliance, risk, and security within enterprise IT environments.
- Awareness and experience of working within industry, Government and NCSC security governance frameworks, standards, policies, and legislation (e.g. GovAssure, Cyber Assurance Framework, Government Functional Standards, Cyber Essentials, GDPR.
- Experience communicating with stakeholders at all levels.
- Experience leading or contributing to the response and resolution of IT/cyber security incidents, including investigation, remediation, assurance, continuous improvement.
- Experience of being a central point for provision of IT/cyber security and risk guidance.
- Able to manage sensitive and challenging situations with discretion, fairness, empathy.
- Awareness of vulnerability management tools; enterprise IT systems, services, infrastructure, networking, applications in cloud, on-prem, and hybrid environments. Security tooling such as Mimecast and Microsoft Defender, Sentinel, IDAM services; ITSM tools such as Halo, Lansweeper.
- Experience leading and managing an IT/Cyber Security function and working groups.
- ITIL and ITSM.
What you\’ll get in return
- Salary of between £48k-£52k
- 25 days annual leave + bank holidays – additional day for each year of service (up to 30 days)
- Hybrid working 2 days in Bristol per week (open to negotiation for the right candidate)
- Strong civil service pension (27%)
- And more!
What you need to do now
If you\’re interested in this role, click \’apply now\’ to forward an up-to-date copy of your CV, or call us now.
If this job isn\’t quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.
Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C\’s, Privacy Policy and Disclaimers which can be found at hays.co.uk
IT Security & GRC Manager employer: Hays
Contact Detail:
Hays Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land IT Security & GRC Manager
✨Tip Number 1
Network like a pro! Reach out to your connections in the IT security field and let them know you're on the lookout for opportunities. You never know who might have the inside scoop on a role that’s perfect for you.
✨Tip Number 2
Prepare for interviews by brushing up on your knowledge of current IT security trends and frameworks. Be ready to discuss how your experience aligns with the organisation's goals, especially around governance and compliance.
✨Tip Number 3
Showcase your leadership skills! When you get the chance to speak about your past roles, highlight how you've inspired teams and driven change in IT security practices. This is key for a managerial position.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets the attention it deserves. Plus, we love seeing candidates who are proactive about their job search.
We think you need these skills to ace IT Security & GRC Manager
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the IT Security & GRC Manager role. Highlight your relevant experience and skills that align with the job description. We want to see how you can bring value to our team!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about IT security and how your background makes you the perfect fit for this role. Let us know what excites you about joining our forward-thinking organisation.
Showcase Your Achievements: Don’t just list your responsibilities; showcase your achievements in previous roles. Quantify your successes where possible, like improvements in compliance or risk management. We love to see how you've made a difference!
Apply Through Our Website: We encourage you to apply through our website for a smoother application process. It helps us keep track of your application and ensures you don’t miss out on any important updates. We can’t wait to hear from you!
