Senior Technology Governance, Risk & Compliance (GRC) Specialist in Leeds

Senior Technology Governance, Risk & Compliance (GRC) Specialist

Hello! Thanks for stopping by. Let us tell you about all the great reasons to join us here at Yorkshire Water:

• We offer a competitive salary, depending on experience
• Annual incentive related bonus (£1000 maximum bonus opportunity for the performance year)
• Attractive pension scheme (up to 12% company contribution)
• Development opportunities in line with the Senior Technology GRC Specialist progression plan
• 25 days annual leave plus bank holidays - plus 2 extra wellness days!
• Life assurance cover of 4 times pensionable salary
• A great benefits package - choose from health cash plan scheme, critical illness insurance, dental insurance, life assurance flex and partner cover.
• Retail savings scheme
• Online GP service, cycle to work scheme, gym membership discounts and many more!

Location

This role will initially be based in Bradford but we're moving our office to Leeds Valley Park in September 2026, so you'll be based there in the future - Hybrid Working

Work type

Permanent. 37 hours per week, Monday - Friday.

We have an exciting opportunity for a Senior Technology GRC Specialist to join the Information & Cyber Security team at Yorkshire Water and be a part of helping Yorkshire Water to provide the best service to our customers.

Could this be you?

What we do

Everyone has an idea of what a water company does.

Here in Yorkshire, we make sure that over 5.4 million people living in the region and the millions of people who visit our region each year, can rely on our services, and have clean and safe drinking water on tap and that their wastewater is taken away.

But for us, it's so much more than this.

We look after communities, protect the environment, and plan to look after Yorkshire's water, today, tomorrow 24/7, 365 days a year.

We provide essential water and wastewater services to every corner of the Yorkshire region, and play a key role in the region's health, wellbeing, and prosperity.

New environmental legislation, unprecedented levels of investment and changing expectations from customers means that this is an exciting time to discover opportunities within the water industry.

Information & Cyber Security team are a key part of how we plan to meet the changing expectations of customers and regulators.

• Where you fit in
• As our
• Senior Technology GRC Specialist you will
• Lead, mentor and develop Technology GRC analysts and junior team members, ensuring the team has the skills, knowledge and capabilities required to deliver effective governance, risk and compliance activities.
• Champion the value of governance, risk and compliance at management level, driving cultural change and embedding best-practice GRC principles across the organisation.
• Support the management and continual improvement of the Technology GRC and Risk Management Frameworks, ensuring alignment with regulatory requirements, industry standards and business objectives.
• Build and maintain effective relationships with senior leaders, business units, auditors, regulators, vendors and external agencies to support Technology governance, risk and compliance outcomes.
• Lead Technology compliance monitoring, controls testing and assurance activities, managing audits, findings, remediation plans, policy exemptions and ongoing compliance obligations.
• Conduct and facilitate Technology risk assessments, audits and reviews, maintaining risk registers, evaluating controls and providing proportionate recommendations to mitigate risk and strengthen resilience.
• Provide expert advice, guidance and training on Technology governance, risk and compliance matters, enabling informed decision-making and increasing organisational awareness.
• Develop, implement, maintain and assure Technology policies, standards and procedures, ensuring they remain effective, compliant and aligned with recognised frameworks and best practice.
• Support Technology incident investigations and regulatory reporting requirements, coordinating with stakeholders and data owners to ensure incidents are effectively managed and resolved in accordance with legal and company obligations.
• Manage Technology GRC reporting, metrics, KPIs and KRIs, while driving continuous improvement, influencing stakeholders, supporting commercial objectives and fostering strong collaboration across the organisation.
• What skills & qualifications you will need
• Certification in information technology, Computer Science, Information Systems or a related discipline, or equivalent demonstrable industry experience.
• Proven experience in Technology Governance, Risk and Compliance, with at least three years operating in a senior specialist or leadership role.
• Strong track record of partnering with senior leaders and stakeholders to provide expert advice, guidance and training on governance, risk and compliance matters.
• Comprehensive knowledge of recognised Technology GRC frameworks, standards and methodologies, including COBIT, ITIL, ISO 27001, NIST and GDPR.
• Highly developed influencing, negotiation and stakeholder management skills, with the ability to build credibility, drive engagement and inspire positive change.
• Excellent analytical, problem-solving and decision-making capabilities, with experience identifying, assessing and mitigating Technology risks through practical and effective controls.
• Strong communication, presentation, organisational and project management skills, with the ability to explain complex technical and compliance concepts to a wide range of audiences and manage competing priorities effectively.
• Demonstrates high levels of professionalism, integrity and discretion, alongside a proactive, innovative mindset and the ability to adapt to evolving technologies, risks and regulatory requirements.
• You will also benefit from having
• Experience operating in a strategic and/or operational leadership role within a commercial and/or highly regulated environment, with the ability to balance business objectives and regulatory obligations.
• Demonstrable experience in Technology and Information Security incident management and investigations, including working within established governance and reporting frameworks.
• Good understanding of General Data Protection Regulation (GDPR) requirements, with practical experience of working alongside legal, audit and compliance teams to ensure regulatory adherence.
• Proven experience conducting Technology compliance reviews and audits, alongside strong stakeholder, vendor and third-party management and negotiation skills.

Although we operate 24 hours a day, 365 days a year, it's important to us that we support flexible working patterns and job share options (when we can), to help you make the best of both your work and home life.

We know that juggling childcare responsibilities or getting that ideal work/life balance isn't always easy!

Do we sound like your cup of tea

If you've got experience as a Senior Technology GRC Specialist and want to help us deliver great service for our customers whilst looking after the environment, then be sure to apply today to find out what a career with Yorkshire Water can offer you.

Closing date - 28th July

If successful for the role, you will be required to undergo pre-employment checks that will include a Basic Disclosure Check, carried out through a Third-Party Company, prior to commencing employment.

Depending on the role, you may also be required to go through the security vetting process for either a Counter Terrorist Check or Security Check clearance.

All our roles are subject to a medical questionnaire, and further medicals when required.

We are committed to removing barriers and ensuring our recruitment process is accessible to everyone.

We offer a range of adjustments to make your application experience as comfortable and straightforward as possible.

If you have an accessibility need, disability, or condition that requires changes to the recruitment process, please include this information in your application.

We will then discuss any reasonable adjustments required.

Kelda Group reserve the right to close this position before the published closing date, should the need occur.

We therefore advise that you complete and submit your application as soon as possible.

No agencies please.

#J-18808-Ljbffr