Governance, Risk and Compliance Business Partner - 12 Month Fixed Term Contract in London

This role is being advertised as a 12 month fixed term contract. Do you thrive on influencing teams and embedding effective governance while translating complex standards into practical actions? Can you help ensure ISO compliance, data protection, and security controls are maintained, challenged, and improved across a business? Would you like the opportunity to drive risk, assurance, and compliance across a fast‑paced, remote‑first organisation? If so, we would love to hear from you!

At Livestock Information Ltd, our mission is to be an outstanding service provider of livestock data, empowering government, industry, and farmers to effectively manage disease and infection control, whilst enhancing productivity and innovation in agriculture. To achieve this, we need great people, who share in our values.

As a Governance, Risk, Assurance and Compliance (GRAC) Business Partner at LI, you will be at the heart of our second line of defence, ensuring information security, data protection, and risk management are embedded and effective across the organisation. You will translate ISO standards, data protection obligations, and risk requirements into clear, actionable tasks, holding first‑line owners accountable and maintaining robust controls. In this role, you will coordinate and validate ISMS evidence for external audits, deliver internal audits to assess compliance and identify improvements. You will also support the Head of GRAC and Data Protection Officer in mitigating risks, and lead assurance deep dives across key business processes. You will facilitate risk workshops, deliver staff training, maintain oversight of the Information Asset Register, review Data Sharing Agreements, and keep up to date with legislative and regulatory requirements.

Responsibilities

• Partnering with Business Capability Areas (BCAs) to both support and challenge effective operations from a governance and oversight perspective.
• Driving continuous improvement of the information security management system (ISMS) to ensure it stays relevant considering evolving standards and security practices.
• Oversee and manage assurance and other related actions within the GRAC module of ServiceNow.
• Planning, scoping and conducting internal audits of the LI risk landscape to evaluate compliance (including with ISO27001) and identifying areas for enhancement.
• Agreeing mitigation plans and timelines with stakeholders as required.
• Supporting the wider GRAC function with the completion of a range of Knowledge and Information Management (KIM) tasks, including Data Protection Impact Assessments (DPIAs) and Information Asset Owner management.
• Scrutinising Data Sharing Agreements and monitoring changes in legislative requirements.
• Playing an important role in the review and challenge of policies, procedures and controls ensuring these are comprehensive and fit for purpose as part of the wider risk management framework.
• Working alongside GRAC colleagues, develop and deliver induction and refresher training on GRAC topics helping to develop a risk‑aware culture within LI.
• You may be required to undertake other duties assigned by your line manager as appropriate.

Requirements

• A strong, working knowledge of information security and governance frameworks, including ISO27001, ISO20000, and the NCSC Cyber Assessment Framework.
• Significant experience in a governance and oversight role, particularly within information security management and/or data protection.
• Resilience and delivery‑focus, with strong interpersonal skills to influence outcomes and embed effective business behaviours.
• Proven ability to review, challenge, and improve policies, processes, procedures, standards, and guidelines.
• Experience managing risk and assurance systems, such as ServiceNow or other SaaS‑based Governance, Risk, Assurance and Compliance platforms.
• Strong analytical skills, with the ability to assess complex information, identify gaps, and implement practical, effective solutions.
• Experience maintaining clear, accessible, and auditable documentation, policies, and supporting resources.
• Excellent communication and problem‑solving skills.

Benefits

• A fully remote and flexible working set up.
• 25 days annual leave, increasing by 1 day each year of service up to a maximum of 30 days.