At a Glance
- Tasks: Lead the security GRC function and manage compliance in a dynamic environment.
- Company: Join OVO, a mission-driven company tackling the climate crisis.
- Benefits: Hybrid work model, inspiring office spaces, and opportunities for personal growth.
- Other info: Collaborative culture focused on diversity and continuous improvement.
- Why this job: Make a real impact on sustainability while leading innovative security initiatives.
- Qualifications: Expertise in governance, risk, and compliance with strong leadership skills.
The predicted salary is between 60000 - 70000 £ per year.
Location: Hub Based - Hybrid for all
Experience: Expert
Working pattern: Full-Time
Reporting to: Chief Information Security Officer
Sponsorship: Unfortunately we are unable to offer sponsorship for this role.
This role in 3 words: Engaging. Visionary. Enabler.
Top 3 qualities for this role: Leadership. Communication. Resilience.
Where you’ll work: Depending on the needs of your business area, we expect hub based people to be in the office at least once a week, and to go to OVO Connection events in-person. You’ll be assigned to the closest one of our three hub offices, Bristol, Glasgow, or London; unless your role requires field-based work. Each hub has accessible spaces to park your laptop, is designed to inspire people, help them connect and bring big ideas to life.
Everyone belongs at OVO: At OVO, we are on a mission to solve one of humanity's biggest challenges, the climate crisis. And we know it takes all of us to change the world. That's why we need diverse people from all abilities, gender identities, ethnicities, ages, sexual orientations, life experiences and backgrounds to join us.
Teamworking for the planet: Everything we do here spins around Plan Zero. So, naturally, the team you’ll be joining plays a gigantic role in making that happen. Here’s how: Reporting to the CISO this role is part of the Enterprise Security management team where you’ll deliver risk-led security focused on what matters most to the business.
We are hiring innovators, people with the vision to cut through complexity, to streamline, and deliver simplicity. We encourage collaboration, and want to instill a sense of ownership and pride in our Enterprise Security and GRC teams, as well as the stakeholders they engage with. This role is about leading change, reducing risk, and continuous improvement.
This role in a nutshell: OVO is seeking an experienced GRC Principal to provide leadership, compliance continuity, and strategic assurance. Reporting to the CISO you will balance day-to-day compliance and assurance stability, with continuous improvement of our risk levels and risk management practices.
As an Operator of Essential Services under NIS regulations, OVO requires a seasoned GRC professional capable of managing a complex regulatory landscape while providing hands‑on guidance to a newly formed security GRC team.
You will:
- Provide day-to-day leadership to the security GRC function, ensuring clear direction and role clarity.
- Develop and manage strong stakeholder relationships (business) and reporting.
- Be a thought leader connecting security teams to wider issues of risk.
- Deliver GRC vision and people management.
- Manage and track security risks within the corporate GRC framework.
- Manage a complex regulatory environment.
- Provide continuity and continuous improvement for our Information Security Management System (ISMS), streamlining and simplifying existing processes.
- Focus is on the now, but consider the horizon: navigating shifting external risks and a complex regulatory landscape.
GRC Principal employer: OVO
At OVO, we pride ourselves on being an excellent employer that values flexibility and collaboration. Our dynamic work culture fosters growth and innovation, providing employees with opportunities to enhance their skills while contributing to a meaningful mission of delivering exceptional customer service. With competitive salaries, bonuses, and a variety of flexible benefits, OVO is committed to supporting our team members both personally and professionally in a vibrant office environment.
