At a Glance
- Tasks: Lead cyber governance and risk management to protect organisational assets.
- Company: Join a diverse and inclusive team at RCI FS Ltd UK.
- Benefits: Competitive salary, flexible working, and opportunities for professional growth.
- Other info: Dynamic role with opportunities to innovate and automate processes.
- Why this job: Make a real impact in cyber security while collaborating with leaders across the business.
- Qualifications: Experience in Cyber Security GRC and strong analytical skills required.
The predicted salary is between 63000 - 77000 £ per year.
- Company
- RCI FS Ltd UK
Job Description
The Cyber Governance, Risk & Compliance (GRC) Manager is responsible for establishing, maintaining and continuously improving the organisation's cyber governance, risk management and compliance capabilities.
The position acts as a key bridge between business leadership, technology teams, risk functions, internal audit and regulators, ensuring that cyber security supports business objectives while protecting organisational information assets and maintaining compliance with legal, regulatory and contractual requirements.
The role also leads the adoption of automation and data-driven security practices to enhance efficiency, reporting and risk management effectiveness.
This aligns with security objectives identified within the MFS UK Cyber Strategy.
Responsibilities
- Own and maintain the Cyber Security Governance Framework.
- Develop and oversee information security policies, standards, procedures and controls.
- Ensure alignment to recognised frameworks and standards including NIST, FCA/PRA and ECB expectations and Operational Resilience requirements
- Provide governance reporting to relevant UK and Corporate Committees, forums and working groups to support effective decision-making and oversight.
- Identify and monitor the department Top Risks, Emerging Risks and Issues Under Management for reporting to IS-IT Committee and Executive Risk Committee; including preparing papers for the IS-IT Committee.
- Coordinate security reviews, control attestations and policy exception processes.
- Develop and maintain compliance documentation for security audits and regulatory reviews.
- Manage security control testing and assurance programmes.
- Track risk remediation actions and provide assurance reporting.
- Facilitate risk identification, assessment, treatment and reporting activities in line with the organisation’s framework - responsible for the completion and assessment of Risk and Control Self Assessments (RCSAs).
- Maintain the cyber risk register and ensure risks are assigned, monitored and escalated appropriately.
- Define risk appetite metrics and key risk indicators (KRIs).
- Drive remediation planning and risk reduction activities.
- Establish and maintain an Emerging Threat Management Programme & oversee Horizon Scanning.
- Present threat intelligence and strategic risk insights to senior leadership.
- Identify opportunities to automate governance, compliance and risk management activities.
- Drive security workflow orchestration and reporting efficiencies.
- Improve use of security tooling, dashboards and data analytics.
Essential Experience
- Significant experience in Cyber Security Governance, Risk and Compliance.
- Experience within a regulated financial services environment.
- Strong understanding of cyber risk assessment methodologies.
- Experience with security frameworks and regulatory compliance.
- Experience presenting to senior leadership and committee structures.
- Strong analytical, reporting and stakeholder management skills.
Desirable Experience
- Experience implementing GRC platforms.
- Experience with automation and workflow tools.
- Knowledge of Operational Resilience frameworks.
Desirable qualifications or equivalent relevant experience
- Degree or equivalent experience in Cyber Security, Information Security, Risk or Technology.
- CISM
- CRISC
- CISSP
- ISO 27001 Lead Implementer or Lead Auditor
- NIST Cybersecurity Framework Practitioner
- Certified Data Protection qualification
- Individual Conduct Rules
- Acting with integrity.
- Acting with due skill, care, and diligence.
- Being open and cooperative with regulators.
- Treating customers fairly and with respect.
- Observing proper standards of market conduct.
- Ensuring effective control of the firm’s business.
- Job Family
- Information Technologies & Systems
Renault Group is committed to creating an inclusive working environment and the conditions for each of us to bring their passion, perform to the full and grow, whilst being themselves.
We find strength in our diversity and we are engaged to ensure equal employment opportunities regardless of race, colour, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, etc.
If you have a disability or special need requiring layout of the workstation or work schedule, please let us know by completing this form.
In order to follow in real time the evolution of your applications and to stay in touch with us, we invite you to create a candidate account.
This will take you no more than a minute and will also make it easier for you to apply in the future.
By submitting your CV or application, you authorise Renault Group to use and store information about you for the purposes of following up your application or future employment.
- This information will only be used by Renault Group companies as described in the
- Recruitment Privacy Information Policy
Cyber Governance, Risk and Compliance Manager employer: Renault Group
Renault Retail Group is an exceptional employer, offering a vibrant work culture that prioritises customer service and employee development. Located in Brentford, our dealership provides a supportive environment with flexible working patterns, competitive benefits including staff discounts and a comprehensive pension scheme, and ample opportunities for career growth through excellent training programmes. Join us to be part of a team that values professionalism and a warm welcome for every customer.
StudySmarter Expert Advice🤫
We think this is how you could land Cyber Governance, Risk and Compliance Manager
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Renault Group, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Renault Group
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Renault Group. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Cyber Governance, Risk and Compliance Manager
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Renault Group insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Renault Group that you’re committed to staying ahead in the game.
How to prepare for a job interview at Renault Group
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Renault Group to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Renault Group.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
