At a Glance
- Tasks: Lead the development and management of governance, risk, and compliance frameworks.
- Company: Respected tech provider specialising in secure IT infrastructure for defence and public sectors.
- Benefits: Structured career coaching, tailored training, and comprehensive benefits package.
- Other info: Opportunity to promote a strong security culture and support business continuity initiatives.
- Why this job: Make a real impact by ensuring compliance and mitigating risks in a dynamic environment.
- Qualifications: 5+ years in GRC, Information Security, or Risk disciplines with strong analytical skills.
The predicted salary is between 56700 - 69300 £ per year.
Governance, Risk and Compliance (GRC) Manager.
The GRC Manager will take ownership of developing, implementing, and maintaining the organisation's governance, risk management, and compliance frameworks.
You will ensure operational activities align with legal requirements, regulatory standards, and internal policies, while proactively identifying and mitigating enterprise risks.
About the Client
Our client is a highly respected technology and secure managed services provider, specialising in delivering resilient, high-assurance IT infrastructure and security solutions to defense and public sector partners.
They pride themselves on fostering continuous professional development through structured career coaching, tailored training pathways, and comprehensive benefit packages.
Role Summary The GRC Manager will take ownership of developing, implementing, and maintaining the organisation's governance, risk management, and compliance frameworks.
You will ensure operational activities align with legal requirements, regulatory standards, and internal policies, while proactively identifying and mitigating enterprise risks.
Develop, implement, and manage the overarching GRC strategy, policies, and procedural frameworks.
Conduct enterprise risk assessments and maintain the organisation's central risk register.
Monitor operational, regulatory, cybersecurity, financial, and third-party risks.
Ensure full compliance with relevant statutory regulations, legal standards, and framework requirements.
Establish compliance monitoring mechanisms and present regular reporting to senior leadership.
Collaborate with internal business units to design and embed effective risk mitigation controls.
Monitor regulatory developments and assess their potential operational impact.
Support business continuity, disaster recovery, and information security governance initiatives.
Oversee third-party/vendor risk evaluations and perform required due diligence. Lead organisation-wide training programmes to promote a strong security and compliance culture.
Minimum of 5 years demonstrable experience within GRC, Information Security, Audit, or Risk disciplines.
Thorough understanding of enterprise risk management frameworks and internal audit processes.
Data Protection: Proven hands-on experience with GDPR compliance (including ROPA, LIA, and DPIA requirements).
Excellent analytical, problem-solving, and senior stakeholder management abilities.
Experience utilising modern GRC software platforms and risk mapping tools.
Understanding of vendor risk management, SOC2, or NIS2 directives.
Governance and Compliance Manager - Hybrid in Swindon employer: Resourcing Group
At MHCLG, we pride ourselves on being an exceptional employer dedicated to making a positive impact in the UK. Our remote working model offers flexibility while fostering a collaborative culture that values innovation and continuous improvement. With opportunities for professional growth and development, you will be part of a mission-driven team committed to empowering communities and enhancing recruitment processes through cutting-edge technology.
