At a Glance
- Tasks: Lead security governance and identity management initiatives across teams.
- Company: Join Vitality, a multi-award-winning UK insurance brand focused on health and happiness.
- Benefits: Enjoy competitive salary, bonus schemes, pension contributions, and award-winning health insurance.
- Other info: Be part of a culture recognised as one of the best places to work.
- Why this job: Make a real impact on security governance while working in a supportive, flexible environment.
- Qualifications: Experience in senior security roles and knowledge of IAM processes required.
The predicted salary is between 60000 - 75000 € per year.
About The Role
Team Vitality Technology
Working Pattern - Hybrid 2 days per week in the Vitality Bournemouth Office. Full time, 35 hours per week. We are happy to discuss flexible working!
Top 3 skills needed for this role:
- Experience driving governance, risk, and control delivery
- Proven track record leading cross-functional security initiatives
- Confident in owning audit, reporting, and assurance outcomes
What this role is all about:
At Vitality, we’re looking for an IAM GRC Lead to take ownership of delivering our security governance, identity and access management, and assurance activities. This is a hands-on role where you’ll work closely with teams across the business to keep key security, audit, and regulatory priorities on track and delivered to a high standard. You’ll help ensure controls are in place, reporting is clear and useful, and our approach to security remains consistent and effective playing a key role in strengthening governance, supporting audits, and driving delivery across both our UK and Vietnam operations.
Key Actions:
- Own and deliver security governance and control activities, including ITGC execution, audit readiness, evidence tracking, and support for GIA governance audits
- Maintain and update the ISO27001 ISMS (including policy and standards refresh), and deliver operational resilience and BCP artefacts aligned to regulatory expectations
- Drive control and assurance activities, including Segregation of Duties (SoD) remediation and third-party assurance questionnaires (SIG Lite and broader SIG), proactively identifying and mitigating risks
- Support cloud and platform security onboarding (GCP VMSP), alongside IAM/IDAM onboarding, role management, reporting discipline, and data classification and labelling aligned to global standards
- Coordinate security tooling and testing, including penetration testing and Wiz deployment, embedding solutions into BAU processes
- Establish and maintain clear, decision-useful security reporting and governance, including monthly reporting (1st and 2nd line), Security KRIs, and TechComm reporting across the UK and Vietnam
- Build strong stakeholder relationships across technical and business teams, ensuring clear communication, alignment, and delivery of security priorities in a fast-paced, evolving environment
- Work independently to prioritise, make decisions, and drive activities through to completion, aligning security initiatives with wider business objectives and delivering practical value
What do you need to thrive?
- Significant experience operating in a senior-level security, IAM, or GRC role
- Strong knowledge of IAM/IDAM processes, including role management and access controls
- Experience working with governance, controls, and audit frameworks (e.g. ISO27001, ITGCs)
- Experience with third-party risk and security questionnaires (e.g. SIG)
- Exposure to cloud environments (ideally GCP) and platform onboarding
- Experience producing clear, executive-level reporting, including KRIs
- Proven ability to coordinate delivery across multiple teams and stakeholders
- Experience supporting audit processes (internal, external, and GIA)
- Ability to manage competing priorities and deliver to tight timelines with a hands-on, delivery-focused approach
- Strong collaboration skills, with the ability to bring stakeholders on the journey
So, what’s in it for you?
- Bonus Schemes: A bonus that regularly rewards you for your performance
- A pension of up to 12%: We will match your contributions up to 6% of your salary
- Our award-winning Vitality health insurance with its own set of rewards and benefits
- Life Assurance: Four times annual salary
These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page.
Fantastic Benefits. Exciting rewards. Great career opportunities!
If you are successful in your application and join us at Vitality, this is our promise to you:
- Help you to be the healthiest you’ve ever been
- Create an environment that embraces you as you are and enables you to be your best self
- Give you flexibility on how, where and when you work
- Help you advance your career by playing you to your strengths
- Give you a voice to help our business grow and make Vitality a great place to be
- Give you the space to try, fail and learn
- Provide a healthy balance of challenge and support
- Recognise and reward you with a competitive salary and amazing benefits
- Be there for you when you need us
- Provide opportunities for you to be a force for good in society
We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.
About The Company
We’re incredibly proud to be recognised for the culture we’ve created, recently being named one of Glassdoor's Best Places to Work 2026, and in 2024 we were delighted to be awarded Top 10 Places to Work in the Sunday Times Awards. Vitality is a multi-award-winning UK insurance brand, here to make the world a healthier, happier place. We’ve been a purpose and values-driven business from day 1 - long before it became fashionable. Our core purpose is to make people healthier and enhance and protect their lives. Vitality pioneered shared-value insurance. We incentivise people to live healthier longer lives - they benefit, our business benefits, and society benefits. We’re successful because we attract, develop, and retain the best people and because we care. Plus, you get to join our 1.7 million members with access to our unique health insurance and healthy living programme.
Ready to find out if we’re the right fit for you? We can’t wait. If we are fortunate in receiving a high volume of quality applications we may need to close this vacancy early. If you are interested, please submit your application as soon as possible.
IAM and GRC Lead - 6 Month FTC employer: Vitality Corporate Services Limited
At Vitality, we pride ourselves on being an exceptional employer, offering a vibrant work culture that champions health, flexibility, and personal growth. Our Bournemouth office fosters collaboration and innovation, while our comprehensive benefits package, including generous pension contributions and award-winning health insurance, ensures that our employees feel valued and supported. Join us to be part of a purpose-driven team that not only prioritises your well-being but also empowers you to make a meaningful impact in the world.
Contact Detail:
Vitality Corporate Services Limited Recruiting Team
StudySmarter Expert Advice🤫
We think this is how you could land IAM and GRC Lead - 6 Month FTC
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, especially those who work at Vitality or similar companies. A friendly chat can open doors and give you insider info on the role.
✨Tip Number 2
Prepare for the interview by brushing up on your knowledge of IAM and GRC frameworks. Be ready to discuss how you've tackled governance and risk challenges in the past—real examples will make you stand out!
✨Tip Number 3
Show off your collaboration skills! During interviews, highlight times when you’ve successfully worked with cross-functional teams. Vitality values strong stakeholder relationships, so let them know you can build those bridges.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets noticed. Plus, it shows you’re genuinely interested in being part of the Vitality team.
We think you need these skills to ace IAM and GRC Lead - 6 Month FTC
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the IAM and GRC Lead role. Highlight your experience in governance, risk, and control delivery, and don’t forget to showcase any cross-functional security initiatives you've led. We want to see how your skills align with what we’re looking for!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you’re the perfect fit for this role. Mention specific experiences that demonstrate your ability to own audit, reporting, and assurance outcomes. Let us know how you can contribute to our mission at Vitality.
Showcase Your Achievements:When detailing your past roles, focus on your achievements rather than just responsibilities. Use metrics where possible to quantify your impact, especially in areas like security governance and audit readiness. We love seeing how you’ve made a difference in previous positions!
Apply Through Our Website:We encourage you to apply through our website for a smoother application process. It’s the best way for us to receive your application directly and ensures you’re considered for the role. Don’t wait too long; we might close the vacancy early if we get a lot of great applications!
How to prepare for a job interview at Vitality Corporate Services Limited
✨Know Your Governance and Risk Frameworks
Make sure you brush up on your knowledge of governance, risk, and control frameworks like ISO27001 and ITGCs. Be ready to discuss how you've applied these in previous roles, as this will show your understanding of the key requirements for the IAM and GRC Lead position.
✨Showcase Your Cross-Functional Leadership
Prepare examples of how you've successfully led cross-functional security initiatives. Highlight your ability to coordinate with various teams and stakeholders, as this role requires strong collaboration skills to drive security priorities effectively.
✨Be Ready for Technical Questions
Expect questions about IAM/IDAM processes, cloud environments, and third-party risk assessments. Brush up on your technical knowledge, especially regarding GCP and security tooling, so you can confidently discuss your experience and insights.
✨Demonstrate Your Reporting Skills
Since clear, executive-level reporting is crucial for this role, prepare to discuss how you've produced and presented security reports in the past. Bring examples of your work that showcase your ability to communicate complex information in a straightforward manner.
