Cyber GRC Manager
Core
Lead governance, risk, compliance, assurance, and control validation activities across the Cyber & Resilience function to strengthen cyber posture and ensure alignment with industry frameworks.
Role type
Cyber GRC Manager
Builds
Cybersecurity policies, standards, frameworks, and executive risk reporting
Domain
Cybersecurity / Governance, Risk, and Compliance
Required skills
Cyber GRC frameworks (NIST, CPS234, ISO27001, SOC2), audit finding management, risk treatment planning, policy development, executive reporting, team leadership
Preferred skills
Experience in regulated environments (financial services, insurance, critical infrastructure), CRISC certification, ISO 27001 Lead Auditor certification
Technologies
GRC tooling
Responsibilities
Lead Cyber Governance, Risk & Compliance activities across the organisation; Manage the cyber assurance calendar and coordinate control validation and testing programmes; Track audit findings, remediation plans and risk treatment activities through GRC tooling; Develop and maintain cybersecurity policies, standards, frameworks and reporting; Provide cyber risk insights, metrics and executive reporting to support decision-making; Lead and mentor a small team of GRC Analysts.