Robert Half are recruiting a Group IT GRC Lead on behalf of a Group organisation. Reporting into the Group ISO, you will lead cyber governance, risk and compliance initiatives, supporting the development of security frameworks, managing cyber risk and ensuring compliance across multiple business units

The right person for this role will be pragmatic, logical and methodical in thinking. Having the confidence to report up to board and disseminate information to the various business units is essential.

Essential Requirements

• Strong knowledge of NIST CSF, CIS Controls and ISO 27001
• Ownership of GRC and Cyber best practices
• Experience conducting risk assessments, audits and compliance reviews
• Ability to develop security policies, standards and governance processes
• Strong stakeholder management and communication skills, including reporting to senior leadership
• Understanding of vulnerability management and security controls

Desirable Requirements

• Experience with GRC platforms
• Exposure to supplier assurance and ISO 27001 certification audits
• Understanding of cloud security, particularly Microsoft 365 and Azure
• Relevant certifications such asSecurity+, CISA, CRISC, CISSP or ISO 27001 Lead Implementer

Please note:

Sponsorship is not available for this position

This role offers a Hybrid working pattern

Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data: