GRC Lead

Salary: £49,000 - 89,000 per year

Requirements:

• We require an active SC clearance and British citizenship.
• We require that the candidate has not been outside the UK for more than 28 consecutive days during the last 5 years.
• We are looking for experience in cyber security risk oversight across suppliers.
• We are looking for experience with risk management, compliance processes, assurance effectiveness, and security governance practices.
• We require familiarity with frameworks and standards such as ISO 27001, NIST CSF, NCSC guidance, and Secure by Design principles.

Responsibilities:

• We maintain oversight of cyber security risks across suppliers.
• We ensure risks are identified, assessed, recorded, tracked, and escalated appropriately.
• We govern risk acceptance and exception management processes.
• We support risk-based prioritisation across security disciplines.
• We coordinate supplier compliance activities within the SIAM framework.
• We validate supplier adherence to agreed security requirements.
• We monitor security performance against contractual obligations.
• We drive accountability for control weaknesses, non-compliance, and improvement actions.
• We maintain visibility of compliance obligations and control requirements.
• We support compliance against relevant frameworks and standards.
• We coordinate remediation of identified compliance gaps.
• We produce consolidated security governance reporting.
• We provide visibility of security risks, compliance status, control effectiveness, supplier performance, and assurance findings.
• We present governance information to client stakeholders and governance forums.
• We support strategic planning and risk-informed decision making.
• We drive security governance maturity improvements across the supplier landscape.
• We identify opportunities to improve risk management, compliance processes, assurance effectiveness, and security governance practices.
• We support continuous improvement programmes across the cyber security operating model.
• We facilitate cross-supplier resolution of governance issues.

Technologies:

• Support
• Security

More:

We are recruiting for a GRC Lead contract role based in Manchester with a hybrid working pattern of 80% remote and 20% onsite. The assignment is for an initial 6 months, with possible extension, and is offered at a day rate of £500 inside IR35. The role focuses on cyber security governance, supplier risk, compliance, assurance, and reporting across the supplier landscape.

last updated 38 week of 2026