GRC Lead

CONTRACTOR MUST BE SC CLEARED (active) British citizen

The candidate hasn't been outside the UK for more than 28 consecutives days during the last 5 years

Role Title: GRC Lead

Location: Manchester | Hybrid 80% remote 20% onsite

Duration: 6 initial months contract - possible extension

Day Rate: £500 Inside IR35

Role Description:

• Maintain oversight of cyber security risks across suppliers
• Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately
• Govern risk acceptance and exception management processes
• Support risk-based prioritisation across security disciplines
• Coordinate supplier compliance activities within the SIAM framework
• Validate supplier adherence to agreed security requirements
• Monitor security performance against contractual obligations
• Drive accountability for control weaknesses, non-compliance, and improvement actions
• Maintain visibility of compliance obligations and control requirements

Support compliance against frameworks and standards such as:

• ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles
• Coordinate remediation of identified compliance gaps
• Produce consolidated security governance reporting
• Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings
• Present governance information to client stakeholders and governance forums
• Support strategic planning and risk-informed decision making
• Drive security governance maturity improvements across the supplier landscape
• Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness
• Security governance practices
• Support continuous improvement programmes across the cyber security operating model
• Facilitate cross-supplier resolution of governance issues

If you are looking for your next contract opportunity, please contact me on the information below.