Governance, Risk and Compliance Lead

GRC/Cyber Compliance LeadRemote - 1 day a month in either London or Manchester (fully expensed) Competitive Salary andamp; 20% Bonus andamp; car allowance andamp; private healthWe''re looking for an experienced GRC/Cyber Compliance Lead to join a growing Group Security function and build a new Governance, Risk and Compliance capability from the ground up. This is an opportunity to take genuine ownership. Rather than stepping into an established GRC function and simply maintaining existing processes, you''ll be responsible for defining how GRC operates across the organisation - establishing the controls framework, developing meaningful security metrics and risk reporting, strengthening compliance and assurance, and giving senior leadership and the Board a clear view of the organisation''s security posture.The roleReporting to the Head of Cyber Security, Compliance and Risk Management, you will lead the development and ongoing operation of the Group''s cyber GRC capability across multiple divisions, locations and business functions.You''ll build the foundations of a mature GRC function, including:Designing and owning the Group''s security controls framework and control libraryDeveloping cyber risk methodology, risk assessment and treatment processesEstablishing meaningful KRIs, KPIs and security posture reporting for senior leadership and Board-level audiencesDeveloping governance processes around security policies, standards, exceptions, waivers and control ownershipWorking ..... full job details .....