Senior Information Security GRC Specialist 10 Years Plus experience level

Location: Hybrid - 2 days in the City of London
Type: Permanent

We are seeking an experienced Senior Information Security GRC Specialist to join a growing cyber security function. Reporting to the Head of Security GRC & Deputy CISO, you will play a key role in shaping security governance, managing cyber risk, driving compliance, and embedding security best practices across the business.

Key Responsibilities

• Support the delivery of the Information Security strategy and governance framework.
• Lead and manage information security risk assessments, audits, and remediation activities.
• Maintain security policies, standards, and the Information Security Risk Register.
• Track and report on cyber risks, control effectiveness, and compliance metrics.
• Drive compliance with regulations and frameworks including NIST, GDPR, DORA, and other industry standards.
• Deliver security awareness initiatives and provide expert guidance to business and technology teams.
• Support incident management and continuous improvement of security processes.
• Deputise for the Head of Security GRC & Deputy CISO when required.

About You

• 10+ years' experience in Information Security, with significant exposure to GRC and cyber risk management.
• Proven leadership experience and the ability to influence stakeholders at all levels.
• Strong knowledge of security frameworks, governance, risk management, and regulatory compliance.
• Excellent communication, reporting, and stakeholder management skills.
• Experience operating within regulated environments such as insurance or financial services is highly desirable.

This is an excellent opportunity to join a forward-thinking organisation and play a pivotal role in strengthening and maturing its cyber security governance and risk capabilities.