Head of GRC

GRC LeadSector: Critical National InfrastructureLocation: 2 day per week in NW EnglandDay Rate: 600+ Employment type: ContractWe’re supporting a major UK infrastructure organisation in appointing an experienced GRC Lead.Working closely with the CISO, you’ll take ownership of the cyber governance, risk and compliance function, support the existing team and turn security priorities into practical improvements. You’ll also act as a trusted deputy for the CISO when required.This is a hands-on leadership position. It would suit someone who can set direction while remaining close to delivery, solving problems and helping the wider team move work forward.What you’ll be doingLeading and coordinating the cyber GRC programme.Developing cyber and information-risk management processes.Overseeing risk registers, treatment plans and governance reporting.Strengthening the organisation’s third-party security programme.Supporting security assurance and regulatory compliance activity.Contributing to NIS/NIS2 and CAF-related requirements.Developing governance and policies around identity and privileged access.Working with IT and business teams to turn security requirements into action.Supporting and developing members of the GRC team.Challenging existing approaches constructively and improving delivery.Deputising for the CISO when appropriate.What we’re looking forBroad experience across cyber governance, risk and compliance.Strong knowledge of cyber and information-risk management.Experience developing or improving third-party security programmes.Knowledge of NIS, NIS2 or comparable regulatory frameworks.Experience within critical infrastructure, transport, utilities or another regulated environment.An understanding of IAM and PAM governance.The ability to communicate security risks to technical teams and senior stakeholders.Recent hands-on experience—not solely strategic or advisory responsibility.Direct CAF experience would be beneficial but isn’t essential if you can demonstrate relevant transferable experience.Your approachYou’ll be someone who:Takes ownership and follows work through to completion.Is comfortable getting into the detail.Can create momentum within a complex organisation.Challenges stakeholders confidently and respectfully.Responds positively to feedback.Supports colleagues while maintaining high standards.Builds effective relationships across security, IT and the wider business.Why consider this opportunity?You’ll be joining a major infrastructure organisation at an important stage in the development of its cyber-security capability.The role offers direct access to the CISO, ownership of a broad GRC remit and the opportunity to make a visible impact across a nationally significant operating environment.