Few&Far
Cyber Risk and Compliance Lead (GRC) - Up to £80k
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
⚙️ Cyber Risk & Compliance Lead
📍 Manchester, Central (Hybrid - 2-3 days per week)
💷 £65k - £80k + Bonus + Benefits
I'm partnered with one of the UK's fastest-growing consumer businesses that's transforming the way people buy used vehicles through technology and data.
With around 500 employees across multiple UK offices and ambitious growth plans ahead, they're looking for a Senior Cyber Risk & Compliance Lead to take ownership of their cyber governance and risk function, helping the business stay secure while enabling innovation in AI.
This is an opportunity to become the go-to expert for cyber risk across the organisation, working closely with senior leaders in Technology, Product, Legal and Operations to shape strategy, strengthen security maturity and ensure the business stays ahead of an evolving regulatory and threat landscape.
The Opportunity
This is a senior individual contributor position with significant visibility across the business, working in a small InfoSec and Digital team with 3-5 others
- You'll own the cyber risk and compliance programme end-to-end, driving improvements across governance, supplier assurance, security frameworks and risk management while influencing senior stakeholders and helping embed a strong security culture.
- The business is also investing heavily in AI, making this a great opportunity for someone excited by emerging technologies and the evolving cyber risks they introduce.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What You'll Be Doing
- Own and continuously improve the Cyber Risk Register and overall risk management process
- Lead cyber risk assessments, threat modelling and risk analysis across new technologies, including AI
- Drive third-party and supplier security assurance programmes
- Maintain and evolve security policies, controls and governance frameworks
- Lead compliance activities across recognised security standards and audit programmes
- Manage risk exceptions and ensure consistent governance across the organisation
- Develop meaningful cyber metrics, KPIs and executive reporting
- Monitor emerging threats, regulations and industry developments, providing practical guidance to the wider business
- Help build a security-first culture through awareness initiatives and stakeholder engagement
What They're Looking For
- 4/5+ years' experience in Cyber Risk, Information Security or GRC
- Experience owning cyber risk registers and enterprise risk assessment programmes
- Strong knowledge of security frameworks such as ISO 27001, NIST CSF and Cyber Essentials
- Experience assessing third-party and supplier security risk
- Understanding of compliance frameworks including PCI DSS and UK data protection requirements
- Excellent stakeholder management skills, with the ability to translate technical risks into commercial decisions
- A proactive, self-driven approach with strong ownership and curiosity
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Nice To Have
- Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer
- Experience with GRC platforms such as OneTrust, Archer or Protecht
- Exposure to AWS, Azure or Microsoft 365 environments
- Experience supporting audits or regulatory reviews
- Knowledge of AI governance or emerging technology risk
Why Join?
This role offers genuine ownership and influence within a growing technology business where cyber security is seen as an enabler rather than a blocker.
- You'll work alongside an experienced InfoSec Leader who is looking for someone capable of taking ownership, driving maturity across the cyber risk function and becoming a trusted advisor to senior leadership.
- If you're looking for a role where you can shape governance, influence strategy and help build cyber capability in a fast-moving environment leveraging AI, this is an excellent opportunity.
Package includes:
- Private medical insurance (including family cover)
- Enhanced pension contribution
- Health cash plan
- 25 days holiday plus bank holidays (rising with service)
- Enhanced family leave
- Enhanced company sick pay
- Employee wellbeing support
- Employee discounts
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills