Intec Select
Director of Information Security - GRC
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Director of Information Security - GRC - £150k + 20% Bonus + LTIP - London/ Cambridge (hybrid) – Consultancy
Overview:
A market-leading consultancy organisation is seeking a Director of Information Security GRC to lead and develop a Governance, Risk and Compliance function within a global Digital Security environment.
This is a strategic leadership role responsible for establishing and maturing security governance frameworks, risk management processes, policies, standards, and compliance capabilities across complex technology environments. The successful candidate will provide executive-level risk assurance, ensuring organisations have the governance structures and visibility required to make informed security decisions.
This is a build-focused role, requiring a senior GRC leader who can create scalable programmes, drive automation and innovation, influence senior stakeholders, and embed effective security governance across a federated organisation.
Role & Responsibilities:
- Lead the development and maturity of the Information Security GRC function, establishing frameworks, processes, governance structures, and operating models
- Define and maintain security policies, standards, and control frameworks aligned with industry standards and regulatory requirements
- Own the security policy lifecycle, ensuring frameworks evolve in line with emerging threats, regulatory changes, and business requirements
- Manage the enterprise security risk register, ensuring risks are identified, assessed, tracked, and effectively communicated to senior leadership
- Provide transparent security risk reporting to executive stakeholders and governance forums, enabling informed business decisions
- Lead third-party risk management activities, assessing supplier, SaaS, and technology partner security posture
- Develop and improve procurement risk processes, embedding security risk assessments and governance controls into supplier engagement
- Lead security programme management activities, coordinating investment initiatives and driving improvements across security maturity
- Establish security roadmaps, metrics, and reporting frameworks to improve visibility of security capability and risk posture
- Own compliance programmes across relevant regulatory frameworks, including ISO 27001, SOC 2, NIS2, and IEC 62443
- Manage external audits, certifications, and compliance activities to maintain organisational readiness
- Drive automation and tooling improvements across GRC workflows to improve scalability, efficiency, and strategic value
- Partner with security, technology, and business teams to ensure governance processes support business agility while maintaining appropriate risk management
- Build, lead, and develop a high-performing GRC team, creating a culture of continuous improvement, collaboration, and operational excellence
- Provide strategic guidance and consultation to senior leaders, acting as a trusted advisor on security risk, governance, and compliance matters
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements:
- 10+ years’ experience in information security, cybersecurity governance, risk management, or compliance roles
- 5+ years’ experience in senior security leadership roles focused on building GRC capability and maturity
- Proven experience designing and implementing enterprise security governance, risk, and compliance programmes within complex environments
- Strong expertise across GRC frameworks including ISO 27001, NIST CSF, NIS2, IEC 62443, and SOC 2
- Strong understanding of security policy lifecycle management, control framework design, and enterprise risk governance
- Experience operating within regulated industries and managing security obligations across multiple compliance frameworks
- Proven track record of building and leading teams within international, multi-stakeholder, or complex enterprise environments
- Experience reporting security risk, programme maturity, and governance outcomes to executive leadership and senior stakeholders
- Experience driving automation and tooling improvements across GRC workflows to improve scalability and efficiency
- Strong understanding of third-party risk management, supplier security assessments, and technology risk governance
- Experience managing external audits, certifications, and compliance programmes
- Strong stakeholder management skills with the ability to influence across security, technology, and business functions
- Experience within technology, software, industrial software, critical infrastructure, or OT/ICS environments would be advantageous
- Familiarity with cloud security, DevSecOps, Agile delivery practices, and modern software development environments
- Experience working within federated, matrixed, or multi-subsidiary organisations would be beneficial
- Experience applying AI and automation to security governance, risk management, or compliance processes would be advantageous
- Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are desirable
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Salary & Package:
- Up to £150,000 Base Salary
- 20% Annual Bonus
- Long-Term Incentive Plan (LTIP)
- London/ Cambridge (hybrid)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location