Stagecoach Group Limited
Governance, Risk & Compliance (GRC) Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Salary
Competitive salary, bonus, and pension
Hybrid based in Stockport
Reporting to Director of Digital Risk & Security and DPO
Build trust. Protect our business. Shape the future of cyber governance.
At Stagecoach, we're connecting millions of people with their communities every day. As our digital landscape continues to evolve, we're investing in the governance, risk and compliance capability that keeps our customers, colleagues, and business safe. We're looking for an experienced Governance, Risk & Compliance (GRC) Manager to join our Digital Risk & Security team and play a pivotal role in strengthening our cyber security framework, managing risk, and driving compliance across the organisation. This is an opportunity to influence security strategy at a group-wide level, working with senior stakeholders, business leaders, auditors and technology teams to ensure robust controls, policies and processes are embedded throughout the business.
What you'll be doing:
- Developing and enhancing enterprise-wide GRC frameworks and information security governance practices.
- Identifying, assessing and mitigating cyber, operational and reputational risks.
- Leading compliance programmes across key frameworks and standards including ISO 27001, Cyber Essentials Plus, GDPR, PCI DSS and NIST aligned controls.
- Managing internal and external audits and coordinating remediation activities.
- Developing, maintaining and promoting information security policies, standards and procedures.
- Conducting third-party and supplier risk assessments.
- Producing meaningful risk, compliance and security performance reporting for senior stakeholders.
- Supporting due diligence activities and providing expert advice across technology and business change initiatives.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we're looking for:
- Significant experience working within information security, risk management, governance or audit environments.
- Strong knowledge of recognised frameworks including ISO 27001, NIST, Cyber Essentials and PCI DSS.
- Experience leading compliance assessments, audits and certification activities.
- A solid understanding of security controls, risk methodologies and vulnerability management principles.
- Excellent stakeholder management skills with the ability to influence at all levels.
- Strong communication skills and experience producing reports and presentations for leadership teams.
- Relevant professional certifications such as CISSP, CISM, CISA or CRISC (desirable).
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Why Stagecoach?
This is more than a governance role. You'll have the opportunity to shape how security risk is managed across one of the UK's largest transport operators, helping deliver services that millions of customers rely on every year. You'll join a collaborative and supportive team where your expertise will genuinely influence business decisions and future strategy.
Stagecoach is proudly an inclusive employer, striving for a culture where everyone can be themselves and where all the differences people bring are truly appreciated. We welcome applications from all, irrespective of gender, ethnicity, race, religion, beliefs, disability, neurodiversity, sexual orientation, or age.
Location:
Stagecoach Shared Service Centre One Exchange, 20 Railway Road Stockport SK1 3SW
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills