Elevation Recruitment Group
Governance, Risk & Compliance Lead
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Governance, Risk & Compliance (CGRC) Lead
Location: Hybrid – Leeds with UK travel
Salary: £50,000–£60,000 + Car Allowance + Bonus + Benefits
Elevation Tech & Transformation are exclusively recruiting for a newly created Cyber Governance, Risk & Compliance (GRC) Lead on behalf of a growing UK organisation. Reporting to the GISO, you’ll take ownership of cyber governance across the Group, working across multiple subsidiaries to strengthen security, risk, and compliance practices.
Key Responsibilities
- Own and develop the Group cyber risk register.
- Develop and embed security policies, standards, and governance processes.
- Apply NIST CSF and CIS Controls in a real-world environment — practical implementation experience is essential.
- Support alignment with NIST CSF, CIS Controls, and ISO 27001.
- Conduct cyber risk assessments across projects, systems, and suppliers.
- Travel to subsidiaries and sites across the UK, building relationships, and improving cyber maturity.
- Coordinate audits, assurance, and compliance activity.
- Provide clear cyber risk and assurance reporting to senior leadership.
- Support third-party security assurance and supplier risk management.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About You
You’ll have proven experience in Cyber GRC, with demonstrable hands-on experience using NIST CSF and CIS Controls to assess, improve, or implement security controls.
We’re looking for someone who is:
- Practical and commercially minded, rather than purely policy-focused.
- Confident engaging with technical, operational, and senior stakeholders.
- Dynamic and relationship-driven, with the confidence to get out into subsidiaries and build trust.
- Experienced in cyber risk assessments, policies, and security governance.
- Comfortable working autonomously and driving change across multiple businesses.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Experience with ISO 27001, GDPR/NIS2, Microsoft 365/Azure, GRC platforms, or certifications such as CISA, CISSP, or CRISC would be advantageous.
This is a fantastic opportunity to join a growing organisation where you’ll have genuine ownership and the opportunity to shape cyber governance across the Group.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location