Sopra Steria
Governance, Risk & Compliance Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Governance, Risk & Compliance (GRC) Manager
Are you looking for a role where you can lead cyber security governance in an environment where trust and assurance really matter?
You’ll be joining a collaborative and experienced security team within Sopra Steria’s Aerospace, Defence and Security business. As our GRC Manager, you’ll play a key role in shaping how we manage information security risk and compliance for both our organisation and our clients. You’ll work closely with senior leaders, delivery teams, and customers, helping to embed a strong culture of risk awareness while leading and developing a team of GRC professionals.
This is a hands-on leadership role where you’ll:
- Guide clients through complex security challenges.
- Translate regulatory requirements into practical solutions.
- Support continuous improvement across governance, risk, and compliance activities.
Responsibilities
- Own and continuously improve the Information Security Management System (ISMS) in line with ISO 27001, including policies, governance processes, and documentation.
- Lead security risk assessments, risk treatment activities, and the management of risk registers to support business and regulatory decision-making.
- Provide subject matter expertise to internal teams, senior stakeholders, and customers on governance, risk, and compliance matters.
- Plan, support, and oversee internal and external audits (including ISO 27001 and other relevant standards), ensuring audit readiness and effective remediation.
- Support compliance with recognised security frameworks and principles, including HMG SPF, NCSC guidance, NIST, OWASP, and ISF.
- Manage supply chain security activities, including assurance, audit cycles, and risk prioritisation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
- Proven experience managing an ISMS and leading ISO 27001 implementation and audit activities.
- Strong background in governance, risk management, and security compliance, ideally within a regulated or defence-related environment.
- Experience engaging with senior stakeholders, regulators, and external auditors.
- A solid understanding of information security best practice, risk management methodologies, and relevant legislation.
- Ability to lead and support a small team, as well as work independently when required.
- A proactive approach to continuous improvement and personal/professional development.
- Professional certifications such as CISSP, CISM, or CRISC.
It would be advantageous if you had:
- ISO 27001:2022 Lead Auditor or Lead Implementer certification.
- Experience working with NIST frameworks.
- ISO 14001 or ISO 45001 Internal Auditor certification.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Application Note
If you’re interested but unsure if your skills align exactly, please do apply—we’d love to hear from you!
Employment Details
Type: Full-time, Permanent Location: Hemel Hempstead – On site Security Clearance Level: eDV Salary: £75,000 – £90,000 per annum Contact: [Internal Recruiter: Rebecca]
Benefits
- £5,400 car allowance
- 25 days annual leave, with option to buy additional days
- Private medical insurance
- Life assurance
- Pension
- Generous flexible benefits fund
- Support for different ways of working (flexible working arrangements encouraged)
About Sopra Steria’s Aerospace, Defence & Security
The Aerospace, Defence and Security business designs, develops, and deploys digital solutions for Central Government clients, supporting the goal of National Security in a unique and privileged environment. Employees are encouraged through:
- Time for professional development activities
- Mentorship and coaching
- Knowledge-sharing and peer learning
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location