Walkers Global
GRC Lead
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
We are a leading international law firm for global corporations, financial institutions, capital market participants and investment fund managers. With a global presence spanning the Americas, Europe, the Middle East and Asia, we advise on the laws of Bermuda, the British Virgin Islands, the Cayman Islands, Guernsey, Ireland and Jersey.
We treat everyone as the intelligent professional they are. Our approach is to trust and empower our people to deliver consistently, and enable them to succeed. Diversity is our secret weapon – it’s the sheer breadth of Walkers people that makes us who we are – gathered from across the globe and fluent in languages, jurisdictions and cultures that help us to mirror our clients and keep our own thinking in tune with the world in which we operate.
Overview of role
Office: London (40% min hybrid required)
The Governance, Risk, and Compliance Lead will be responsible for the management of the Information Security Management System (ISMS) across Walkers globally. This covers a broad range of information security activities including policy development, risk management, internal and external audit and compliance. It will involve communication with senior management across all regions, liaising with internal teams, and development of the firm’s security capabilities to meet the changing needs of clients. The role will be responsible for managing the change governance of projects through business change partnering.
Duties, Responsibilities & Person Specification
ISMS Management
- Communicate to senior management on risks and requirements
- Understand business objectives and support development of budget for information security objectives
- Develop and maintain security compliance program
- Provide support where necessary to local offices to update and maintain country specific IS documentation
- Establish security metrics to assess effectiveness
- Coordinate and maintain the management review process
- Make written and oral reports to ISSC
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Security Audits
- Manage internal and external audits and certifications
- Manage third party providers including security consultants and assessors
Security Awareness
- Ownership of the Security Awareness Program and the Security Awareness Centre and support of Security Culture Change including owning and managing the quarterly phishing simulation campaigns and the third party relationship.
Improvement management
- Manage identified improvements through to completion
Policy
- Develop, maintain and publish security strategies, policies and procedures
- Manage security policy and implementation
- Support global IT departments on implementation of security policy and products
Education, Skills & Experience
- Proven experience in assessing information security risk and developing an ISMS.
- Experience of ISO 27001/2 version 2022.
- Experience of risk frameworks such as ISO 27005/31000.
- Knowledge of applicable data privacy practices and laws.
- Demonstrable experience in a similar role.
- ISO 27001 Lead Implementer / Lead Auditor certification or, extensive security audit experience
- CISSP and CISM or equivalent certifications
- Strong written, oral and presentation communication skills.
- Excellent inter-personal skills and ability to present ideas and proposals in user-friendly language.
- A passion for information security and keeping current on emerging technologies, regulations, threats and trends.
- Highly self-motivated and directed, with a hands-on approach.
- Good technical-writing skills and the ability to prepare quality documentation, reports and training material.
- Able to effectively prioritise tasks in a high-pressure environment.
- Experience working in a geographically dispersed team-oriented, collaborative environment.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Please note; this position requires the ability and willingness to occasionally work outside normal working hours/days when requested. Additionally, an understanding that international business travel may be necessary.
Walkers will not accept any applications received from agencies at this time. Only candidates selected for an interview will be contacted.
#LI-LQ1 #LI-Hybrid
Walkers global is an equal opportunity employer. Equality and diversity are key to our global identity and an integral part of our goal to continue being an employer of choice. We are committed to a work environment that supports all individuals irrespective of gender, ethnicity, nationality, race, religion, marital status, age, disability, pregnancy, sexual orientation, gender identity or any other applicable legally protected characteristics. We make every effort to ensure that employment opportunities are open and accessible to all purely on the basis of personal ability.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills