Venturi
Head of GRC
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
GRC Lead
Sector: Critical National Infrastructure
Location: 2 days per week in NW England
Day Rate: 600+
Employment type: Contract
We’re supporting a major UK infrastructure organisation in appointing an experienced GRC Lead.
Working closely with the CISO, you’ll take ownership of the cyber governance, risk and compliance function, support the existing team and turn security priorities into practical improvements. You’ll also act as a trusted deputy for the CISO when required.
This is a hands-on leadership position. It would suit someone who can set direction while remaining close to delivery, solving problems and helping the wider team move work forward.
What you’ll be doing
- Leading and coordinating the cyber GRC programme.
- Developing cyber and information-risk management processes.
- Overseeing risk registers, treatment plans and governance reporting.
- Strengthening the organisation’s third-party security programme.
- Supporting security assurance and regulatory compliance activity.
- Contributing to NIS/NIS2 and CAF-related requirements.
- Developing governance and policies around identity and privileged access.
- Working with IT and business teams to turn security requirements into action.
- Supporting and developing members of the GRC team.
- Challenging existing approaches constructively and improving delivery.
- Deputising for the CISO when appropriate.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we’re looking for
- Broad experience across cyber governance, risk and compliance.
- Strong knowledge of cyber and information-risk management.
- Experience developing or improving third-party security programmes.
- Knowledge of NIS, NIS2 or comparable regulatory frameworks.
- Experience within critical infrastructure, transport, utilities or another regulated environment.
- An understanding of IAM and PAM governance.
- The ability to communicate security risks to technical teams and senior stakeholders.
- Recent hands-on experience—not solely strategic or advisory responsibility.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Direct CAF experience would be beneficial but isn’t essential if you can demonstrate relevant transferable experience.
Your approach
You’ll be someone who:
- Takes ownership and follows work through to completion.
- Is comfortable getting into the detail.
- Can create momentum within a complex organisation.
- Challenges stakeholders confidently and respectfully.
- Responds positively to feedback.
- Supports colleagues while maintaining high standards.
- Builds effective relationships across security, IT and the wider business.
Why consider this opportunity?
You’ll be joining a major infrastructure organisation at an important stage in the development of its cyber-security capability.
The role offers direct access to the CISO, ownership of a broad GRC remit and the opportunity to make a visible impact across a nationally significant operating environment.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location