Where you fit in:

As our Senior Technology GRC Specialist you will

• Lead, mentor and develop Technology GRC analysts and junior team members, ensuring the team has the skills, knowledge and capabilities required to deliver effective governance, risk and compliance activities.
• Champion the value of governance, risk and compliance at management level, driving cultural change and embedding best-practice GRC principles across the organisation.
• Support the management and continual improvement of the Technology GRC and Risk Management Frameworks, ensuring alignment with regulatory requirements, industry standards and business objectives.
• Build and maintain effective relationships with senior leaders, business units, auditors, regulators, vendors and external agencies to support Technology governance, risk and compliance outcomes.
• Lead Technology compliance monitoring, controls testing and assurance activities, managing audits, findings, remediation plans, policy exemptions and ongoing compliance obligations.
• Conduct and facilitate Technology risk assessments, audits and reviews, maintaining risk registers, evaluating controls and providing proportionate recommendations to mitigate risk and strengthen resilience.
• Provide expert advice, guidance and training on Technology governance, risk and compliance matters, enabling informed decision-making and increasing organisational awareness.
• Develop, implement, maintain and assure Technology policies, standards and procedures, ensuring they remain effective, compliant and aligned with recognised frameworks and best practice.
• Support Technology incident investigations and regulatory reporting requirements, coordinating with stakeholders and data owners to ensure incidents are effectively managed and resolved in accordance with legal and company obligations.
• Manage Technology GRC reporting, metrics, KPIs and KRIs, while driving continuous improvement, influencing stakeholders, supporting commercial objectives and fostering strong collaboration across the organisation.

What skills & qualifications you will need:

• Certification in information technology, Computer Science, Information Systems or a related discipline, or equivalent demonstrable industry experience.
• Proven experience in Technology Governance, Risk and Compliance, with at least three years operating in a senior specialist or leadership role.
• Strong track record of partnering with senior leaders and stakeholders to provide expert advice, guidance and training on governance, risk and compliance matters.
• Comprehensive knowledge of recognised Technology GRC frameworks, standards and methodologies, including COBIT, ITIL, ISO 27001, NIST and GDPR.
• Highly developed influencing, negotiation and stakeholder management skills, with the ability to build credibility, drive engagement and inspire positive change.
• Excellent analytical, problem-solving and decision-making capabilities, with experience identifying, assessing and mitigating Technology risks through practical and effective controls.
• Strong communication, presentation, organisational and project management skills, with the ability to explain complex technical and compliance concepts to a wide range of audiences and manage competing priorities effectively.
• Demonstrates high levels of professionalism, integrity and discretion, alongside a proactive, innovative mindset and the ability to adapt to evolving technologies, risks and regulatory requirements.

You will also benefit from having:

• Experience operating in a strategic and/or operational leadership role within a commercial and/or highly regulated environment, with the ability to balance business objectives and regulatory obligations.
• Demonstrable experience in Technology and Information Security incident management and investigations, including working within established governance and reporting frameworks.
• Good understanding of General Data Protection Regulation (GDPR) requirements, with practical experience of working alongside legal, audit and compliance teams to ensure regulatory adherence.
• Proven experience conducting Technology compliance reviews and audits, alongside strong stakeholder, vendor and third-party management and negotiation skills.

Although we operate 24 hours a day, 365 days a year, it’s important to us that we support flexible working patterns and job share options (when we can), to help you make the best of both your work and home life. We know that juggling childcare responsibilities or getting that ideal work/life balance isn’t always easy!

Do we sound like your cup of tea?

If you’ve got experience as a Senior Technology GRC Specialist and want to help us deliver great service for our customers whilst looking after the environment, then be sure to apply today to find out what a career with Yorkshire Water can offer you.

Closing date – 28th July

If successful for the role, you will be required to undergo pre-employment checks that will include a Basic Disclosure Check, carried out through a Third-Party Company, prior to commencing employment. Depending on the role, you may also be required to go through the security vetting process for either a Counter Terrorist Check or Security Check clearance.

All our roles are subject to a medical questionnaire, and further medicals when required.

We are committed to removing barriers and ensuring our recruitment process is accessible to everyone. We offer a range of adjustments to make your application experience as comfortable and straightforward as possible.

If you have an accessibility need, disability, or condition that requires changes to the recruitment process, please include this information in your application. We will then discuss any reasonable adjustments required.

Kelda Group reserve the right to close this position before the published closing date, should the need occur. We therefore advise that you complete and submit your application as soon as possible.

No agencies please.