Governance, Risk & Compliance Specialist
Location: Manchester, UK (on-site, full-time)
Eligibility: Open only to UK citizens/residents with full work rights
About the Role
We’re seeking a Governance, Risk & Compliance (GRC) Specialist to strengthen our security, risk management, and compliance practices. This role ensures our organisation meets regulatory requirements, manages information security risks, and upholds governance standards.
Key Responsibilities
* Monitor and manage IT security risks, maintaining risk registers and assessments.
* Ensure compliance with UK regulations (GDPR, NIS, Data Protection Act) and international standards (ISO 27001).
* Support audits, compliance reporting, and incident response activities.
* Assist in drafting and updating security policies and governance frameworks.
* Contribute to staff awareness and training initiatives.
* Assess vendor/third-party security risks and compliance.
What You’ll Bring
* Knowledge of UK regulatory frameworks (GDPR, NIS, Data Protection Act).
* Understanding of risk management and IT security best practices.
* Strong attention to detail and problem-solving ability.
* Familiarity with ISO 27001 and compliance processes.
Desirable Skills
* AWS knowledge/certifications.
* Degree in Computer Science/IT.
* Experience with audits, penetration testing, or security frameworks (PCI, ISO).
* Networking knowledge (VPNs, VLANs, routing).