Governance, Risk & Compliance Officer

• Support and enhance the organisation's GRC framework within the Cyber Security function


• Lead on compliance initiatives across key standards including:
  
  
  
  • Cyber Essentials / Cyber Essentials Plus
  
  
  • PCI DSS
  
  
  • CAF (Cyber Assessment Framework)
  
  
  
  


• Conduct and manage third-party risk assessments and vendor due diligence


• Perform vendor security assessments and ensure appropriate controls are in place


• Identify, assess, and report on information security risks


• Work closely with internal stakeholders to ensure ongoing compliance and risk mitigation


• Assist in policy, process, and control development and improvement


• Support audit activities and remediation programmes

Please click