GRC Manager

Information Security / GRC Manager

Location: Dublin or Reading (Hybrid)

Duration: Initial 6 Months

Contract Type: Inside IR35 Day Rate

Travel: Ad-hoc to Dublin HQ

We are seeking an experienced Information Security / GRC Manager to lead security assurance, risk management, third‐party oversight, and compliance activities. Reporting to the Interim CISO, you’ll combine strategic governance with hands‐on execution, driving security maturity across programmes, suppliers, and internal teams.

This role requires someone confident operating independently, engaging senior stakeholders, and ensuring security controls are embedded across a fast‐moving technology landscape.

What You’ll Do

• Lead security assurance across major programmes, ensuring controls are embedded and validated
• Oversee third‐party security risk management, assessments, tooling, and governance forums
• Drive Secure by Design and Privacy by Design across delivery teams
• Manage penetration testing cycles, remediation tracking, and readiness for go‐live
• Lead organisation‐wide security awareness and training programmes
• Govern risk reduction initiatives including PAM, DLP, and emerging tech such as AI/Copilot
• Own audit engagement, evidence preparation, and closure of findings
• Maintain and evolve security policies, standards, and frameworks
• Act as a trusted advisor, responding to frequent ad‐hoc security queries with pragmatic guidance

What You’ll Bring

• Proven experience in Information Security with strong GRC leadership
• Expertise in security assurance, third‐party risk, audit, and policy frameworks
• Strong understanding of cloud security, data protection, and emerging risks
• Experience with ISO 27001 / NIST‐aligned controls
• Confident stakeholder engagement across senior business and technology leaders
• Excellent communication, organisation, and leadership skills

Success Looks Like

• Security controls embedded across all strategic initiatives
• Reduced organisational risk posture and clear roadmap execution
• Timely closure of audit findings
• High compliance with training and awareness, KPIs
• Scalable, effective third‐party risk management
• Strong confidence in the GRC function from senior stakeholders