Governance, Risk & Compliance Specialist

This role is being handled by Via, a secure hiring platform used by employers to review candidates.

After applying, you will be invited to create your profile on the Via platform. Your profile stays anonymous until you match.

Governance, Risk & Compliance (GRC) Specialist

Leicestershire (Hybrid, minimum 1 day per week on site)

£40,000 – £55,000 + bonus + benefits

Start date: Flexible

The Opportunity

We’re partnering with a leading UK omnichannel retailer to recruit a GRC Specialist into their growing Cyber Security function. This is a chance to shape how a large, well-established business manages cyber risk. You’ll work across technology and business teams to strengthen governance, keep the organisation aligned with regulatory and industry standards, and help security become an enabler rather than a blocker.

If you enjoy pairing technical frameworks with pragmatic, business-focused advice, this role offers real visibility and influence.

What You’ll Be Doing

• Developing, maintaining and continually improving the Information Security Management System (ISMS)
• Supporting compliance with NIST CSF 2.0, PCI DSS, the UK Data Protection Act 2018 and other relevant requirements
• Coordinating internal and external security audits and leading evidence collection
• Administering the cyber risk register and facilitating risk assessments across projects and operational services
• Running the supplier cyber security assurance process, including third-party security assessments
• Writing and maintaining security policies, standards and procedures aligned with business objectives
• Helping shape security awareness programmes, including phishing simulations and campaigns
• Producing reporting for senior leadership and managing security exceptions and risk acceptance processes
• Acting as a trusted advisor, giving practical security guidance that supports innovation

What You’ll Bring

• 4–5+ years’ experience in a GRC, Information Security or Cyber Security role
• Strong knowledge of cyber risk management, NIST CSF 2.0, PCI DSS and UK GDPR
• Hands-on experience with cyber risk assessments and third-party assurance programmes
• A track record of writing policies, standards and governance documentation
• Experience supporting audits and regulatory compliance activity
• Experience producing security metrics and executive-level reporting
• Excellent stakeholder management, with the ability to influence at all levels
• Strong analytical, problem-solving and communication skills

Nice to Have

• Experience in a large enterprise or listed company environment
• Background in retail, eCommerce or omnichannel businesses
• Cloud security knowledge and familiarity with Secure by Design principles
• Experience with GRC platforms such as LogicGate, OneTrust, Archer or AuditBoard
• Experience supporting certification programmes such as ISO 27001
• Relevant certifications, for example ISO 27001 LI/LA, CISSP, CISM, CRISC, CIPP/E, PCIP, PCI ISA or NIST CSF Practitioner

What’s On Offer

• Salary of £40,000 – £55,000, depending on experience
• Annual bonus
• Pension scheme
• Share save scheme
• Competitive annual leave
• Hybrid working, with as little as one day per week on site

Register your details on Via to progress your application. Create one profile and be matched to this role and other relevant opportunities, including roles advertised exclusively on Via .