Head of Governance, Risk & Compliance
Head of Governance, Risk & Compliance (GRC)
Experience working for a MSP/Technology Company (Managed Service Provider) essential
NW London (Hybrid - 3 days onsite, 2 days remote following successful completion of 3 months induction/probation)
An exciting opportunity for an experienced GRC professional to lead and grow a Governance, Risk & Compliance practice within a fast-growing managed services and cybersecurity environment.
This senior leadership role combines strategic direction, client advisory, Virtual CISO services, compliance management, operational resilience, and business development. You will work with senior stakeholders to improve governance, manage risk, strengthen cyber resilience, achieve compliance objectives, and drive the growth of a Compliance-as-a-Service offering.
Key Responsibilities
- Lead and develop GRC and compliance service offerings.
- Deliver governance reviews, compliance assessments, and risk management programmes.
- Provide Virtual CISO services and board-level advisory support.
- Support Cyber Essentials, ISO 27001, GDPR, and wider regulatory compliance initiatives.
- Lead operational resilience, business continuity, and disaster recovery governance activities.
- Develop AI governance frameworks and advise on emerging regulatory requirements.
- Support sales, client engagement, and thought leadership activities.
Requirements
- Strong experience in Governance, Risk & Compliance, Information Security, Audit, or Risk Management.
- Knowledge of Cyber Essentials, ISO 27001, UK GDPR, and risk management frameworks.
- Experience engaging with senior stakeholders and delivering client-facing consultancy services.
- Excellent communication, reporting, and stakeholder management skills.
Desirable
- ISO 27001 Lead Auditor/Implementer.
- CISSP, CISM, CRISC, CISMP, or equivalent certifications.
- Virtual CISO, business continuity, operational resilience, or managed services experience.
This role is ideal for a commercially minded GRC leader looking to shape a growing practice while helping organisations improve governance, security, compliance, and resilience.