security, or compliance Strong understanding of GRC principles Experience with Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party/vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What … contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments, supplier risk tracking, and secure ...