Head of GRC – MSP Practice Lead

About the role

We are seeking a senior GRC expert to lead the Governance, Risk & Compliance practice for a top‑10 European Managed Service Provider. The role combines strategic practice growth, client advisory as a virtual CISO, and internal audit leadership.

Key responsibilities

• Scale and productise the Compliance‑as‑a‑Service roadmap, driving revenue, pricing and service design.
• Deliver virtual CISO services, advising mid‑market boards on cyber security, risk and resilience.
• Lead client assessments and certifications for Cyber Essentials/CE+, ISO 27001 and UK GDPR.
• Develop next‑generation AI governance and operational resilience (BC/DR) frameworks.
• Maintain the firm’s internal ISO certifications and ensure audit readiness.

Required profile

• Senior experience in GRC, information security or IT audit, preferably within an MSP or tech consultancy.
• Strong practical knowledge of Cyber Essentials, ISO 27001 and UK GDPR.
• Executive presence with the ability to present risk and strategy to C‑suite and board members.
• Commercial acumen to partner with sales and expand client adoption.
• Desirable certifications: CISSP, CISM, CRISC or ISO 27001 Lead Auditor.

Required skills

• Cyber Essentials
• ISO 27001
• UK GDPR

What we offer

• Autonomy to run the practice as an independent business unit with senior leadership support.
• Significant investment in professional development and elite certifications.
• Opportunity to join a rapidly expanding firm through organic growth and acquisitions.