Head of Technology GRC

About the role

The Head of Technology GRC will lead and develop the Group Technology GRC function, translating the Technology Risk, Governance & Assurance strategy into effective services, processes and controls across a large multi‑fascia retail technology estate.

Key responsibilities

• Lead a multi‑disciplinary team covering technology risk, controls, assurance, policy, governance, compliance and third‑party risk.
• Set priorities, accountabilities and performance expectations for the GRC leadership team and ensure delivery of services with clear ownership and measurable outcomes.
• Establish and continuously improve the Technology GRC service catalogue and the Group Technology Control Framework.
• Own the annual technology assurance programme and manage the lifecycle of control deficiencies.
• Provide independent challenge and oversight without assuming first‑line operational responsibility.

Required profile

• Proven senior leadership experience in technology risk, governance or assurance within a complex, multi‑site environment.
• Strong ability to translate strategy into sustainable operating models and to build high‑performing second‑line functions.
• Excellent stakeholder management skills across technology, information security, finance, internal audit, procurement and legal functions.

Required skills

• Deep knowledge of technology risk management, control frameworks (ITGC, cyber security, IAM, change management, resilience, third‑party risk).
• Experience with GRC tooling estates for risk, control, issue and assurance data management.