Director of Governance, Risk & Compliance (GRC)

About the role

We are building a Governance, Risk & Compliance (GRC) practice and a Compliance-as-a-Service offering. As the GRC Director you will lead client‑facing delivery, support senior leadership and help organisations improve their governance and resilience.

Key responsibilities

• Lead client compliance programmes, audits, risk registers and remediation initiatives.
• Deliver Cyber Essentials, Cyber Essentials Plus and UK GDPR assessments.
• Present findings and recommendations to senior stakeholders and board members.
• Offload senior leadership workload by managing day‑to‑day GRC delivery.
• Support the growth of virtual CISO and broader compliance services.

Required profile

• Proven experience in GRC, information security, audit or risk management.
• Strong knowledge of Cyber Essentials/Plus and UK GDPR.
• Excellent report writing and client‑facing communication skills.
• Ability to translate technical risk into clear business impact.
• Trustworthy, curious communicator with strong client credibility.
• Relevant certifications (ISO 27001, CISSP, CISM) are advantageous but not mandatory.

Required skills

• Cyber Essentials
• UK GDPR
• ISO 27001
• CISSP
• CISM

What we offer

• Hybrid working model (3 days onsite, 2 days remote) in West Hampstead, London.
• Opportunity to shape and lead a growing GRC practice.
• Competitive salary package.