Information Security / GRC Manager

About the role

We are seeking an Information Security / Governance, Risk & Compliance (GRC) Manager to lead enterprise‑wide risk, governance and assurance for a fast‑growing B2B technology business. This senior strategic role covers information security, compliance, quality management and corporate risk, ensuring governance is embedded across the organisation.

Key responsibilities

• Own major certification programmes such as ISO 27001, ISO 9001 and SOC 2, leading audit planning and execution.
• Manage cyber‑insurance, regulatory compliance and third‑party assurance activities.
• Provide security and compliance expertise during sales opportunities, supporting customer meetings and executive briefings.
• Define and continuously improve the GRC strategy and roadmap, partnering with executive leadership on risk appetite.
• Lead data‑protection governance for UK GDPR, EU GDPR and related privacy frameworks, including DPIAs and international data‑transfer controls.
• Shape AI governance to ensure responsible, secure and compliant adoption of AI technologies.

Required profile

• Senior‑level experience leading information security, governance and compliance functions.
• Proven track record delivering ISO 27001, ISO 9001 and SOC 2 certifications.
• Strong understanding of UK GDPR, EU GDPR and privacy impact assessment processes.
• Experience advising executive teams on risk appetite and governance‑first culture.
• Ability to support commercial teams with security guidance during enterprise sales.

Required skills

• ISO 27001
• ISO 9001
• SOC 2
• UK GDPR
• EU GDPR
• Data protection governance
• Privacy Impact Assessments (DPIA)
• AI governance
• Cyber‑insurance management