Back to search
A large complex organisation is currently seeking a highly skilled Programme Manager within Cyber GRC (governance, risk & compliance) on a contract basis to assist with a number of projects across the organisation to help strengthen their cybersecurity posture, manage cyber risks, and ensure regulatory compliance.
Location: Remote - with some travel
Day rate: £450-650 DOE inside IR35
Contract length: 6 months initially - likelihood to be extended
You will lead the programme to mature the Information Security Governance and Risk functions. This includes managing the creation, renewal, and maintenance of all policies, standards, processes, and procedures in alignment with the new strategy.
The ideal candidate will have deep expertise in cybersecurity frameworks, risk management, regulatory compliance, and security governance.
You will:
- Work on global projects with a global team, upskilling, improving and developing the security posture
- Contribute to the development of and innovative solutions to mitigate their cyber risks.
- Coordinate Information Security Governance and Risk work streams and establish prioritization of key activities
- Formalise cyber risk controls as managed within ISO framework for standards and policy, NIST controls and cyber risk assessments, including controls managed within the Information Security Policy
- Lead efforts within the team to maintain controls, standards and policies for meeting compliance and continuous control monitoring as part of reporting and metrics
- Support and lead NIST CSF risk assessments
- Helping the design of Cyber Security Roadmaps
Our ideal candidate will have the following skills:
- Have a broad business skill set including stakeholder management, problem-solving, and resilience
- Managing multiple projects successfully
- Have experience in gathering, validating, synthesizing, documenting, and communicating data and information for a range of audiences
- Be able to build strong and effective business relationships at all levels
- Be able to explain complex cyber methodologies using accessible non-technical language (both written and verbal)
- A good understanding of NIST CSF
- Experience with the identification, development, and oversight of cybersecurity policy, processes, and procedures;
- Creating positive working environment by monitoring and managing workloads of the team while balancing expectations;
- Working knowledge of NIST Cybersecurity Framework (CSF) and IT Service Management (ITSM)
This role is managed by Walters People entity which is a temporary recruitment agency.
