Cyber Security GRC Sector Lead

Cyber Security GRC Sector Lead Role Overview As Senior Governance, Risk & Compliance (GRC) Manager, you will be responsible for strategic leadership and direction for the GRC team. You will work closely with executive leadership and directors, guiding decision-making through expert analysis and insights. Your leadership and expertise will be critical in fostering a strong culture of compliance and risk-awareness across Sopra Steria. Join a team where you will play a pivotal role in shaping and elevating our GRC practices. Lead with excellence and drive impactful change to make sure our long-term success. The GRC Sector Lead has cross-programme responsibility for: Cyber security governance across all sector programmes Oversight of multiple programme-level cyber security teams GRC resource requirements including recruitment, retention and development Secure system design, accreditation, and assurance Cyber risk management across development, integration, and operational phases Incident management, escalation, and response coordination Compliance with Sopra, UK Government, and contractual security requirements Interface with security authorities and customer assurance teams Support to bids, transitions, and new programme mobilisation Key Responsibilities Provide senior leadership to cyber security managers and teams across multiple programmes. Act as the technical and managerial escalation point for cyber security issues, risks, and incidents. Ensure consistent application of cyber security standards, controls, and best practice across programmes. Support pre-sales/business development within the sector through opportunity boards and meetings with sector leadership team. Provide cyber security input to new bids and proposals. Support mobilisation of new programmes, ensuring security capability is in place from day one. Advise on cyber cost, risk, and resourcing implications during programme planning. Mentor and develop programme cyber leads, building a strong and resilient cyber capability. Act as a senior cyber security interface with customers, delivery partners, and assurance bodies. Support customer confidence through clear communication of security posture and risk. Represent the organisation in security working groups, assurance panels, and audits. Working with other GRC Sector Leads and the GRC Practice Lead to; Provide strategic leadership and direction to the GRC team Define and implement the business strategy and service roadmap for GRC Conduct in-depth risk assessments, internal control evaluations, and compliance gap analyses to identify areas for improvement and drive actions to mitigate risks and improve compliance practices Collaborate closely with cross-functional teams to ensure seamless integration of GRC policies, procedures, and controls into business processes and operations