Governance, Risk & Compliance Manager

Governance, Risk & Compliance Manager Role Overview GRC Manager, Risk and Change Lead The successful candidate will join a team of information risk professionals within the Information Security Risk and Assurance Team. The role will be responsible for managing an overarching risk register ensuring that open risks are tracked and monitored, and mitigation actions are implemented. They will work with operational teams across all business departments to ensure that information risk is managed adequately. The role will also include providing inputs into Enterprise Risk registers for upward reporting. The Information Security Risk and Change Manager will also be responsible for managing relationships with risk owners across the organisation and tracking and reporting on progress and issues. In addition to this, the role is also to mange the review and impacting of all new changes and projects to establish whether Information Security Risk and Assurance deliverables are required. The running of a daily review call is required to triage the changes and gather required inputs. Monthly reporting on all aspects of the risk register and change management impacts is required. Key Responsibilities: To include: Responsibility for implementing the Information Security Risk Management Service in accordance with the service definition document. Management and updating of a central risk register Providing inputs into additional Enterprise Risk systems and reports Identification of risk management improvement opportunities Escalation point for information risk related matters Production of risk reports and KPI’s Attendance at risk boards and security meetings including presenting risks to key stakeholders Providing support to supplier security management processes Negotiating with senior risk owners and risk champions Facilitate risk meetings to identify, assess and manage threats and opportunities and review mitigation actions across multiple projects Providing guidance to the business on identifying and managing key risks, controls, metrics and issues Analyse the current risk documents to ensure the process is being followed and corrective actions are being implemented where needed Review changes as part of BAU and new projects to identify the requirement for risk assessment and assurance activities. Liaise with the change team to provide written impacts relating to Information Security Risk and Assurance engagement and associated deliverables