Cyber Security GRC Manager - London
Remote working
Salary up to £60,000 per annum
This is a fully remote position, with occasional meetings in London and possible travel to India twice yearly.
Cyber Security Manager (GRC) position available for a client based in London. The role involves shaping and implementing a governance, risk, and compliance (GRC) strategy. Responsibilities include establishing structure, collaborating with technical and business teams, and supporting security and compliance initiatives within the organization.
The position requires development and maintenance of security policies aligned with ISO 27001, GDPR, HIPAA, and OWASP, as well as leading risk assessments and managing the risk register.
Key skills and responsibilities,
*Comprehensive knowledge of ISO 27001, NIST CSF, GDPR, HIPAA, SOC 2, and OWASP frameworks.
*Senior Security Analyst / Senior Security Engineer background
*Proven experience collaborating with software development teams and implementing technical controls.
*Skilled in articulating technical risks in terms of business impact.
*Professional certifications such as CISM, CISSP, CRISC, ISO 27001 Lead Auditor, and hands-on experience with GRC tools (e.g., Vanta, Drata) are highly desirable.
*Responsible for developing and maintaining security policies in alignment with ISO 27001, GDPR, HIPAA, and OWASP standards.
*Lead risk assessments and oversee the management of the organization’s risk register.
*Support efforts to prepare for audits and maintain certification readiness.
*Collaborate with engineering and operations teams to integrate security into development and delivery processes.
*Respond to client security questionnaires and support due diligence activities.
Interested? Please submit your updated CV to Emma Siwicki at Crimson for immediate consideration.
Not interested? Do you know someone who might be a perfect fit for this role? Refer a friend and earn £250 worth of vouchers!
Crimson is acting as an employment agency regarding this vacancy