Cyber Governance, Risk and Compliance Manager

Société RCI FS Ltd UK

The Cyber Governance, Risk & Compliance (GRC) Manager is responsible for establishing, maintaining and continuously improving the organisation's cyber governance, risk management and compliance capabilities. The position acts as a key bridge between business leadership, technology teams, risk functions, internal audit and regulators, ensuring that cyber security supports business objectives while protecting organisational information assets and maintaining compliance with legal, regulatory and contractual requirements.

The role also leads the adoption of automation and data-driven security practices to enhance efficiency, reporting and risk management effectiveness. This aligns with security objectives identified within the MFS UK Cyber Strategy.

Own and maintain the Cyber Security Governance Framework.

• Develop and oversee information security policies, standards, procedures and controls.
• Ensure alignment to recognised frameworks and standards including NIST, FCA/PRA and ECB expectations and Operational Resilience requirements
• Provide governance reporting to relevant UK and Corporate Committees, forums and working groups to support effective decision-making and oversight.
• Identify and monitor the department Top Risks, Emerging Risks and Issues Under Management for reporting to IS-IT Committee and Executive Risk Committee; including preparing papers for the IS-IT Committee.
• Coordinate security reviews, control attestations and policy exception processes.
• Develop and maintain compliance documentation for security audits and regulatory reviews.
• Manage security control testing and assurance programmes.
• Track risk remediation actions and provide assurance reporting.
• Facilitate risk identification, assessment, treatment and reporting activities in line with the organisation’s framework
• responsible for the completion and assessment of Risk and Control Self Assessments (RCSAs).
• Maintain the cyber risk register and ensure risks are assigned, monitored and escalated appropriately.
• Define risk appetite metrics and key risk indicators (KRIs).
• Drive remediation planning and risk reduction activities.
• Establish and maintain an Emerging Threat Management Programme & oversee Horizon Scanning.
• Present threat intelligence and strategic risk insights to senior leadership.
• Identify opportunities to automate governance, compliance and risk management activities.
• Drive security workflow orchestration and reporting efficiencies.
• Improve use of security tooling, dashboards and data analytics. Essential Experience
• Significant experience in Cyber Security Governance, Risk and Compliance.
• Experience within a regulated financial services environment.
• Strong understanding of cyber risk assessment methodologies.
• Experience with security frameworks and regulatory compliance.
• Experience presenting to senior leadership and committee structures.
• Strong analytical, reporting and stakeholder management skills. Desirable Experience
• Experience implementing GRC platforms.
• Experience with automation and workflow tools.
• Knowledge of Operational Resilience frameworks. Desirable qualifications or equivalent relevant experience:
• Degree or equivalent experience in Cyber Security, Information Security, Risk or Technology.
• CISM
• CRISC
• CISSP
• ISO 27001 Lead Implementer or Lead Auditor
• NIST Cybersecurity Framework Practitioner
• Certified Data Protection qualification Individual Conduct Rules
• Acting with integrity.
• Acting with due skill, care, and diligence.
• Being open and cooperative with regulators.
• Treating customers fairly and with respect.
• Observing proper standards of market conduct.
• Ensuring effective control of the firm’s business. Métier Technologies & Systèmes D'information Renault Group s’engage à créer un environnement de travail inclusif et les conditions permettant à chacun de nous d’apporter sa passion, donner le meilleur de lui-même et s’épanouir, tout en étant lui-même. Nous trouvons notre force dans notre diversité et nous nous engageons à garantir l'égalité des chances en matière d'emploi, indépendamment de la couleur, de l'ascendance, de la religion, du sexe, de l'origine nationale, de l'orientation sexuelle, de l'âge, de la citoyenneté, de l'état civil, du handicap, de l’identité de genre, etc. Si vous avez un handicap ou un besoin particulier nécessitant l’aménagement du poste de travail ou de l’horaire de travail, merci de nous le faire savoir en remplissant ce formulaire. Afin de pouvoir suivre en temps réel l'évolution de vos candidatures et pouvoir rester en contact avec nous, nous vous invitons à créer un compte candidat. Cela ne vous prendra pas plus d’une minute et vous permettra également de faciliter vos prochaines candidatures. En soumettant votre CV ou votre candidature, vous autorisez Renault Group à utiliser et stocker des informations vous concernant à des fins de suivi de votre candidature ou de futurs emplois. Ces informations ne seront utilisées que par les sociétés de Renault Group tel que mentionné dans la Politique Groupe de protection des données personnelles .