Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this GRC Lead role.
Rezi rewrites your resume against Risk Ledger's job description. Free.
Tailor your resume to this GRC Lead role.
Rezi rewrites your resume against Risk Ledger's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the GRC Lead posting at Risk Ledger — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the GRC Lead posting at Risk Ledger — free, in seconds.
About the Role
As GRC Lead, you will own Risk Ledger's governance, risk, and compliance work, including certifications, enterprise risk management, policies, and customer assurance. This is a hands-on role requiring collaboration across the business and the opportunity to influence product development.
Responsibilities
- Run certifications, maintain ISO 27001 ISMS, and lead external audits.
- Manage SOC 2 Type 1 to Type 2 transition and ongoing maintenance.
- Own the enterprise risk management framework and risk register.
- Run risk reviews with owners and provide leadership reporting.
- Lead compliance tooling implementation and transition to an in-house solution.
- Support Sales and Customer Success with security questionnaires and due diligence.
- Keep policies up-to-date, owned, and followed.
- Support the supplier risk program using the Risk Ledger platform.
- Work with control owners to explain control importance and drive adoption.
- Feed GRC expertise into product development.
Requirements
- At least 3 years of hands-on GRC experience.
- Hands-on experience maintaining ISO 27001 certification.
- Hands-on experience working on SOC 2 audits from the organization's side.
- Experience in a startup or scale-up environment, ideally in B2B SaaS, fintech, or security.
- Hands-on experience with risk management and reporting to senior leaders.
- Pragmatic, risk-based approach favoring real security outcomes.
- Self-starter mindset with ownership and ability to work with loose direction.
- Strong communication and people skills, adaptable to various audiences.
Skills
- AI and automation experience
- ISO 27001 Lead Implementer or Lead Auditor
- CISA
- CISM
- CRISC
- CISSP
- Cyber Essentials or Cyber Essentials Plus
- ISO 42001
- EU AI Act
- GRC automation platforms
- UK GDPR
- US privacy and security expectations
- Third-party or supply chain risk management
Location
- London
Work Type
- Hybrid
- Full-time
Experience Level
- 3+ years
Salary/Compensations
- £70,000—£80,000 GBP
Benefits
- Work on GRC at a company whose customers are GRC and security teams.
- Opportunity to shape the product.
- Real ownership from day one.
- Room to grow into leadership.
- Differentiated vision and unique community-based approach to supply chain risk.
- Hybrid working from new London office.
About the Company
- Risk Ledger is developing a network of connected organisations to defend against cybersecurity attacks in the supply chain.
- Organisations rely on Risk Ledger for trust through sharing security maturity and visualising supply chain risks.
- Trusted by customers like British Airways, BAE Systems, and the NHS.
- Committed to building an amazing and talented team from diverse backgrounds.
- Built on respect, shared values, and a common mission.
- Values curiosity, ambition, humility, and honesty.
- Aims high to find the best solutions and prioritizes users.
- The Security & IT team owns information security, IT operations, and GRC in the UK and US.
- Holds ISO 27001 certification, Cyber Essentials Plus, and SOC 2 Type 1.
- The team collaborates with Engineering, Product, Sales, Customer Success, People, and Finance to drive business wins through security and compliance.