Governance, Risk and Compliance Lead

About the role

The Governance, Risk and Compliance (GRC) Lead provides single‑point accountability for the organisation’s governance framework, risk management, compliance obligations and certification programmes across multiple management systems.

Key responsibilities

• Maintain an integrated management system covering ISO 9001, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001 and related legal, regulatory and contractual requirements.
• Develop and run a risk‑based audit programme, coordinate certification, surveillance and client assurance audits, and oversee corrective‑action processes.
• Manage registers of risks, legal/compliance obligations, document control and records, and provide governance oversight of business continuity and AI governance.
• Facilitate management reviews, produce GRC metrics, dashboards and reports for senior leadership, and respond to client assurance requests.

Required profile

• At least 5 years of experience in management‑system governance, risk, compliance or assurance, preferably in a software/IT services environment.
• Lead Auditor or Lead Implementer certification for at least one adopted management‑system standard.
• Proven ability to interpret standards independently, lead audits, conduct root‑cause analysis and influence stakeholders without direct authority.

Required skills

• ISO 9001, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001 implementation and auditing.
• Risk‑management methodology, risk registers and treatment planning.
• Audit planning, execution and evidence‑based reporting.
• Document‑control, record‑keeping and compliance‑obligation tracking.