Start Date
Immediate
Expiry Date
11 Jan, 27
Salary
80000.0
Posted On
13 Oct, 26
Experience
19 year(s) or above
Remote Job
Yes
Telecommute
Yes
Sponsor Visa
Yes
Skills
Industry
Information Technology & Services
Nov 26
Meraki Talent are supporting a leading, highly regulated financial services organisation seeking an experienced Project Lead to support a significant programme of change across Third-Party Risk Management (TPRM) and Operational Resilience. The Project Lead – Third-Party Risk & Resilience will focus on enhancing and redesigning third-party risk and resilience capabilities, including supplier assurance, resilience testing, supplier exit planning, concentration risk, supplier dependencies and third-party governance and will assess current-state processes and controls, design future-state solutions and support their implementation across a complex supplier environment.
Responsibilities of the Project Lead – Third-Party Risk & Resilience:
Background of the Project Lead – Third-Party Risk & Resilience
Is this job for you? At Meraki, we love recruitment and love words. Is this you?
Gordon wants: TPRM, Projects, Delivery, Risk, Outsourcers, Third Parties
Please see our website page headed (eg) ‘Privacy Notice’ for an explanation about how we use information we collect about you’
’ll take ownership of key GRC areas, including ISO 27001, security risk assessments, third-party risk, audit and control effectiveness. There is also an interesting element around the governance and responsible use of AI, helping the business understand and manage the security and data risks that come with emerging technologies.
The Company:
This is a long standing and highly respected player in the tech space, known for developing technology used by some of the world’s most recognised companies. While you won’t see their name in the spotlight, their work sits behind products used by millions of people around the world. With a reputation for engineering excellence and trusted partnerships at the highest levels, this business has quietly built a global footprint while keeping a down to earth, collaborative culture.
The Role:
This is a broad GRC role where you’ll have genuine ownership and influence across the Information Security function. You’ll be responsible for operating and improving the company’s ISO 27001-aligned security management framework, while working closely with IT, Security, Engineering and wider business teams to identify and manage risk.
A key part of the role will be assessing security risks around new systems, services and business initiatives, working with stakeholders to understand how controls are designed and whether they are operating effectively. You’ll also play a significant role in third-party risk, reviewing suppliers and service providers and ensuring any identified risks are properly understood and addressed.
There is an evolving focus on AI governance too. As the business continues to adopt AI technologies, you’ll help establish the security and risk framework around their use, including acceptable-use guidance, risk assessments and appropriate controls for new AI tools and services.
You’ll also have the opportunity to improve the way GRC is delivered through technology, with responsibility for administering and optimising enterprise GRC platforms such as ServiceNow GRC or OneTrust.
Key Responsibilities:
** Lead the day-to-day operation and ongoing improvement of the organisation’s ISO 27001-aligned Information Security Management System.
** Own and develop security policies, standards, controls and exception management processes.
** Lead information security risk assessments across new technology, projects, services and business initiatives.
** Assess the effectiveness of security controls and work with stakeholders to develop and track appropriate risk treatment plans.
** Manage third-party security risk, including supplier assessments, due diligence, remediation and ongoing monitoring.
** Support internal and external audits, customer security assessments and certification activities.
** Analyse and communicate security risks clearly to both technical and non-technical stakeholders, including senior leadership.
** Configure and continually improve GRC tooling, supporting risk registers, control libraries, assessments, exceptions and third-party workflows.
** Work closely with teams around privacy, regulatory and data protection requirements.
** Help develop the governance and security framework around the responsible use of AI, including GenAI and emerging agentic technologies.
** Act as a trusted advisor to IT, Engineering, Security and business teams, making sure security requirements are practical and can be embedded into the way teams operate.
** Produce clear reporting, briefings and presentations for senior stakeholders and support wider security awareness activity.
Key Skills & Background:
** Strong experience within Information Security, with a particular focus on GRC, risk management and/or security compliance.
** Practical experience working with ISO 27001, including the ISMS lifecycle, risk assessment, treatment and security controls.
** Experience across both internal security risk assessments and third-party/vendor risk management.
** Good technical understanding across areas such as cloud/SaaS, identity, networks, endpoints and security operations.
** Experience using an enterprise GRC platform, ideally ServiceNow GRC, although experience with other platforms such as OneTrust will also be relevant.
** Ability to work with technical and business stakeholders and translate security and compliance requirements into practical actions.
** Strong analytical skills and the ability to assess risk in the context of wider business objectives.
** Comfortable working independently, managing multiple priorities and taking ownership through to completion.
** Relevant certifications such as CISSP, CISM, CISA, CRISC or ISO 27001 Lead Implementer/Lead Auditor would be advantageous, but are not essential.
The company boasts one of the best offices in Edinburgh City Centre, offering a stunning, modern workspace that perfectly complements its dynamic and innovative culture. The office is equipped with fantastic amenities, creating an environment that’s not only comfortable but also designed to inspire collaboration and creativity.
This is a hybrid role, with a minimum of two days per week in the Edinburgh office. On top of this, the company offers a very competitive salary and a great benefits package including bonus and share scheme.
This is an opportunity to join a global technology business where Information Security is an important part of how the organisation operates. You’ll have the scope to influence security governance at a global level, work closely with senior stakeholders and play a key role in how the business manages both established and emerging risks, particularly as AI adoption continues to develop.
If this sounds of interest, please apply or reach out to Murray Simpson.
Lead GRC Consultant , Edinburgh, Scotland, United Kingdom
Off
Job search faster with Premium
Access company insights like strategic priorities, headcount trends, and more
Millions of members use Premium
1-month free trial. Easy to cancel. We’ll remind you 7 days before your trial ends.
Follow
Staffing and Recruiting
•
11-50 employees
•
14 on LinkedIn
Cathcart Technology is an independent, agile, specialist technology recruitment company, headquartered in Edinburgh.
Like all good start-up stories, we were founded in 2009 by two industry experts who saw a better way of doing things, in what was already a crowded market. Initially from a two-man cupboard in Edinburgh to a 40 strong team in the heart of George Street, it’s been a hell of a journey.
Bootstrapped all the way (start-up speak for no outside investment or loans), we’ve succeeded due to our hard work, honesty and ability to provide a service very few can match.
We quickly established ourselves as Scotland’s premier technology recruitment company, trusted by a mix of start-ups, scale-ups and some of the world’s biggest companies to find them their most important asset – their people.
Never one to sit still, we widened our focus in 2015 to recruit into the North of England (the homeland of one of our founders) and Bangkok where we are one of the most successful technology recruiters in the country, and since 2019 we have been growing another hugely succesful team in Finland.
We immerse ourselves in the heart of the communities we recruit for and organise both ScotML and MancML, two of the UK’s biggest and best data analytics meet-ups to champion the amazing things going on in Scotland and the North West.
Follow us on Twitter: @CathcartRecruit for more on the latest job alerts, industry news and insights!
… more
Technology and Cyber Security Risk Audit Lead
Senior Risk & Compliance Consultant, Data Privacy
GRC Audit & Assurance Consultant - PriCSP Audit certified
GRC Audit & Assurance Consultant - PriCSP Audit certified
Third Party Risk Management Lead
Information Security Governance, Risk and Compliance Lead
Information Security Lead - Banking
London Area, United Kingdom (Hybrid)
How To Apply:
Incase you would like to apply to this job directly from the source, please click here
Linked-in
Google
