GRC Expert
Ref: BBBH67796_1786349475GRC Expert – SC Cleared
Whitehall Resources currently require an experienced GRC Expert to work with a key client.
**Please note this role requires active SC Clearance and Falls INSIDE IR35**
Role Description:
Maintain oversight of cyber security risks across suppliers
Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately
Govern risk acceptance and exception management processes
Support risk-based prioritisation across security disciplines
Coordinate supplier compliance activities within the SIAM framework
Validate supplier adherence to agreed security requirements
Monitor security performance against contractual obligations
Drive accountability for control weaknesses, non-compliance, and improvement actions
Maintain visibility of compliance obligations and control requirements
Support compliance against frameworks and standards such as:
ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles
Coordinate remediation of identified compliance gaps
Produce consolidated security governance reporting
Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings
Present governance information to client stakeholders and governance forums
Support strategic planning and risk-informed decision making
Drive security governance maturity improvements across the supplier landscape
Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness
Security governance practices
Support continuous improvement programmes across the cyber security operating model
Facilitate cross-supplier resolution of governance issues
All of our opportunities require that applicants are eligible to work in the specified country/location, unless otherwise stated in the job description.
Whitehall Resources are an equal opportunities employer who value a diverse and inclusive working environment. All qualified applicants will receive consideration for employment without regard to race, religion, gender identity or expression, sexual orientation, national origin, pregnancy, disability, age, veteran status, or other characteristics.
