Head of Cyber Security Governance and Compliance

- Define and maintain the cyber security governance framework, policies, and standards. - Lead the liaison with divisional GRC roles, supporting the development and maintenance of the GRC operating model and framework. - Ensure alignment with the Cyber Standard and global regulatory requirements (e.g., NIS2, GDPR). - Provide direction on cyber security tooling relating to governance and assurance objectives. - Collaborate with the Technical Assurance team to define and implement metrics and reporting standards for divisions. - Chair governance forums and provide regular reporting to senior leadership and audit committees. - Plan, coordinate, and facilitate Security Working Group (SWG) meetings. - Assist in the preparation of board papers and materials for annual reporting and Group level risk management. - Develop and implement enterprise-wide cyber risk management processes. - Lead risk quantification initiatives and develop metrics to measure and communicate risk reduction. - Provide assurance that cyber risks are identified, assessed, and mitigated across all divisions. - Maintain and update risk registers, ensuring Group risks are accurately captured, assessed, and managed. - Conduct and oversee risk assessments at Group level in support of all divisions and business units. - Track and manage deviations from policy, including documentation and approval of exceptions. - Conduct horizon scanning for regulatory changes and emerging cyber security requirements. - Build and lead the non-automated second line assurance capability to monitor compliance with the Groups cyber standard. - Oversee readiness for internal audits and external regulatory reviews, liaising with audit bodies to support audit activities. - Report monthly on GRC and assurance activities to senior management and divisional stakeholders. - Develop the strategy for third-party cyber security and manage cyber security third-party risk and assurance. - Lead the Group Cyber Security GRC function and provide strategic direction on GRC initiatives. - Act as a trusted advisor to the CISO and senior stakeholders on governance and compliance matters. - Collaborate with divisional GRC functions, legal, finance, and operational teams for integrated risk management. - Build and maintain trusted relationships with senior stakeholders, ensuring positive engagement and communication.