Risk, Governance & Compliance Recruitment
GRC spans information security management, regulatory compliance, risk frameworks, and data protection. We recruit across ISO 27001, SOC 2, DORA, NIS2, and Cyber Essentials — in regulated industries where the stakes for non-compliance are significant.
The market
The volume of regulatory frameworks applying to UK organisations has grown substantially. DORA for financial services, NIS2 for CNI operators, and the evolving ICO enforcement landscape are all creating demand for professionals who can map controls, manage audit processes, and advise boards credibly. The challenge is that good GRC professionals combine technical understanding with regulatory knowledge and communication skills — a rare combination.
Roles we recruit
- Information Security Manager
- GRC Analyst / Manager
- Cyber Risk Manager
- ISO 27001 Lead Implementer / Auditor
- CISO (SME / Mid-Market)
- Regulatory Compliance Manager
- Third-Party Risk Manager
- NIS2 / DORA Programme Lead
Experience and skills
GRC professionals often develop from audit, compliance, or legal backgrounds, building information security knowledge alongside regulatory expertise. Senior practitioners typically hold CISSP, CISM, or CRISC alongside deep knowledge of at least two or three major frameworks. The most effective communicate clearly with both technical teams and senior leadership.
- ISO 27001 Lead Implementer / Auditor
- CISSP / CISM / CRISC
- Risk Framework Experience (NIST / ISO 31000)
- DORA / NIS2 Compliance
- Audit & Control Testing
- Third-Party Risk Assessment
- Board-Level Reporting
- SOC 2 / Cyber Essentials Plus
Explore our recruitment sectors
- Power & Grid recruitment — High voltage, grid connections, substations and transmission & distribution.
- EV Charging recruitment — Charging infrastructure, network rollout and connection delivery.
- Solar PV recruitment — Solar development, design, project delivery and operations & maintenance.
- Battery Storage recruitment — BESS engineering, grid integration, commissioning and asset management.
- Infrastructure & Civil recruitment — Project delivery, design and site leadership for infrastructure programmes.
- Geotechnical recruitment — Ground investigation, geotechnical engineering and foundations.
- Industrial & Manufacturing recruitment — Engineering, operations, maintenance and technical leadership.
- Building & Facilities recruitment — Building services engineering and facilities management.
- Cyber Security recruitment — Security engineering, operations, governance and specialist leadership.
Speak with a talent partner
Call 01908 048 988 or send an enquiry.