Unit Head Information Security GRC

About the role

We are seeking a senior leader to head our Information Security Governance, Risk and Compliance (GRC) unit. The role will oversee end‑to‑end risk management, policy implementation, regulatory compliance, audit coordination and security project delivery.

Key responsibilities

• Lead the full Information Security Risk Management lifecycle: identification, assessment, prioritisation, mitigation, remediation and reporting.
• Maintain and regularly update the Information Security Risk and Control Registers and ensure alignment with the Risk and Control Library.
• Implement and monitor Information Security frameworks, policies, procedures, standards and baselines; conduct periodic compliance reviews.
• Perform regulatory compliance assessments, map requirements to risks and controls, and produce compliance documentation for audits.
• Coordinate internal and external security audits, track observations and ensure timely remediation.
• Manage security projects as the PMO function, maintaining documentation, vendor KPIs, SLAs and contracts.
• Participate in change reviews, user acceptance testing and control assessments to embed security requirements.
• Collaborate with cross‑functional teams to identify, track and remediate security, risk and compliance gaps, providing regular reporting to senior leadership.

Required profile

• Extensive experience in information security risk management and GRC processes.
• Strong knowledge of security governance, policy development and regulatory compliance.
• Proven track record in audit management and driving remediation actions.
• Project management expertise, including vendor management and SLA monitoring.
• Excellent stakeholder coordination and reporting skills.

Required skills

• Information Security risk management
• Security frameworks, policies and standards implementation
• Regulatory compliance assessment
• Audit coordination and issue remediation
• Project and vendor management