Information Security

Cyber GRC Lead

Primark

Reading · Berkshire · United Kingdom

Overview

In this role, you will lead Primark's Cyber GRC function, shaping strategy and driving governance, risk and compliance across a global retail operate. You will partner with technology and business leaders to embed robust risk practices and policies, ensuring security, resilience, and regulatory alignment. You’ll report insights to senior leadership and build a high-performing GRC team. This is a chance to influence risk posture at scale within a fast-paced, people-focused culture.

Pay / Benefits
  • Healthcare
  • Potential Bonus
  • 27 days of leave + bank holidays (plus 5 extra)
  • Tax Saver Tickets
  • fitness centre
  • subsidised cafeteria
Responsibilities
  • Lead and oversee the Cyber GRC function, including governance, risk, compliance, assurance and policy activities
  • Define and deliver the Cyber GRC strategy aligned to business objectives and risk priorities
  • Drive cyber risk identification, assessment and reporting across the organisation
  • Partner with technology and business stakeholders to strengthen governance and risk management practices
  • Oversee cyber policies, standards and control frameworks, ensuring ongoing effectiveness
  • Provide clear reporting and recommendations to senior leadership on cyber risks and compliance matters
  • Develop and lead a high-performing Cyber GRC team, promoting best practice and continuous improvement
Key requirements
  • Significant experience (10+ years) within cyber security focusing on governance, risk and compliance
  • Demonstrated success leading or transforming a Cyber GRC function
  • Strong understanding of cyber risk management, assurance and compliance frameworks
  • Experience engaging and influencing senior stakeholders and executive leaders
  • Ability to translate complex cyber issues into business-focused recommendations
  • Certifications such as CISSP, CISM, CRISC or CISA are highly desirable
  • Experience operating within large, complex or global organisations
  • Stakeholder engagement
  • Influencing at senior levels
  • Strategic communication
  • Cyber GRC frameworks
  • Risk management and assurance
  • Regulatory and compliance knowledge

Reference: WJ-747_31184519

Apply now

More jobs

This role is listed on GigBlows for discovery and search. Hiring decisions and applications are handled by the employer or their chosen application system.