Head of Cyber Security Governance, Risk and Compliance

2 weeks ago


United Kingdom WeAreTechWomen Full time €90,000

Job Title: Head of Cyber Security Governance, Risk and Compliance (GRC)

Location: London, Frimley, or Preston (Other BAE sites can be considered), we offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role.

Salary: £90,000 + depending on skills and experiences plus executive benefits

What you’ll be doing:

Being the line manager of the Group Cyber Security GRC Team. This team is expected to protect BAE Systems and ensure contractual compliance through activities not limited to:

  • Setting policies, monitoring compliance, and following defined procedures to identify, assess and manage risks from external and internal threats
  • Maintaining a risk register of relevant cyber security risks
  • Proposing measures - including avoidance, mitigation, sharing and acceptance - to manage cyber security risks in alignment with the company risk appetite
  • Implementing and maintaining Cyber Security Standards and the Cyber Security Assurance Framework
  • Managing the Cyber Security Governance Framework to ensure transparency, accuracy and speed of decision making
  • Assuring the implementation, operation, and maintenance of security controls
  • Assessing the correctness of our cyber security risk assessments and risk management plans, taking account our business goals and compliance obligations
  • Reviewing compliance with legal and regulatory requirements, managing the relationships with key regulatory stakeholders including MOD Cyber Defence & Risk (CyDR)
  • Providing expert advice on governance, assurance, and risk management
  • Prioritising the closure of findings on a risk informed basis
  • Sponsoring GRC capability development, keeping current capabilities relevant, effective, efficient, and anticipating future needs
  • Providing oversight and guidance to wider technology assurance activities, ensuring alignment across Digital, Data and Cyber Security in both IT and Operational Technology domains

Your skills and experiences:

Essential:

  • Business Knowledge and Experience
  • Cyber Security Expert, understanding across a range of cyber security disciplines including GRC
  • Expert understanding of the security paradigm of both IT and OT systems
  • Legal and Regulatory experience of the requirements for handling Government classified data, Export Controls and PII

Desirable:

  • Hold a number of compliance framework related certifications (e.g., ISO or NIST)
  • Capable of achieving UK Cyber Security Council chartered status

Benefits:

You’ll receive benefits including a competitive pension scheme, enhanced annual leave allowance and a Company contributed Share Incentive Plan. You’ll also have access to additional benefits such as flexible working, an employee assistance programme, Cycle2work and employee discounts - you may also be eligible for an annual incentive.

The team:

The team has gone through a large transformation. In order to maintain stability and promote the improvement and integration of the new core processes (such as Secure by Design), leadership is now required.

As the Head of Cyber Security Governance, Risk and Compliance (GRC) you will lead Cyber Security GRC in BAE Systems (UK & International, excluding BAE Systems Inc.), advising the CISO, and other senior leaders, on all matters related to Cyber Security GRC, providing the necessary leadership and management of GRC capabilities (people, processes, tools, supporting contracts and services etc) to enable them to be effective and efficient and to provide senior leadership with the confidence that Cyber Security GRC in BAE Systems is appropriate and robust.

This role provides you will global exposure giving you the opportunity to develop and enhance your skills and knowledge.

Why BAE Systems?

This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential.

We welcome candidates from all backgrounds and particularly from sections of the community who are currently underrepresented within our industry, including women, ethnic minorities, people with disabilities and LGBTQ+ individuals. We also want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Please be aware that many roles working for BAE Systems will be subject to both security and export control restrictions. These restrictions mean that factors including your nationality, any previous nationalities you have held, and your place of birth may limit those roles you can perform for the organisation.

Closing Date: 28th June 2024

We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.

#LI-JP1

#LI-Hybrid #J-18808-Ljbffr

  • United Kingdom Lifeways Group Full time €90,000

    Head of Cyber Security and Information Governance Location: Home based with UK travel as required The Lifeway’s Group is one of the UK’s leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a transformational journey to become the Care Provider of...


  • United Kingdom Lifeways Group Full time €90,000

    Head of Cyber Security and Information Governance Location: Home based with UK travel as required The Lifeway’s Group is one of the UK’s leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a transformational journey to become the Care Provider of...


  • United Kingdom Lifeways Group Full time

    Head of Cyber Security and Information Governance Location: Home based with UK travel as required The Lifeway’s Group is one of the UK’s leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a transformational journey to become the Care Provider of Choice...


  • United Kingdom Lifeways Full time €90,000

    Head of Cyber Security and Information Governance Location: Home based with UK travel as required The Lifeway's Group is one of the UK's leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a transformational journey to become the Care Provider of...


  • United Kingdom Lifeways Full time €90,000

    Head of Cyber Security and Information Governance Location: Home based with UK travel as required The Lifeway's Group is one of the UK's leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a transformational journey to become the Care Provider of...


  • United Kingdom Lifeways Group Full time €90,000

    Head of Cyber Security and Information Governance Salary : up to £90k Location: Home based with UK travel as required Purpose of the Role The Lifeway’s Group is one of the UK’s leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a...


  • United Kingdom Lifeways Group Full time €90,000

    Head of Cyber Security and Information Governance Salary : up to £90k Location: Home based with UK travel as required Purpose of the Role The Lifeway’s Group is one of the UK’s leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a...


  • United Kingdom Lifeways Group Full time

    Head of Cyber Security and Information Governance Salary : up to £90k Location: Home based with UK travel as required Purpose of the Role The Lifeway’s Group is one of the UK’s leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a...


  • United Kingdom Lifeways Full time

    Head of Cyber Security and Information Governance Salary : up to £90k Location: Home based with UK travel as required Purpose of the Role The Lifeway's Group is one of the UK's leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a transformational...


  • United Kingdom Lifeways Full time €90,000

    Head of Cyber Security and Information Governance Salary : up to £90k Location: Home based with UK travel as required Purpose of the Role The Lifeway's Group is one of the UK's leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a...


  • United Kingdom Lifeways Full time €90,000

    Head of Cyber Security and Information Governance Salary : up to £90k Location: Home based with UK travel as required Purpose of the Role The Lifeway's Group is one of the UK's leading providers of specialist support services for people with complex needs. We are striving to be revolutionary in our sector and currently on a...


  • United Kingdom Head Resourcing Full time

    Cyber Security Consultant Up to £55,000 + benefits (including 10% bonus) Head Resourcing is looking for a Cyber Security Consultant to join one of Scotland's biggest success stories. This role will be worked on a hybrid basis in Glasgow and will be working closely with our clients third-party suppliers and internal stakeholders to ensure all...


  • United Kingdom Head Resourcing Full time

    Cyber Security Consultant Up to £55,000 + benefits (including 10% bonus) Head Resourcing is looking for a Cyber Security Consultant to join one of Scotland’s biggest success stories. This role will be worked on a hybrid basis in Glasgow and will be working closely with our clients third-party suppliers and internal stakeholders to ensure all security...


  • United Kingdom Anson McCade Full time

    Cyber Security Consultant - Remote We are looking for Cyber Security Consultants to join the team and help work with our clients’ to defend themselves against cyber-attacks. The successful Cyber Security Consultant will support and grow to lead engagements that deliver cyber risk assessments, improve control maturity, define secure solutions and ensure...


  • United Kingdom Anson McCade Full time

    Cyber Security Consultant - Remote We are looking for Cyber Security Consultants to join the team and help work with our clients’ to defend themselves against cyber-attacks. The successful Cyber Security Consultant will support and grow to lead engagements that deliver cyber risk assessments, improve control maturity, define secure solutions and ensure...


  • United Kingdom Anson McCade Full time

    Cyber Security Consultant - Remote We are looking for Cyber Security Consultants to join the team and help work with our clients’ to defend themselves against cyber-attacks. The successful Cyber Security Consultant will support and grow to lead engagements that deliver cyber risk assessments, improve control maturity, define secure solutions and ensure...


  • United Kingdom Anson McCade Full time

    Cyber Security Consultant - Remote We are looking for Cyber Security Consultants to join the team and help work with our clients’ to defend themselves against cyber-attacks. The successful Cyber Security Consultant will support and grow to lead engagements that deliver cyber risk assessments, improve control maturity, define secure solutions and ensure...

  • Cyber Security Risk

    4 weeks ago


    United Kingdom THAMES WATER UTILITIES LIMITED Full time

    In Team Digital, we're planning for a future where the technology solutions we co-create and design enable us to achieve our goal of protecting our greatest natural resource and allow our customers, communities and the environment to thrive. As a team, our vision is to create an everyday digital experience for the people we serve - our customers - by...

  • Cyber Security Risk

    4 weeks ago


    United Kingdom THAMES WATER UTILITIES LIMITED Full time

    In Team Digital, we're planning for a future where the technology solutions we co-create and design enable us to achieve our goal of protecting our greatest natural resource and allow our customers, communities and the environment to thrive. As a team, our vision is to create an everyday digital experience for the people we serve - our customers - by...

  • Cyber Security Risk

    4 weeks ago


    United Kingdom THAMES WATER UTILITIES LIMITED Full time

    In Team Digital, we're planning for a future where the technology solutions we co-create and design enable us to achieve our goal of protecting our greatest natural resource and allow our customers, communities and the environment to thrive. As a team, our vision is to create an everyday digital experience for the people we serve - our customers - by...