Governance, Risk & Compliance (GRC) Manager

Salary

• Hybrid based in Stockport
• Reporting to Director of Digital Risk & Security and DPO
   

Build trust. Protect our business. Shape the future of cyber governance.

At Stagecoach, we're connecting millions of people with their communities every day. As our digital landscape continues to evolve, we're investing in the governance, risk and compliance capability that keeps our customers, colleagues, and business safe. We're looking for an experienced Governance, Risk & Compliance (GRC) Manager to join our Digital Risk & Security team and play a pivotal role in strengthening our cyber security framework, managing risk, and driving compliance across the organisation. This is an opportunity to influence security strategy at a group-wide level, working with senior stakeholders, business leaders, auditors and technology teams to ensure robust controls, policies and processes are embedded throughout the business.

What you'll be doing:

• Developing and enhancing enterprise-wide GRC frameworks and information security governance practices.
• Identifying, assessing and mitigating cyber, operational and reputational risks.
• Leading compliance programmes across key frameworks and standards including ISO 27001, Cyber Essentials Plus, GDPR, PCI DSS and NIST aligned controls.
• Managing internal and external audits and coordinating remediation activities.
• Developing, maintaining and promoting information security policies, standards and procedures.
• Conducting third-party and supplier risk assessments.
• Producing meaningful risk, compliance and security performance reporting for senior stakeholders.
• Supporting due diligence activities and providing expert advice across technology and business change initiatives.

What we're looking for:

• Significant experience working within information security, risk management, governance or audit environments.
• Strong knowledge of recognised frameworks including ISO 27001, NIST, Cyber Essentials and PCI DSS.
• Experience leading compliance assessments, audits and certification activities.
• A solid understanding of security controls, risk methodologies and vulnerability management principles.
• Excellent stakeholder management skills with the ability to influence at all levels.
• Strong communication skills and experience producing reports and presentations for leadership teams.
• Relevant professional certifications such as CISSP, CISM, CISA or CRISC (desirable).

Why Stagecoach?

This is more than a governance role. You'll have the opportunity to shape how security risk is managed across one of the UK's largest transport operators, helping deliver services that millions of customers rely on every year. You'll join a collaborative and supportive team where your expertise will genuinely influence business decisions and future strategy. 

Stagecoach is proudly an inclusive employer, striving for a culture where everyone can be themselves and where all the differences people bring are truly appreciated. We welcome applications from all, irrespective of gender, ethnicity, race, religion, beliefs, disability, neurodiversity, sexual orientation, or age.

Location: