FAQs
What is the primary responsibility of the Governance, Risk & Compliance (GRC) Manager at Sopra Steria?
The primary responsibility of the GRC Manager is to lead the development and implementation of comprehensive risk management and compliance strategies, aligning GRC initiatives with business objectives, and fostering a culture of compliance and risk-awareness across the organization.
Is this position remote-based?
Yes, this role is remote-based, allowing candidates to work from anywhere across the UK.
What qualifications or experience are required for this position?
Candidates should have a successful track record leading teams within GRC, experience with large client engagements, strong client management skills, and experience in consultancy engagements such as ISMS implementation, risk assessments, compliance audits, and strategy definition.
Are there specific certifications that would be beneficial for the GRC Manager role?
Yes, beneficial certifications include cyber/information security qualifications such as CISSP, CISM, CCSP, ISO27001 Lead Auditor, and CRISC.
What skills are emphasized for this role besides GRC experience?
The role emphasizes project management skills, leadership, the ability to influence and manage people, excellent analytical and problem-solving skills, and the capacity to communicate effectively with both technical and non-technical audiences.
What kind of career progression opportunities are available for the GRC Manager?
The role offers great career progression opportunities within the organization, allowing for growth and development in the GRC field.
Will the GRC Manager be involved in client-facing responsibilities?
Yes, the GRC Manager will play a lead role in helping clients understand their security challenges and will be involved in specifying, planning, and implementing projects to improve their security posture.
What types of projects might the GRC Manager oversee?
The GRC Manager might oversee projects related to risk assessments, compliance audits, ISMS implementation, and overall strategy definition to enhance the organization's compliance and risk management efforts.
Should I apply if I’m uncertain about meeting every requirement?
Absolutely! If you are interested in the role but are unsure if your skills and experience align perfectly with what is being sought, you are encouraged to apply as the company would love to hear from you.
What additional knowledge would be considered an asset for this position?
Knowledge in areas such as cloud security implementation, Identity and Access Management (IDAM), Operational Technology (OT), and Security Architecture Principles would be considered an asset for this role.