Information Security and AI GRC Manager

Genuit GroupUnited Kingdom only

Apply now

Opens the original posting on Himalayas.

Apply now Source: Himalayas

Apply on the original site

Companies in this catalog do not charge applicants. Never send money to apply.

Closing Date for Application:

Thursday 19/11/2026 Genuit Group plc is a UK-listed manufacturer of sustainable water, climate and ground management solutions, operating across multiple sites and brands.

About the role

Genuit Group is recruiting an Information Security and AI GRC Manager to develop and continually improve the Group's information security governance, risk and compliance (GRC) programme. Reporting to the Group Head of Information and Cyber Security, you will lead the development and continuous improvement of Genuit Group 's information security governance, risk and compliance (GRC) programme. This includes information security assurance, risk management, business continuity, supplier assurance and AI governance.

Loading job…

Information Security and AI GRC Manager at Genuit Group · web2ua

Relevant standards and frameworks
ISO/IEC 27001 – information security management system (ISMS).
ISO/IEC 42001 – AI management system.
ISO 22301 – business continuity management system.
CIS Critical Security Controls v8.1.
Cyber Essentials and Cyber Essentials Plus.
Provision 29 of the UK Corporate Governance Code 2024 – Board declaration on the effectiveness of material controls.
Key responsibilities
Lead and maintain the Group's information security management approach in line with ISO/IEC 27001.
Assess security maturity against recognised standards and frameworks and drive improvement plans.
Provide evidence-based assurance over material information security and technology controls.
Plan and coordinate control testing, audits and certification activities.
Maintain information security risk registers and compliance obligations.
Develop and manage information security and AI policies, standards and procedures.
Support business continuity and resilience activities in line with ISO 22301.
Coordinate supplier and third-party security assurance.
Establish and maintain AI governance in line with ISO/IEC 42001.
Produce clear assurance reporting for Executive and Board audiences
Essential requirements
ISACA CISA certification.
Current ISO/IEC 27001 Lead Auditor and Lead Implementer certifications.
Experience implementing and managing ISO/IEC 27001 within a manufacturing environment.
Experience achieving ISO 27001 and Cyber Essentials/Cyber Essentials Plus certification.
Strong knowledge of information security governance, risk management and control assurance.
Working knowledge of ISO/IEC 42001, ISO 22301, CIS Critical Security Controls, UK GDPR and EU GDPR.
Experience managing audits, control testing and remediation activities.
Excellent policy-writing and stakeholder management skills, with the ability to communicate complex technical issues to senior stakeholders and Board audiences.
Professional work experience in both the UK and EU..
Desirable requirements
ISO/IEC 42001 or ISO 22301 Lead Auditor/Implementer certification.
ISACA CISM or CRISC, or ISC2 CISSP.
AI governance qualifications such as IAPP AIGP or ISACA AI certifications.
Knowledge of ISO 27701, NIST frameworks, EU AI Act, NIS2 or IEC 62443.
Experience within a UK-listed, multi-site or multi-brand organisation.
Experience using GRC platforms and managing supplier assurance programmes.

Information Security and AI GRC Manager

Apply now

Closing Date for Application:

About the role

Information Security and AI GRC Manager

Apply now

Closing Date for Application:

About the role

What we offer

Benefits

Equal Opportunities

Apply now