GRC Governance and Reporting Manager (Cybersecurity)

Location: Hybrid role requiring 12 office days per month, with a base in Southampton or Paddington in the UK, or Krakow in Poland; around 60% of time involves in-person collaboration.

Company

hirify.global is a home improvement retail group operating brands including B&Q, Screwfix, Brico Depot, Castorama, and Koctas, with more than 70,000 employees.

What you will do

• Define and maintain the security governance framework, decision-making structures, and executive oversight.
• Manage security governance forums and reporting for security leadership, executive committees, and the Audit Committee.
• Develop security metrics, KPIs, KRIs, dashboards, and reporting on security posture, emerging risks, remediation progress, and strategic performance.
• Analyse GRC and assurance data, identify trends and improvement opportunities, and communicate recommendations to senior stakeholders.
• Maintain the security policy and standards library and align it with regulatory requirements.
• Partner with Security, Technology, Legal, Risk, Compliance, and Internal Audit teams to coordinate assurance, remediation, strategy initiatives, risks, and dependencies.

Requirements

• Experience developing, implementing, and operating governance, risk, compliance, or assurance frameworks in a technology or cyber security environment.
• Experience producing executive, Board, and committee reporting and translating complex technical information into clear business insight.
• Ability to develop meaningful KPIs, KRIs, metrics, and dashboards using tools such as Power BI, Excel, or GRC platforms.
• Knowledge of cyber security governance, risk management, compliance, and control frameworks, including ISO 27001 and NIST CSF.
• Strong analytical capability, including interpreting data, identifying trends, and recommending improvements that reduce risk and strengthen performance.
• Ability to facilitate governance forums and influence senior stakeholders across technology, risk, audit, and business functions.
• Strong attention to detail and organisational skills.

Culture & Benefits

• Hybrid working model combining home working with office and offsite collaboration.
• Inclusive workplace that supports experimentation, new ideas, diversity, and professional growth.
• Private healthcare through AXA, pension contributions, life assurance, and a competitive bonus scheme.
• 25 days of annual leave plus bank holidays, staff discounts, and share incentive and share-save plans.