Head of Governance, Risk and Compliance (Cybersecurity)

TL;DR

Head of Governance, Risk and Compliance (Cybersecurity): Designing and leading a modern, engineering-led GRC function for a media and entertainment company with an accent on risk frameworks, automation, and policy-as-code. Focus on reducing bureaucracy, integrating security controls into engineering workflows, and utilizing AI to optimize compliance outcomes.

Location: Holborn, London

Company

hirify.global is a leading media and entertainment company focused on digital platforms and creative content.

What you will do

• Define the cyber GRC vision, principles, and multi-year roadmap.
• Develop outcome-focused frameworks for security and enterprise risk management, control design, and assurance.
• Lead the transition towards policy-as-code, automated control testing, and workflow-driven assurance.
• Partner with Technology, Product, Legal, and Procurement teams to embed GRC into daily operations.
• Drive security culture and behavioral change activities across the organization.
• Provide concise risk and compliance reporting and insights for senior leaders and boards.

Requirements

• Experience setting GRC strategy and operating models in technology-led organizations.
• Strong background in security governance, risk, and compliance.
• Pragmatic approach to risk leadership, prioritizing outcomes over checkbox-driven compliance.
• Ability to build credibility and collaborate with engineers, product teams, and senior executives.
• Genuine curiosity and ability to apply AI to augment GRC processes and reduce friction.
• Track record of delivering measurable improvements in fast-paced, changing environments.

Culture & Benefits

• Mandate to design and implement strategy, operating models, and tooling from the ground up.
• Commitment to practical, lightweight frameworks that avoid unnecessary bureaucracy.
• Inclusive culture that celebrates diversity and provides reasonable adjustments for all employees.
• Collaborative environment working closely with cross-functional technical and commercial teams.