{"id":3875344,"url":"https://alion.io/job/risk-ledger-grc-lead","title":"GRC Lead","company":{"id":51583,"name":"Risk Ledger","domain":"riskledger.com","url":"https://alion.io/company/risk-ledger","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"EU AI Act","optional":true},{"name":"GDPR","optional":true},{"name":"ISO 42001","optional":true}],"status":"live","first_seen_at":"2026-11-06T12:33:02Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T14:32:41Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About us\nRisk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain.\nOrganisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like British Airways, BAE Systems and the NHS.\nWe are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission.\nEvery one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first.\nThe team\nYou'll join the Security & IT team, led by the Director of Information Security and IT Operations, which owns information security, IT operations and GRC across Risk Ledger in the UK and US.\nRisk Ledger helps security and risk teams manage third-party and supply chain risk, so our customers hold us to the same standard they hold their own suppliers to. Our own assurance is part of the product promise: we are ISO 27001 certified, hold Cyber Essentials Plus and have achieved SOC 2 Type 1.\nThe team works closely with Engineering, Product, Sales, Customer Success, People and Finance, making security and compliance something that helps the business win and keep customers rather than slowing it down.\nThis role\nAs GRC Lead you'll own Risk Ledger's governance, risk and compliance work day to day: our certifications, our enterprise risk management, our policies, and the assurance we give customers.\nThis is a hands-on role for someone who likes to do the work, not delegate it. There's no team to inherit. You'll be the person who keeps ISO 27001 running, takes us from SOC 2 Type 1 to Type 2, and owns the risk framework the leadership team relies on.\nIt's a highly collaborative role: expect to spend around half your time working with people across the business, from engineers to Sales to leadership. You'll often be given a problem rather than a plan, so you'll be comfortable turning loose direction into something that works. \nBecause GRC is what our customers do, you'll also get to feed your expertise into our product.\nIn this role you will,\nRun our certifications. Maintain our ISO 27001 ISMS year round and lead our external audits. Take us from SOC 2 Type 1 to Type 2 by building and maintaining the evidence, then keep SOC 2 running.\nOwn enterprise risk management. Own our enterprise risk management framework and risk register, run risk reviews with owners, and give the leadership team clear reporting on our risk posture.\nLead our compliance tooling. Manage our automated security and compliance software platform implementation, then help us move to an in-house solution within the year, so evidence collection is continuous rather than a scramble before each audit.\nSupport customer assurance. Help Sales and Customer Success answer security questionnaires and due diligence, so security reviews speed deals up rather than slowing them down.\nKeep policies current. Keep our policies up to date, owned and followed, and support our own supplier risk programme using the Risk Ledger platform.Bring people with you. Work with control owners across the business, explaining why controls matter and getting things done through influence rather than authority.\n\nYou'll have\nAt least 3 years' hands-on GRC experience.\nHands-on experience maintaining an ISO 27001 certification and working on SOC 2 audits from the organisation's side. Both are essential.\nExperience in a startup or scale-up, ideally in B2B SaaS, fintech or security.\nHands-on experience of risk management, and turning risk data into clear reporting for senior leaders.\nA pragmatic, risk-based approach: you favour real security outcomes over box-ticking and can explain why a control matters.\nA self-starter mindset: you take ownership, work well with loose direction and move at pace.\nStrong communication and people skills, adapting to audiences from engineers to auditors to leadership.\nAI and automation experience\nNice to have\nExperience with Cyber Essentials or Cyber Essentials Plus.\nExperience with ISO 42001, the EU AI Act or other AI governance frameworks.\nExperience with GRC automation platforms, or building compliance tooling in house.\nWorking knowledge of UK GDPR and awareness of US privacy and security expectations.\nExperience supporting sales through customer security reviews and questionnaires.\nExperience with third-party or supply chain risk management, or a strong interest in the problem we solve.\nRelevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CISM, CRISC or CISSP.\nWhy join us\nWork on GRC at a company whose customers are GRC and security teams, and help shape the product they use.\nReal ownership from day one, with room to grow into leadership as the company scales.\nA differentiated vision and a unique community-based approach to supply chain risk.\nHybrid working from our new London office near Old Street.\nSalary range\n£70,000—£80,000 GBP","description_format":"text","description_chars":5263,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Compliance","Supply Chain"],"lifecycle":[{"event":"open","at":"2026-11-06T16:06:26Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":76,"reasons":["conf:3","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/risk-ledger-grc-lead","json_url":"https://alion.io/job/risk-ledger-grc-lead.json","meta":{"generated_at":"2026-11-08T16:17:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34427,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51583},"rest":"https://alion.io/mcp/rest/get_company?id=51583"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frisk-ledger-grc-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frisk-ledger-grc-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frisk-ledger-grc-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/risk-ledger-grc-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frisk-ledger-grc-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3875344}},{"tool":"search_jobs","arguments":{"company":"riskledger.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3875344},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}