Information Security GRC Lead

We're looking for an experienced Information Security GRC Operations Lead to join our Information Security team on a permanent basis.

This is an opportunity to take ownership of the RAC's Information Security Governance, Risk and Compliance (GRC) function, shaping how security is embedded across the organisation and enabling us to move forward with confidence while protecting our members, colleagues and services.

A key part of the role will be leading and continuously enhancing our Human Security Risk Programme, helping to strengthen security culture across the business through phishing simulations, security awareness initiatives and behavioural risk monitoring.

You’ll also lead the design and day-to-day operation of our Information Security Management System, risk management framework, audit programme, policy governance processes, drive ISO
27001 certification activities and ensure security risks are understood, managed and reduced.

This is a highly visible role where you’ll drive continuous improvement across our governance, risk and compliance activities, ensuring the RAC has the visibility, assurance and controls needed to confidently manage security risk.

This is a hybrid role, working 2 days a week from our Bradley Stoke office and 3 days a week from home offering flexibility while being part of a dynamic and supportive team.

• Earnings That Motivate - enjoy a competitive salary plus automatic enrolment in our ‘Owning It Together’ Colleague Share Scheme - a unique opportunity to share in RAC’s future success and be rewarded for the exceptional work you deliver.
• Tools to Drive Your Future - get started with a free RAC Ultimate Complete Breakdown Service from day one, plus access to a car salary sacrifice scheme (including electric vehicle options) after 12 months, delivering serious tax savings.
• Time Off That Matters - enjoy 25 days annual leave, plus bank holidays. We also support work-life balance with paid family leave, flexible schedules, and practical resources to help navigate personal commitments.
• Financial Security & Perks
  -pension scheme with up to 6.5% matched contributions alongside life assurance cover up to 4x salary (10x optional with flex benefits), designed to support you long-term.
• Wellbeing That Works for You - our 24/7 confidential support service is available to you and household members aged 16+, offering reassurance whenever you need it.
• Extras That Make a Difference - access Orange Savings, our exclusive discount portal with deals across top retailers, holidays, tools, tech and more. After passing probation, you’ll automatically join our Colleague Share Scheme, giving you a stake in our collective success.

• Lead the design, operation and continuous improvement of the RAC's Information Security Governance, Risk and Compliance (GRC) framework.
• Own and develop the Information Security Management System (ISMS), ensuring ongoing ISO
  27001 readiness, successful audits and continual improvement.
• Design and manage the security risk management programme.
• Operate and continuously improve the human security risk programme - including phishing simulation, security awareness, and behavioural risk monitoring - translating data from platforms such as CultureAI into measurable risk reduction and executive reporting.
• Lead internal and external audits, coordinating evidence, managing findings and working with auditors, regulators and stakeholders.
• Oversee the security policy framework, ensuring policies remain relevant and effective.
• Drive the human security risk programme, including security awareness, phishing simulations and…