Senior Technology Governance, Risk & Compliance; GRC Specialist

Senior Technology Governance, Risk & Compliance (GRC) Specialist

Hello! Thanks for stopping by. Let us tell you about all the great reasons to join us here at Yorkshire Water:

• We offer a competitive salary, depending on experience £51,563 - £64,474 (band 4a)
• Annual incentive related bonus (£1000 maximum bonus opportunity for the performance year)
• Attractive pension scheme (up to 12% company contribution)
• Development opportunities in line with the Senior Technology GRC Specialist progression plan
• 25 days annual leave plus bank holidays – plus 2 extra wellness days!
• Life assurance cover of 4 times pensionable salary
• A great benefits package – choose from health cash plan scheme, critical illness insurance, dental insurance, life assurance flex and partner cover.
• Retail savings scheme
• Online GP service, cycle to work scheme, gym membership discounts and many more!

Location: This role will initially be based in Bradford but we’re moving our office to Leeds Valley Park in September 2026, so you’ll be based there in the future - Hybrid Working

Work type: Permanent. 37 hours per week, Monday – Friday.

We have an exciting opportunity for a Senior Technology GRC Specialist to join the Information & Cyber Security team at Yorkshire Water and be a part of helping Yorkshire Water to provide the best service to our customers. Could this be you?

Everyone has an idea of what a water company does. Here in Yorkshire, we make sure that over 5.4 million people living in the region and the millions of people who visit our region each year, can rely on our services, and have clean and safe drinking water on tap and that their wastewater is taken away. But for us, it’s so much more than this.

We look after communities, protect the environment, and plan to look after Yorkshire’s water, today, tomorrow 24/7, 365 days a year. We provide essential water and wastewater services to every corner of the Yorkshire region, and play a key role in the region’s health, wellbeing, and prosperity.

New environmental legislation, unprecedented levels of investment and changing expectations from customers means that this is an exciting time to discover opportunities within the water industry. Information & Cyber Security team are a key part of how we plan to meet the changing expectations of customers and regulators.

As our Senior Technology GRC Specialist you will

• Lead, mentor and develop Technology GRC analysts and junior team members, ensuring the team has the skills, knowledge and capabilities required to deliver effective governance, risk and compliance activities.
• Champion the value of governance, risk and compliance at management level, driving cultural change and embedding best-practice GRC principles across the organisation.
• Support the management and continual improvement of the Technology GRC and Risk Management Frameworks, ensuring alignment with regulatory requirements, industry standards and business objectives.
• Build and maintain effective relationships with senior leaders, business units, auditors, regulators, vendors and external agencies to support Technology governance, risk and compliance outcomes.
• Lead Technology compliance monitoring, controls testing and assurance activities, managing audits, findings, remediation plans, policy exemptions and ongoing compliance obligations.
• Conduct and facilitate Technology risk assessments, audits and reviews, maintaining risk registers, evaluating controls and providing proportionate recommendations to mitigate risk and strengthen resilience.
• Provide expert advice, guidance and training on Technology governance, risk and compliance matters, enabling informed decision-making and increasing organisational awareness.
• Develop, implement, maintain and assure Technology policies, standards and procedures, ensuring they remain effective, compliant and aligned with recognised frameworks and best practice.
• Support Technology incident investigations and regulatory reporting requirements, coordinating with stakeholders and data owners to ensure incidents are effectively managed and resolved in accordance with legal and company obligations.
• Manage Technology GRC reporting, metrics,…