Information Security and AI GRC Manager

Thursday 19/11/2026

Genuit Group plc is a UK-listed manufacturer of sustainable water, climate and ground management solutions, operating across multiple sites and brands.

Genuit Group is recruiting an Information Security and AI GRC Manager to develop and continually improve the Group's information security governance, risk and compliance (GRC) programme. Reporting to the Group Head of Information and Cyber Security, you will lead the development and continuous improvement of Genuit Group's information security governance, risk and compliance (GRC) programme. This includes information security assurance, risk management, business continuity, supplier assurance and AI governance.

You will assess and strengthen the Group's security controls, provide independent assurance to Executive leadership and the Board, and support the Board's declaration on material controls under Provision 29 of the UK Corporate Governance Code. Business and technology owners remain accountable for their controls and risks; your role is to provide the framework, challenge and assurance that supports them

• ISO/IEC 27001 – information security management system (ISMS).
• ISO/IEC 42001 – AI management system.
• ISO 22301 – business continuity management system.
• CIS Critical Security Controls v8.1.
• Cyber Essentials and Cyber Essentials Plus.
• Provision 29 of the UK Corporate Governance Code 2024 – Board declaration on the effectiveness of material controls.

• Lead and maintain the Group's information security management approach in line with ISO/IEC 27001.
• Assess security maturity against recognised standards and frameworks and drive improvement plans.
• Provide evidence-based assurance over material information security and technology controls.
• Plan and coordinate control testing, audits and certification activities.
• Maintain information security risk registers and compliance obligations.
• Develop and manage information security and AI policies, standards and procedures.
• Support business continuity and resilience activities in line with ISO 22301.
• Coordinate supplier and third-party security assurance.
• Establish and maintain AI governance in line with ISO/IEC 42001.
• Produce clear assurance reporting for Executive and Board audiences

• ISACA CISA certification.
• Current ISO/IEC 27001 Lead Auditor and Lead Implementer certifications.
• Experience implementing and managing ISO/IEC 27001 within a manufacturing environment.
• Experience achieving ISO 27001 and Cyber Essentials/Cyber Essentials Plus certification.
• Strong knowledge of information security governance, risk management and control assurance.
• Working knowledge of ISO/IEC 42001, ISO 22301, CIS Critical Security Controls, UK GDPR and EU GDPR.
• Experience managing audits, control testing and remediation activities.
• Excellent policy-writing and stakeholder management skills, with the ability to communicate complex technical issues to senior stakeholders and Board audiences.
• Professional work experience in both the UK and EU..

• ISO/IEC 42001 or ISO 22301 Lead Auditor/Implementer certification.
• ISACA CISM or CRISC, or ISC2 CISSP.
• AI governance qualifications such as IAPP AIGP or ISACA AI certifications.
• Knowledge of ISO 27701, NIST frameworks, EU AI Act, NIS2 or IEC 62443.
• Experience with in a UK-listed, multi-site or multi-brand organisation.
• Experience using GRC platforms and managing supplier assurance programmes.

• Ownership of the Group's information security and AI GRC programme, including shaping its approach to recognised security standards.
• A Group-wide remit spanning multiple sites, brands and operating environments.

• 25 days holiday entitlement
• Sav…