Information Security and AI GRC Manager

Closing Date for Application:

Genuit Group plc is a UK-listed manufacturer of sustainable water, climate and ground management solutions, operating across multiple sites and brands.

About the role

Genuit Group is recruiting an Information Security and AI GRC Manager to develop and continually improve the Group's information security governance, risk and compliance (GRC) programme. Reporting to the Group Head of Information and Cyber Security, you will lead the development and continuous improvement of Genuit Group's information security governance, risk and compliance (GRC) programme. This includes information security assurance, risk management, business continuity, supplier assurance and AI governance.

You will assess and strengthen the Group's security controls, provide independent assurance to Executive leadership and the Board, and support the Board's declaration on material controls under Provision 29 of the UK Corporate Governance Code. Business and technology owners remain accountable for their controls and risks; your role is to provide the framework, challenge and assurance that supports them

Relevant standards and frameworks

• ISO/IEC 27001 – information security management system (ISMS).
• ISO/IEC 42001 – AI management system.
• ISO 22301 – business continuity management system.
• CIS Critical Security Controls v8.1.
• Cyber Essentials and Cyber Essentials Plus.
• Provision 29 of the UK Corporate Governance Code 2024 – Board declaration on the effectiveness of material controls.

Key responsibilities

• Lead and maintain the Group's information security management approach in line with ISO/IEC 27001.
• Assess security maturity against recognised standards and frameworks and drive improvement plans.
• Provide evidence-based assurance over material information security and technology controls.
• Plan and coordinate control testing, audits and certification activities.
• Maintain information security risk registers and compliance obligations.
• Develop and manage information security and AI policies, standards and procedures.
• Support business continuity and resilience activities in line with ISO 22301.
• Coordinate supplier and third-party security assurance.
• Establish and maintain AI governance in line with ISO/IEC 42001.
• Produce clear assurance reporting for Executive and Board audiences

Essential requirements

• ISACA CISA certification.
• Current ISO/IEC 27001 Lead Auditor and Lead Implementer certifications.
• Experience implementing and managing ISO/IEC 27001 within a manufacturing environment.
• Experience achieving ISO 27001 and Cyber Essentials/Cyber Essentials Plus certification.
• Strong knowledge of information security governance, risk management and control assurance.
• Working knowledge of ISO/IEC 42001, ISO 22301, CIS Critical Security Controls, UK GDPR and EU GDPR.
• Experience managing audits, control testing and remediation activities.
• Excellent policy-writing and stakeholder management skills, with the ability to communicate complex technical issues to senior stakeholders and Board audiences.
• Professional work experience in both the UK and EU..

Desirable requirements

• ISO/IEC 42001 or ISO 22301 Lead Auditor/Implementer certification.
• ISACA CISM or CRISC, or ISC2 CISSP.
• AI governance qualifications such as IAPP AIGP or ISACA AI certifications.
• Knowledge of ISO 27701, NIST frameworks, EU AI Act, NIS2 or IEC 62443.
• Experience within a UK-listed, multi-site or multi-brand organisation.
• Experience using GRC platforms and managing supplier assurance programmes.

What we offer

• Ownership of the Group's information security and AI GRC programme, including shaping its approach to recognised security standards.
• A Group-wide remit spanning multiple sites, brands and operating environments.

Benefits

• 25 days holiday entitlement
• Save as you earn Sharesave Scheme
• Cycle to work scheme
• Contributory pension scheme - matched up to 8%
• Life assurance
• Free flu vouchers
• Various health & wellbeing initiatives including complimentary occupational health on-site physiotherapy and counselling services
• Staff discount on all Genuit Group products

Equal Opportunities

Genuit Group is committed to equality, diversity and inclusion and welcomes applications from all suitably qualified candidates. Reasonable adjustments are available throughout the recruitment process.

Here at the Genuit Group we recognise and develop the contribution our people make to the Group’s success and are committed to attracting talent from the widest pool. We have a role to play in making the built environment more sustainable, building a low carbon business ourselves as well as delivering sustainable solutions at scale.