Cyber GRC Lead

About Primark

Primark is a global retail organisation dedicated to putting people first. With over 80,000 employees and more than 500 stores worldwide, Primark values the positive impact its workforce makes and fosters an inclusive, supportive culture encouraging personal growth and innovation.

Role Overview

The Cyber GRC Lead will take ownership of cyber governance, risk, and compliance at a global scale. This leadership role involves developing and executing cyber strategies aligned with business objectives, managing cyber risk, and ensuring compliance across the organisation. Working directly with senior leadership and cross-functional teams, the successful candidate will guide the evolution of the Cyber GRC function and promote best practices in cyber risk management.

Key Responsibilities

• Lead and manage the Cyber Governance, Risk, and Compliance function, encompassing governance, risk identification, assurance, compliance activities, and policy oversight.
• Create and implement a Cyber GRC strategy aligned with company goals and risk priorities.
• Coordinate cyber risk identification, assessments, and reporting on an organisational level.
• Collaborate with technology and business units to strengthen governance frameworks and risk management practices.
• Manage cyber policies, standards, and control frameworks, ensuring their effectiveness and continuous improvement.
• Provide clear, actionable reports and recommendations on cyber risks and compliance to senior leadership.
• Build and lead a high-performing Cyber GRC team focused on delivering excellence and ongoing innovation.

Candidate Profile and Requirements

• A minimum of 10 years' experience in cybersecurity, emphasizing governance, risk, and compliance disciplines.
• Proven success in leading or restructuring Cyber GRC teams or functions.
• In-depth knowledge of cyber risk management frameworks, assurance processes, and regulatory compliance standards.
• Experience engaging and influencing senior executives and stakeholders effectively.
• The ability to communicate complex cybersecurity challenges into clear business recommendations.
• Professional certifications such as CISSP, CISM, CRISC, or CISA are highly advantageous.
• Experience working within complex, large-scale, or multinational organisations.

Benefits and Culture

Primark prioritises employee wellbeing and growth by offering a comprehensive benefits package including healthcare, potential bonuses, 27 days annual leave plus bank holidays with an option to purchase additional leave. Employees also have access to Tax Saver Tickets, fitness facilities, and subsidised cafeteria services. The company supports diversity and inclusion with accommodations available throughout the recruitment process.

Additional Information

All employment offers are contingent on satisfactory background checks such as right to work verification, references, education confirmation, and depending on the role, criminal and financial background checks.