Interim Group Security GRC Manager

Join Helprise – one of the fastest growing outsourcing and consultancy firms providing the best talent, know-how and solutions for the execution of business processes. Be part of building an ecosystem that gives unique value to our customers, partners, candidates and employees. We are your career advocates – offering extraordinary opportunities to grow with us, by supporting top global brands in their development of business and technology services internationally.

We are seeking an  Interim Group Security GRC Manager  to lead the development and implementation of an  ISO27001-based Information Security Management System (ISMS)  for the group. This role is critical in aligning  security governance  with  EU financial services regulatory requirements , including  DORA (Digital Operational Resilience Act) , ensuring compliance across multiple legal entities in three EU countries. The successful candidate will establish a  compliance monitoring and measurement framework , collaborate with security and IT teams, and support governance functions until a permanent hire is in place.

This interim role presents an opportunity to  shape and enhance security governance  within a complex, multi-entity EU financial services environment, ensuring compliance with  DORA and ISO27001  while establishing a  strong security risk management foundation .

Requirements

YOU WILL

• Design, implement, and  operationalize an ISO27001-based ISMS  for the group.
• Ensure  alignment with DORA regulations  and national security compliance requirements across multiple  EU jurisdictions .
• Develop and embed a  compliance monitoring and measurement framework , including  KPIs, KRIs, and SLA alignment  between group and local entities.
• Collaborate with  first line of defence  security and IT teams to build  operational security processes and technologies .
• Report on the  effectiveness of ISMS controls and compliance  directly to the  CISO .
• Work closely with  risk management, business continuity, and data protection teams  as part of the  second line of defence .
• Lead  security governance forums  and ensure  proper security risk reporting mechanisms  are in place.

YOU NEED

Benefits