Information Security Business Change Partner (GRC) – Contractor

We are supporting a global organisation in hiring an Information Security Business Change Partner (GRC) to act as the security lead across a portfolio of projects, ensuring secure delivery across both transformation initiatives and BAU change.

This is a high-visibility role, working closely with senior stakeholders and project teams to embed security into delivery from day one.

• Act as the single point of contact for information security across assigned projects
• Ensure all projects align with internal security policies, standards, and governance frameworks
• Oversee security across the full lifecycle:
• Engagement & planning
• Requirements definition
• Build & implementation
• Security assurance
• Delivery & transition
• Conduct and manage risk assessments, including ongoing and residual risks
• Produce clear, concise reports for senior leadership
• Work closely with project teams to ensure secure and compliant delivery

• Proven experience in a GRC / Information Security Business Partner / Security Change role
• Strong understanding of security governance, risk, and compliance frameworks
• Experience embedding security within project delivery / transformation environments
• Ability to engage effectively with technical and non-technical stakeholders
• Strong reporting and communication skills

• Operate as a trusted security advisor across critical programmes
• High level of autonomy and stakeholder exposure
• Opportunity to influence how security is embedded into change delivery