Governance, Risk & Compliance Specialist

About the role

The Governance, Risk & Compliance Specialist will lead the development, maintenance and continuous improvement of Inspired Testing’s GRC framework. Reporting to the COO, the role ensures regulatory, contractual and certification compliance while embedding best‑practice governance across the organisation.

Key responsibilities

• Maintain and enhance the Information Security Management System (ISMS) and manage ISO/IEC 27001 and Cyber Essentials Plus certification programmes.
• Conduct organisational risk assessments, update the ISMS Risk Register and coordinate internal audits.
• Oversee third‑party risk assessments, supplier security reviews and ongoing assurance activities.
• Ensure compliance with POPIA, GDPR and other relevant legislation.
• Coordinate Business Continuity and Disaster Recovery governance, including testing, review and reporting.
• Maintain information security policies, standards and governance documentation.
• Lead security awareness, incident governance and the tracking of corrective and preventative actions.
• Support client security questionnaires, due‑diligence exercises and the Responsible AI Governance Framework.

Required profile

• Proven experience in governance, risk and compliance within a regulated environment.
• Strong knowledge of ISO/IEC 27001, Cyber Essentials Plus and privacy regulations (POPIA, GDPR).
• Ability to work cross‑functionally with executive leadership, technology, finance and HR.
• Excellent analytical and coordination skills for audits, risk assessments and continuity planning.

Required skills

• ISO/IEC 27001 certification management
• Cyber Essentials Plus compliance
• POPIA and GDPR compliance
• Business Continuity and Disaster Recovery governance
• Risk assessment and internal audit coordination
• Supplier security review processes
• Responsible AI governance