Lead Security Engineering GRC Manager
Tesco Insurance and Money Services
18 hours ago
Full-time
On-site
Surrey, 02
£76,400 - £76,400 GBP yearly
JobsCloseBy Editorial Insights
Tesco Insurance and Money Services is seeking a Lead Security Engineering GRC Manager to define and drive the GRC strategy, moving governance from manual assurance to automated controls across cloud platforms and CI/CD pipelines. You will own the roadmap, translate policies into automatable controls, design evidence collection and dashboards, and act as an adviser to engineering teams while collaborating with risk and audit. Strong information security, GRC, control testing and automation experience required, with skills in APIs, JSON, scripting and cloud basics. This hybrid role is based in Reigate with 1-3 office days weekly; salary from £76,400 plus bonus, closing 6 August 5pm. Apply and share governance automation wins.
General information
Job Title
Lead Security Engineering GRC Manager
Ref #
9596
Location
Reigate -The Omnibus Building, Lesbourne Road, Reigate, Surrey, RH2 7LD
Department
IMS - Information Technology
Business Area
Engineering
Working time
Full-Time
Date Published
23-07-2026
Serving our customers, communities, and planet a little better every day.
Salary – From £76,400 + annual bonus & benefits
Work Level - WL2
Location – Edinburgh, Reigate, Glasgow, Newcastle. Permanent.
Office Attendance - Our roles are hybrid; however, you should be able to travel to our office 1-3 days per week for this position.
Closing Date - Applications close on 6th August at 5pm
We’re looking for a Lead Security Engineering (GRC) Manager to join our Insurance, Money and Services team.
This is a senior security leadership role that will define and operate the IMS GRC engineering strategy, moving governance, risk and compliance from manual, point-in-time assurance towards engineering-led, automated and continuous assurance. You’ll lead across control engineering, compliance automation, security assurance and regulatory readiness, ensuring security requirements are embedded into platforms, products and services by design.
You’ll work closely with the CISO, senior technology leaders, engineering teams, risk, audit and suppliers to shape how IMS demonstrates security control effectiveness at scale. The role is pivotal in building a modern GRC engineering capability, introducing compliance-as-code, automated evidence collection, continuous controls monitoring and intelligent risk analytics across a complex regulated environment.
What you’ll be doing
• Own and evolve the IMS GRC engineering strategy and roadmap, including continuous controls monitoring, compliance automation, risk intelligence and assurance transformation.
• Translate security policies, standards and regulatory requirements into practical, technical and automatable controls across cloud platforms, CI/CD pipelines, engineering workflows and service operating models.
• Design and maintain automated control validation, evidence collection, compliance metrics and dashboards to provide real-time visibility of security posture and control effectiveness.
• Configure, extend and integrate GRC and assurance tooling with cloud, security, engineering and business platforms using APIs, JSON, scripting and automation workflows.
• Act as a trusted security advisor to engineering and platform teams, promoting secure-by-design, shift-left and reusable control patterns that reduce friction while maintaining strong assurance.
• Support audit, regulatory, supplier and incident response activity where control operation, evidence, ownership or compliance posture is impacted, and lead/develop GRC engineering capability as demand grows.
We need you to have (minimum experience)
• Strong experience in information security, GRC engineering, security assurance or compliance roles in regulated or complex environments.
• Proven ability to translate compliance, risk and regulatory requirements into technical, operational and automatable controls.
• Hands-on experience with security control frameworks, risk management, ISMS operation, audit support, control testing, GRC platforms and automated evidence collection.
• Technical proficiency in automation, APIs, JSON and at least one scripting or programming language, with a solid understanding of cloud, CI/CD, identity, infrastructure and application security fundamentals.
And if you have any of these, even better
• Experience designing continuous compliance or compliance-as-code solutions in AWS, Azure or hybrid environments.
• Experience leading, coaching and developing security, assurance or GRC engineering professionals.
• Familiarity with AI-assisted tooling and intelligent risk analytics to improve assurance, documentation and engineering efficiency.
• Professional certifications such as CISSP, ISO 27001 Lead Implementer/Lead Auditor, AWS/Azure certifications, cloud security specialisations, Infrastructure-as-Code or CI/CD tooling certifications.
We don’t expect you to tick every box, and if you feel you hit most of the brief, it’s worth exploring to further develop your career here with us.
What’s in it for you
• Prepare for your retirement with our colleague pension scheme.
• Virtual GP Service for you and your family 365 days a year.
• Performance related annual bonus.
• Indulge in a generous holiday allowance with a minimum of 7.2 weeks, with the opportunity to buy more.
• Embrace the benefits of our Colleague Clubcard, enjoy a 10% discount that increase to 15% every payday. As an added perk, we’ll give you a second card to share with someone else.
• Benefit from our family-oriented initiatives, encompassing enhanced maternity leave pay, a shared parental leave policy, and a generous 8-week paid paternity leave.
• A place to get on - take advantage of our ongoing learning opportunities and award-winning training, to help you achieve the job and career you want.
• Take part in our Buy as you Earn and Save as your Earn share schemes.
Everyone’s welcome
We want all our colleagues to always feel welcome and be themselves. We’re committed to building a more inclusive workplace and celebrating everything that makes colleagues unique, and value the richness and diversity this brings to our business. A more diverse business helps us deliver on our purpose to serve our customers, communities, and planet a little better every day.
Interviews
We know the importance of balancing work with life’s other commitments. Please talk to us at interview about the flexibility you need, as we’re committed to exploring part time and flexible working opportunities, at every level of the organisation.
Interviews are expected to be held shortly after closing date.
Why Tesco Insurance and Money Services?
Seeing your impact all around you: there's no better feeling.
Everything we do is about making things better. Not just for others, but for you too. It's why you'll get bags of choice and plenty of development. It's why you'll always be heard and find balance that works for you. It's why you'll feel totally at home in a place where everyone's welcome.
Lucky for us, we get to feel it all the time. Because whatever our role, we're helping our colleagues and serving our customers, communities and planet a little better every day.
We deal in the personal – from pet insurance for your best friend, and home insurance for peace of mind, to motor insurance for your dream car or travel money for that trip you’ve worked hard for.
We deal in the personal – from pet insurance for your best friend, and home insurance for peace of mind, to motor insurance for your dream car or travel money for that trip you’ve worked hard for.
Everything we do is about making things better. Not just for others, but for you too. It's why you'll get bags of choice and plenty of development. It's why you'll always be heard and find balance that works for you. It's why you'll feel totally at home in a place where everyone's welcome.
So, if you want a career where you can do good and feel good, you've found it.
Let's make everyday a little better.
Let's make everyday a little better.
Our story
Making Insurance and Money Services more rewarding and offering great value and choice - because we know little wins can make a big difference.
Delivering great customer service means having great people behind the scenes – people who understand our customers and are driven by doing the right thing for them. We offer colleagues a place where they can feel totally at home in a place where everyone's welcome, where they can be part of a great team focused on making a real difference for our customers.
We began life in 1997 and now help more than 2 million customers protect what matters to them.
We want to deliver a helpful service in everything we do and to make life easier for our customers. Our policies are really easy to manage online for our customers, but we know that being able to speak to our customer service staff when you need to is really important. This is why our customer service centres are open seven days a week.
We want to deliver a helpful service in everything we do and to make life easier for our customers. Our policies are really easy to manage online for our customers, but we know that being able to speak to our customer service staff when you need to is really important. This is why our customer service centres are open seven days a week.
Delivering great customer service means having great people behind the scenes – people who understand our customers and are driven by doing the right thing for them. We offer colleagues a place where they can feel totally at home in a place where everyone's welcome, where they can be part of a great team focused on making a real difference for our customers.
How to apply
We value our people and diverse teams and believe the variety of backgrounds and experiences make us stronger to achieve our goals.
Our colleagues are working hybrid, taking time to meet with colleagues in our offices for moments that matter, such as team catch ups, planning meetings and more. If you’re interested in finding out more about what a career at Tesco Insurance and Money Services looks like, click apply to find out more!