Business Area Lead GRC

People Management

• Ensures clear role distribution within the team and delegates responsibilities to the appropriate employee.

• Coaches and supports team members in their personal development (work meetings, training, evaluations, career paths, competencies, etc.) in collaboration with the HR Business Partner.

• Establishes and maintains a skill matrix for all team members, aligned with required GRC competencies.

• Acts as hiring manager for attracting new team members (job description, screening, interviews).

• Advises leadership on the qualitative and quantitative staffing of the team within budget.

• Manages leave, sickness, and absenteeism within the team and flags concerns regarding employees’ mental health.

• Promotes and embodies the organization’s values within the team.

Cost Management

• Ensures the team operates within the given budgetary and operational context (OPEX & CAPEX).

• Prepares the team budget, submits it to leadership for validation, and monitors progress.

• Provides capacity management in line with staff and ongoing projects.

• Conducts continuous evaluation of costs versus delivered services.

• Performs administrative follow-up of costs (review and approval of timesheets, invoices, purchases).

Leadership of GRC Experts (Second Line of Defense)

• Leads a team of experts responsible for governance, risk, and compliance activities.

• Ensures team expertise is properly applied in risk analyses, ESG assessments, contract evaluations, and other strategic topics.

• Coordinates team involvement with internal and external stakeholders, including ERM and senior leadership.

• Safeguards compliance with internal standards, policies, and legal/regulatory requirements (e.g., NIS2, ISO 27001).

• Facilitates reporting and follow-up to management and regulators.

Internal Processes and Knowledge Management

• Designs, documents, and optimizes internal processes related to GRC activities, aligned with overarching organizational processes.

• Documents and monitors work instructions within the team and facilitates knowledge sharing within the team and with other Team Leads.

• Ensures internal processes are correctly applied and continuously improved.

Communication and Point of Contact

• Acts as point of contact for internal and external stakeholders regarding GRC-related topics.

• Facilitates clear communication between the GRC team, the ERM team, and other involved departments.

• Coordinates the use of external service providers, including drafting RFPs, selection procedures, and monitoring delivered services, in collaboration with Vendor Management and Service Management.

• Ensures standards and policies are applied and monitored within the team’s operations.

Scope of Responsibilities

• Coordinating daily team activities.

• Monitoring budgeting, cost control, and cost follow-up within the area of responsibility.

• Achieving team results and supporting employees in achieving individual and collective goals.

• Managing quality and setting/following up on KPIs (and OLAs) and reporting.

• Safeguarding the application of standards and policies in the execution of activities.