1 to 25 of 28 GRC Jobs in the City of London

senior stakeholders. Specialization in one or more of the following areas Identity and Access Management Data Privacy and Protection Security Architecture Operational Technology Security Governance, Risk, and Compliance Ideally,You’llAlso Have Security-related qualifications such as CISSP, CISM, CISMP, ISO27001 lead implementer or auditor, MBCI, or IAPP. Experience operating ...

SaaS security models, multi-tenant architecture, and shared responsibility frameworks. Familiarity with security questionnaire and trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta). Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Comfort with process automation ...

/SPF, DNS). Familiarity with the MITRE ATT&CK framework, ISO27001, CIS benchmarks and NCSC Cyber Essentials. Knowledge of GDPR, data protection, and governance, risk and compliance. Knowledge of NIS-R or NIST, TCP/IP networking and the OSI layer model. Around 5+ years of IT or business ...

Description Job Purpose The Engineer, Information Security GRC (Governance, Risk, and Compliance) is part of a team responsible for the global Information Security program. The role would gain exposure to the full suite of businesses and products which underpin the Parent Intercontinental Exchange (ICE) company. Information Security (IS) is charged … class cybersecurity and physical security program, and avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls. Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct ...

and exposures and develop measures to prevent future incidents. Lead CE+ accreditation and support security, risk and data protection requirements from a technical (Not GRC) perspective. Participate in and lead infrastructure lifecycle, security and technology projects. Provide 3rd Line/Major Incident support as a cybersecurity subject matter expert. Work ...

Your new company A global technology and consulting organisation is seeking an experienced Legal & Governance SME to support a high-profile transformation programme on a 3-month contract in a mostly remote capacity, with an ad hoc presence in London. Working as part of a strategic design and transformation initiative … will play a key role in assessing current legal and governance operating models, identifying improvement opportunities, and supporting the development of future-state frameworks and processes. This is an excellent opportunity to work with senior stakeholders on a business-critical programme within a complex and evolving environment. Your new role ...

join a growing technology function and play a key role in strengthening the organisations security, compliance and resilience capabilities. Reporting to the Head of GRC, you will lead assurance activities across the business, ensuring security controls, policies and processes remain effective, compliant and aligned with best practice. This … and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated. The role offers significant exposure to cloud security governance, requiring a strong understanding of AWS and Azure environments and the ability to provide guidance on cloud-related risks and controls. We are looking for a confident and ...

Duration: 12 Months Location: London (Hybrid, 5 days out of 10 a week in office) Rate: £485 per day (umbrella) Role Overview: The GRC IT Security Assistant Vice President will play a pivotal role within the Cyber Governance, Risk & Compliance/Cyber Third-Party Management function. This role is integral … managing cybersecurity, technology risk, third-party risk, cloud risk, regulatory compliance, and security governance activities across the organisation. Key Responsibilities: Third-Party Risk Management: Manage security due diligence for new and existing suppliers. Coordinate vendor security assessments and review security questionnaires. Evaluate supplier security controls and track remediation plans. Cyber ...

enterprise-scale SAP Identity & Access Management? This is an opportunity for an experienced SAP IAG IAM Consultant who enjoys solving complex security and governance challenges whilst working across modern SAP environments. You'll play a key role in designing, implementing and enhancing Identity & Access Governance solutions, ensuring secure, compliant and … efficient access management across large SAP landscapes. This is a genuinely hands-on consulting position where you'll influence security standards, improve governance processes and help organisations strengthen their SAP security posture. The Opportunity: Join a highly skilled SAP security team delivering enterprise Identity & Access Management solutions across both ...

Senior Microsoft 365 Consultant - Purview & Information Governance Remote - UK based £70,000 - £80,000 Are you an experienced Microsoft 365 Consultant with strong Microsoft Purview expertise? Can you lead client workshops, understand an organisation s information risks and turn your findings into a clear strategy and roadmap? Are you equally … working with technical teams to bring them to life? We are recruiting for a growing Microsoft-focused technology consultancy delivering complex modern workplace, security, governance and AI projects for clients in the UK and internationally. They are looking for a Senior Microsoft 365 Consultant to be the subject matter expert ...

looking for an experienced GRC Manager to join a growing Information Security function within a PE-backed international organisation undergoing significant growth and transformation. Reporting directly to the Director of Information Security, you'll take ownership of Governance, Risk and Compliance activities across the business, with an immediate focus … organisation through ISO 27001 certification. This is an opportunity to have genuine ownership. We're not looking for someone who has simply contributed to GRC within a large team; we need someone who understands how to take frameworks, controls and best practice and implement them effectively within a lean, fast ...

observability capabilities that provide meaningful visibility across systems, infrastructure and applications Developing automated control monitoring, evidence collection and continuous testing solutions that strengthen security governance Partnering with engineering, data and technology teams to embed effective security controls into products and platforms Driving improvements in security event monitoring, exposure management and … reporting that support informed decision-making Supporting the evolution of security policies, standards and technical guardrails through automation and measurable outcomes Contributing to access governance and security control assurance activities across both human and non-human identities Acting as a technical leader and trusted security advisor, helping raise standards across ...

based cyber threats. We're looking for an engineering-first security leader who still enjoys getting into the technical detail. This isn't a governance, compliance or traditional security management position. Instead, you'll work directly alongside the CTO, helping shape Product Security across the organisation whilst remaining technically credible … cloud-native product experience. Modern DevSecOps, cloud security and security automation experience. This Role Probably Isn't For You If... Your background is primarily Governance, Risk & Compliance (GRC), audit or ISO27001. You've moved away from hands-on technical work. Your experience is predominantly SOC, Detection Engineering or Vulnerability Management. ...

changing priorities, risks, and dependencies. Managing multi-disciplinary and geographically dispersed teams, both internally and through third-party suppliers and partners. Driving project governance, reporting, RAID management, and benefits realisation throughout the project lifecycle. Building strong relationships with senior stakeholders, influencing decisions and ensuring alignment on project outcomes. Managing budgets … ability to influence and engage senior leaders and executive-level audiences. Demonstrable experience managing third-party suppliers, contracts, and external delivery partners. Strong governance, risk management, compliance, and assurance experience. Experience using project planning and collaboration tools such as Jira, Confluence, Miro, Microsoft Project, Planner, and related platforms. Excellent communication ...

performance, commercially focused, and inclusive culture. Partnering closely with Wilmington Group shared services and report to the Executive Committee, ensuring effective execution, governance, risk management, and compliance across the business. What's the Best Thing About This Role You'll lead a business with a respected global brand, loyal customers … help global customers to do the right business in the right way - providing trusted data, insights, and education to navigate the Governance, Risk and Compliance (GRC) landscape. When you join us, you'll not only make a real difference for our customers, you'll also enjoy flexibility through hybrid working ...

Chief Technology & Transformation Officer, with a dotted line to the Board and Audit Committee, this is a pivotal executive leadership role responsible for security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations … customers, supporting business growth, and embedding security across the organisation. What you'll do Define and lead the Group's security strategy, policies, and governance framework Provide Board-level reporting on security posture, risks, and compliance activities Oversee security operations, including threat detection, incident response, and remediation ...

Drive value creation through effective supplier management, cost optimisation, and commercial innovation. Support major transformation initiatives through strategic procurement involvement. Ensure robust governance, risk management, and compliance across procurement activities. Mentor and support procurement team members while promoting best practice. About You Proven experience managing Technology and/or Enterprise ...

future growth across multiple regulated entities. Key responsibilities include: Redesigning and embedding the Enterprise Risk Management Framework (ERMF) Developing practical risk appetite statements, KRIs, governance and control frameworks Building operational risk, incident management and GRC capabilities Producing Board and Executive-level risk reporting Leading operational risk scenario analysis for capital … enterprise and operational risk experience within regulated financial services A proven track record of designing and embedding risk frameworks Strong experience with risk appetite, governance, controls and Board reporting Operational risk scenario analysis and capital assessment experience Excellent stakeholder management skills with the ability to influence at Executive level Experience ...

Consultant to join a major enterprise transformation programme, playing a key role in designing and delivering secure, compliant and scalable identity governance solutions across a complex SAP landscape. This is an excellent opportunity for someone who enjoys working at the intersection of SAP Security, Identity Governance and enterprise transformation, with … stakeholders. What You'll Be Doing As the SAP IAG IAM Consultant, you'll be responsible for: Designing, implementing and supporting SAP Identity Access Governance (IAG) solutions. Configuring and delivering IAG capabilities including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Role Design & Provisioning ...

Trayport is seeking a GRC Manager to lead the governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services. Lead a team, partner with Legal, Privacy, Procurement and ...

provisions. Translate technical requirements into commercial procurement strategies and supplier engagement approaches. Prepare sourcing documentation, business cases and approval packs in line with procurement governance requirements. Support supplier risk, security, privacy and compliance reviews where required. Review supplier proposals and identify opportunities to improve price, licence structure, commercial terms and … common enterprise software licensing models, including subscription, user-based, consumption-based and perpetual licensing structures. Experience working within a corporate procurement environment with defined governance and approval processes. Experience using procurement and contract management platforms such as Ariba, Coupa, Ivalua, ServiceNow or similar solutions. Software and SaaS procurement experience. Microsoft ...

Currently recruiting on behalf of an international bank, who are looking for a data governance lead to join their risk and compliance function. You will be responsible for the enhancement of the Bank's data governance framework, taking ownership for implementing and operationalising policy. You should ideally have a STEM … experience of SQL and data visualisation tools such as Power BI Ability to work closely with compliance and risk to build out appropriate governance frameworks Exposure to, and an interest in AI tooling Previous experience within a bank would be highly beneficial ...

Wilmington plc, we help global customers to do the right business in the right way - providing trusted data, insights, and education to navigate the Governance, Risk and Compliance (GRC) landscape. When you join us, you'll not only make a real difference for our customers, you'll also enjoy flexibility ...

firm, are looking for a compliance consultant to join the team at Manager Level in a permanent role. The firm are experts in providing governance, risk, and compliance solutions to the asset management, capital markets, digital assets, and payment industries across UK and Europe. The role will play … client base. Key Responsibilities: Maintain extensive knowledge and and expertise of all relevant regulations in order to offer guidance and thorough reviews of clients' governance, systems and controls, reporting arrangements, assessments of their compliance with relevant regulations, guidelines and understanding best practice. Keep abreast of advancements within the profession, legislation ...

three continents with headquarters in the UK. What is the role? The role is accountable for defining, operating and evidencing the information security governance framework. Technology and Engineering teams remain responsible for implementing and operating technical controls, subject to oversight, assurance and challenge from the Information Security function. Purpose … Role The Infosec Manager owns the company’s information security governance, risk and compliance programme, including the ISMS, client security assurance, security policy framework, incident governance, supplier security assurance, and security reporting. The role works closely with Technology, Product, Operations, Legal and senior leadership to ensure the company’s products ...