176 to 200 of 286 GRC Jobs in London

risk processes. Maintaining the integrity, accuracy and usability of risk data across the organisation. Acting as custodian of the Bank's risk taxonomy and governance structures within Resolver. Supporting monthly risk reporting, risk appetite monitoring and key risk indicator reporting. Analysing risk events, trends and data to identify insights and … someone who combines strong analytical capability with a genuine interest in technology and innovation. You’ll ideally bring: Experience working with Resolver or another GRC platform. Experience within banking, financial services or another regulated environment. A strong understanding of risk management frameworks and operational risk principles. Experience analysing and interpreting ...

delivery and providing additional services to organisations we work with. This role provides an excellent opportunity to gain exposure to Information Security, Supplier Assurance, Governance and Risk Management whilst building valuable operational, stakeholder management and process improvement experience. In this role you’ll: Support Third Party Risk Management operations, including … Experience in a large, complex organisation. Strong stakeholder management skills. Experience managing workflows and operational processes. Strong Microsoft Office skills. Knowledge of Information Security, Governance, Risk or Compliance advantageous. At BDO, we’ll help you achieve your personal goals and career ambitions, and we have programmes, resources, and frameworks that ...

complex client environments. This AI Delivery Lead role is ideal for someone with strong experience leading AI programmes from strategy through to implementation, adoption, governance, and value realisation. The successful candidate will work closely with executive stakeholders, technology teams, vendors, and business leaders to shape AI roadmaps and deliver scalable … responsible for leading the full AI delivery lifecycle across enterprise transformation programmes. This includes defining AI strategy, identifying high-value use cases, designing governance frameworks, overseeing implementation, and ensuring successful business adoption. The role will suit someone who can combine strategic AI leadership with practical delivery experience across GenAI, LLMs ...

definition, and success metrics Maintain an enterprise-wide perspective to optimize efficiency, effectiveness, and productivity Perform risk analysis and maintain risk assessments aligned to governance frameworks and controls Track product KPIs (adoption, satisfaction, performance) and conduct post-launch audits to drive continuous improvement Monitor financial performance (capital, expenses, rate cards … and ensure alignment across regions Maintain product inventory, documentation, and governance artifacts with audit-ready accuracy Provide RFP support and expert consulting across business and technology stakeholders Operate cross-functionally with business, technology, risk, and compliance partners Ensure adherence to enterprise governance, regulatory standards, and AI control frameworks Develop and ...

DATA is seeking a GRC Consultant (Cyber Assurance/Security Operations Manager) to ensure security controls are in place and operating effectively across … lifecycle. You will design, test and evaluate information security, aligning risks to business acceptance and enabling secure operations. Role requires delivering security governance, risk management and compliance programs, coordinating with 1st-3rd line of defence, and driving improvements for regulatory and policy adherence. #J-18808-Ljbffr ...

reporting to support informed decision-making; Support the evolution of security policies, standards and technical guardrails through automation and measurable outcomes; Contribute to access governance and security control assurance across human and non-human identities; Act as a technical leader and trusted security advisor, helping raise standards across the wider … technology organisation. Требования: Strong background in security engineering, information security, governance, risk or compliance; Experience building security controls and automated security solutions in modern cloud environments; Knowledge of SIEM, vulnerability management, data protection, endpoint security or exposure management platforms; Experience with APIs, automation, scripting and infrastructure-as-code technologies; Familiarity ...

engagement. Configure & integrate: Design and build workflow automation, intake forms, approval routing, risk scoring models, reporting, and integration patterns (APIs, SSO/SAML, ERPs, GRC tools, procurement systems), driving to a high-quality, on-time go-live. Advise clients: Lead discovery workshops and requirements-gathering sessions across procurement, compliance, legal … platform releases and emerging TPRM, ESG, and procurement trends. What You'll Need Domain experience: 5+ years in TPRM, vendor/supplier management, procurement, GRC, or supply chain operations, with a solid understanding of the enterprise vendor lifecycle (onboarding, due diligence, risk assessment, contract management, off-boarding) and familiarity with ...

role will champion modern AI‐enabled product development practices, including the responsible application of AI throughout the software development lifecycle. This includes ensuring that governance, security, regulatory compliance and customer trust considerations are embedded from the outset and remain central to all AI initiatives. Key responsibilities Define the AI Strategy … and commercial stakeholders. Establish scalable frameworks and best practices to accelerate adoption and maximise business value. Ensure AI initiatives are delivered responsibly, with appropriate governance, risk controls and regulatory compliance. Partner with Legal, Compliance, Security and Architecture teams to assess and manage risks across AI use cases. Define and track ...

role will champion modern AI-enabled product development practices, including the responsible application of AI throughout the software development lifecycle. This includes ensuring that governance, security, regulatory compliance, and customer trust considerations are embedded from the outset and remain central to all AI initiatives.**Key responsibilities*** Define the AI Strategy … and commercial stakeholders.* Establish scalable frameworks and best practices to accelerate adoption and maximize business value.* Ensure AI initiatives are delivered responsibly, with appropriate governance, risk controls and regulatory compliance. Partner with Legal, Compliance, Security and Architecture teams to assess and manage risks across AI use cases.* Define and track ...

someone who wants to lead and build, not just follow a playbook. Why this role exists As the business scales, the need for structured governance, process integrity, and accountability across day‐to‐day operations has become a strategic priority. This role exists to own that accountability. The postholder will serve … evidence collection sits with individual control owners; you monitor for gaps or failures and keep owners accountable, keeping Drata and the ISMS manual consistent. Governance & Risk Chair the Governance, Risk and Compliance Committee, owning the agenda and policy review cycle. Maintain the company risk register in Drata and report audit ...

direction, development and ongoing optimisation of the ServiceNow platform. This role will be responsible for ensuring the platform delivers maximum business value through effective governance, innovation and operational excellence. Working closely with Technology, business stakeholders and external partners, the successful candidate will drive platform adoption, service improvements and long-term … platform stability, performance, security and availability across all ServiceNow services. Oversee third-party vendors, service providers and platform-related budgets. Establish strong governance, risk management and compliance controls for the platform. Lead, coach and develop platform and engineering teams to drive high performance. What you’ll bring Extensive experience managing ...

privacy programmes that demonstrate compliance and enhance customer trust. Lead responses to data breaches and critical incidents, including stakeholder and executive communications. Develop and maintain privacy governance frameworks, policies, standards and training programmes. Advise on specialist privacy topics such as data retention, transfers, analytics and data usage. Maintain Records … investigations, enquiries and remediation programmes. Knowledge of digital privacy, customer data, cookies, tracking technologies and data-driven business models. Experience building governance, risk management and compliance frameworks. Comfortable operating in a fast-paced, evolving environment with competing priorities. Data Privacy certification (such as IAPP or equivalent) would be beneficial. Experience ...

Security Management System (ISMS) across offices in Hong Kong and Beijing. The position will play a key role in maintaining ISO 27001 certification, supporting governance, risk and compliance activities, and ensuring alignment between local regulatory requirements and global security standards Client Details Our client is a leading international professional services … registers, incident registers and exception registers. Coordinate ISO 27001 internal and external audits and oversee remediation activities. Prepare security metrics and management reports for governance meetings. Support information security awareness and training initiatives. Act as the primary Information Security representative for stakeholders across Hong Kong and Beijing. Provide security oversight ...

intelligent analytics solution that provides a simple and engaging experience for customers and delivers valuable insights across the Riskonnect platform. The Senior Product Manager, GRC Analytics is primarily responsible for designing requirements and outputs — datasets, reports, and dashboards — for Riskonnect’s GRC solutions, built on our Power BI and Microsoft … and Microsoft Fabric environment. Identify opportunities to apply AI and machine learning — such as natural language querying, automated insights, or predictive analytics — within the GRC analytics experience. Assist in the upskilling of the Custom Reporting team in requirements design and data visualization best practice. Contribute to mapping relationships between ...

Expertise in Microsoft 365, Azure/AWS, networking (SD-WAN, SASE), server administration (Linux/Windows), and SQL clusters Strong understanding of ITIL, IT governance, and risk management, with experience applying GRC requirements to business applications Proven track record managing third-party vendors and delivering complex, large-scale projects ...

GRC Consultant Rate - £550 - £650 Inside IR35 Duration - 6 months Location - London (once/twice a week on site) A unique opportunity for an experienced Governance, Risk & Compliance (GRC) professional to help shape the responsible adoption of AI across a complex enterprise environment click apply for full job details ...

Chief Technology & Transformation Officer, with a dotted line to the Board and Audit Committee, this is a pivotal executive leadership role responsible for security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations … customers, supporting business growth, and embedding security across the organisation. What you’ll do Define and lead the Group’s security strategy, policies, and governance framework Provide Board-level reporting on security posture, risks, and compliance activities Oversee security operations, including threat detection, incident response, and remediation ...

bold in our ideas, accountable in our actions, and committed to doing the right things right. We are the worldwide leader in governance, risk and compliance management software and services. Our solutions are informed, driven and refined by direct feedback from our customers, the industry’s largest community of GRC … Senior Solutions Consultant and member of the Professional Services Organisation, you will help NAVEX’s customers maximise the value of their investment in our governance, risk, and compliance management solutions and services. You will work directly with our existing and new customers post sale to assess the potential impact ...

metadata management, and data lineage. Desirable Experience Experience migrating legacy systems into Azure or Microsoft Fabric . Prior background in Financial Services working on Governance, Risk, and Compliance (GRC) systems. Familiarity with data governance frameworks in regulated, high-compliance environments. Relevant Microsoft Azure or Microsoft Fabric certifications. How to Apply ...

owns that program, its scope, and its direction. You are the engineer who makes it work in practice: implementing and evidencing controls, keeping the GRC platform accurate, preparing what auditors and customers ask for, and chasing the details that decide whether an audit goes well. This is a compliance role … control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline. Operate our GRC platform (Vanta) day to day: configure and maintain integrations, monitor automated control checks, and resolve drift and failing controls. Collect, organize, and quality-check evidence ...

us. The role We are formalising our security assurance function. We have technical controls and the engineering culture; what we need now is the governance layer that proves it - to our auditors, to our funders, and to our regulator. You will be the delivery engine behind that. You will … ahead of the March 2027 deadline; MI to the Risk Committee is trusted. Essential experience: Three or more years in an information security assurance, GRC or security compliance role, at least some of it in a regulated financial services environment or another environment with real external audit pressure. Hands ...

looking for an IT & Cyber Security Lead to own and strengthen i-media's cyber security posture and IT governance framework. Job Title: IT & Cyber Security Lead Department: Technology Reports To: Chief Technology Officer (CTO) Location: London, UK (Hybrid: 3 Days in Office) Employment Type: Permanent About i-media … motorists. Role Overview We're looking for an IT & Cyber Security Lead to own and strengthen i-media's cyber security posture and IT governance framework, reducing risk and ensuring compliance while enabling the business to move fast. You'll bring senior oversight to our day-to-day IT operations ...

team in London, United Kingdom in a hybrid working mode. In this role, you will lead a team focused on environment strategy, automation, patch governance and operational reliability for AWS-based platforms. Your responsibilities include setting roadmaps, driving best practices and delivering consistency across complex environments. You will manage people … environment strategy Lead, mentor and develop a team of DevOps and environment engineers Set and enforce standards for environment provisioning, lifecycle management and patch governance Drive adoption of Infrastructure as Code and automation-first practices across environments Oversee monitoring, alerting and operational readiness to meet availability and performance objectives Partner ...

company's security strategy from the ground up, including policy, standards and risk posture for customer-facing infrastructure. Develop our security practices, governance, risk and reporting Define the roadmap and maturity targets for the function. Build the hiring plan and business case for the SecOps team as it scales. Customer … Build support across Engineering, Platform and Product for the security practice. Embed security into how the company designs and ships infrastructure without slowing delivery. Governance, Testing & Collaboration: Partner with the VP InfoSec on shared risk reporting, security testing (internal drills, external pentest) and audit evidence gathering. Develop security culture, development ...

practices for the protection of Client systems Oversee, evaluate, and support; Discovery and audits, for the extraction of findings Documentation, validation, assessment, and authorisation GRC consultants, Service & Solution architects in the securing of products/services. Microsoft AD, Key Vault, Entra AWS IAM Google Cloud Identify Okta SailPoint CyberArk AuthO … design & build IDAM Applications Onboarding IDAM/PAM processes enhancements, inc JML IDAM custom rules/interface creation Identity Lifecycle Management & Provisioning Identity & Access Governance, Certification/Recertification Role, Entitlement Management, SOD Privileged Account Management, Privilege Password Management Access Management, Single Sign-On & Federation Access review process customisations, inc. exclusion ...