226 to 250 of 288 GRC Jobs in London

from the Fortune 500 to fast-growing startups, use our no-code platform to onboard, assess, and monitor their vendors, suppliers, and partners across risk, compliance, and ESG. We have processed over 10 million entities for 100,000+ users across 120+ countries, and are backed by Fin Capital, Vertex Ventures … platform solutions, own the solution design from discovery through go-live, and serve as a trusted advisor to stakeholders ranging from procurement leads and risk officers to CIOs and CPOs. It's a high-impact, client-facing role for an experienced consultant who combines deep domain expertise in TPRM, vendor ...

building agent-native risk infrastructure: risk management and trust building, delivered by AI agents, for a world increasingly run by them. As more decisions and transactions run through agents, the volume of risk to manage and trust to establish is growing very fast. Today both functions are fragmented, split across … spend their time deciding and acting on what matters, not assembling the evidence to get there. Hundreds of billions of dollars are spent across risk management and trust building annually. These funds are going to be reallocated to agent-native solutions in the next five years, and we will capture ...

path the default path. The thread running through everything here is influence. You will spend as much time with engineers, product managers, designers, operations, and compliance colleagues as you do with code and tooling. The person who succeeds in this role is the person who can walk into any team … explain the risk in language that team actually uses, and leave them better equipped than when they arrived. What you'll work on First 90 days Understand how we actually build. Map our real delivery paths, from idea to production, across the teams that matter most. Find where security currently ...

their development. Candidates carrying a number of the below skills would be particularly relevant:- Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0 … CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

open doors, win customers and close deals. What You'll Be Selling A combination of cybersecurity software and specialist services, including: Cybersecurity assessments, risk evaluations and penetration testing. Security consultancy, compliance assessments and improvement planning. Recurring software subscriptions and assurance services. You'll help customers understand their security risks and … from initial contact and discovery through to proposals, negotiations and signed contracts. Build relationships: Engage with senior business leaders, IT directors and cybersecurity, risk and compliance professionals. Develop revenue: Win new customers, secure recurring business and identify opportunities to grow existing accounts. Deliver results: Maintain accurate CRM records, forecast effectively ...

seed-stage company is building agent-native risk infrastructure: risk management and trust building, delivered by AI agents, for a world increasingly run by them. Their agents sit on top of proprietary data and reassess continuously rather than at fixed checkpoints - so customers spend their time deciding and acting … dirty with related development. You're the first person customers call and their trusted counterpart. You sit across the table from CSOs, VPs of Risk, and heads of compliance, and you turn their messiest workflows into something that runs on the platform. Expect roughly one to two customer meetings ...

internal standards), identifying gaps and supporting Lead-driven control strategy decisions Develop regulator-ready and high-quality artifacts, including evidence mappings, control narratives, risk statements, and audit support documentation Identify, analyze, and elevate regulatory risks and audit obligations, supporting proactive planning and risk visibility at the program level Partner cross … functionally with Legal, Public Policy, R&D, Security, Product, Sales, and Risk teams, supporting the Lead in aligning regulatory interpretation with technical and business implementation Drive execution of process improvements, tooling enhancements, and automation initiatives defined by the SCRA program Operate with high ownership and accountability, executing work independently while ...

owns that program, its scope, and its direction. You are the engineer who makes it work in practice: implementing and evidencing controls, keeping the GRC platform accurate, preparing what auditors and customers ask for, and chasing the details that decide whether an audit goes well. This is a compliance role … control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline. Operate our GRC platform (Vanta) day to day: configure and maintain integrations, monitor automated control checks, and resolve drift and failing controls. Collect, organize, and quality-check evidence ...

Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius isseekingaIT Risk & Controls Manager to act as an embedded risk partnertoour engineering and technology organizations. You will help scale and strengthen a modern IT SOX andcontrolsframework acrossNebius … auditors toidentifyrisk, design scalable controls, improve evidence quality, driveremediationand embed compliance into the way our technology organizationsoperate. The successful candidate will combine deep IT risk andcontrolsexpertisewith meaningful in-house technology experience. You must be equally comfortable discussing technical control design with engineers, explaining risk implications to businessleadersand aligning audit expectations ...

processes, including alert triage, incident response and vulnerability escalation. You’ll manage and challenge our SOC/MSSP provider, working closely with Technology, Engineering, GRC, Threat and Vulnerability colleagues to improve how we detect threats, respond to incidents and reduce risk. A key part of the role is improving … playbooks. Use methods such as MITRE ATT&CK and NIST to improve detection and incident readiness. Ensure vulnerabilities and exposures are prioritised, assigned clear risk owners and tracked through treatment and closure.Lead and develop the analysts, report clearly to the CISO and senior stakeholders, and work with Engineering, Technology, GRC ...

design, build and operationalise the ISMS in line with ISO/IEC 27001:2022. Responsibilities include conducting enterprise-wide gap assessments, defining scope and governance, developing risk registers and SoA, and delivering a budgeted implementation roadmap with cross-functional collaboration across Technology, Security, Legal, HR and Procurement. #J-18808-Ljbffr ...

with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation. We pride ourselves on combining technical expertise with a practical, hands‐on approach, helping our clients strengthen resilience, meet … regulatory requirements, and stay ahead in an increasingly digital and risk‐driven landscape. Technical and Domain Experience Conduct cybersecurity maturity and risk assessment and for clients. Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments. Advise clients on cybersecurity strategy, metrics and reporting ...

looking for a Customer Trust Specialist to join our London office and help run the customer-facing side of our trust program. Where our GRC team keeps the compliance engine running behind the scenes, you'll be one of the people customers actually interact with, turning our security, privacy, and … governance posture into accurate answers that earn trust. You'll handle security questionnaires end to end, help operate our trust automation platform, and support customer conversations across EMEA and beyond. This is a great fit for someone with solid security-review experience who wants to grow their scope ...

Category: GRC & Compliance## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leave\"...matching, paid time off, and parental leave. Learn more about our benefit...\"Company-wide policy ·* Retirement match\"...gacy Reimbursement coverage), 401(k) matching, paid time … will involve performing security assessments and working with teams to support threat modelling on AWS services. Each change to a service represents a new risk, so this role will ensure changes are adequately assessed and any vulnerabilities addressed. If you have worked with security assurance or compliance in the past ...

which supports secure developer workflows. Application Security is part of our wider Financial Scale organization, which means you will work closely with Security Operations, GRC, Product Security, Front End Platform, IT Infrastructure teams. We're looking for individuals with a strong background and interest in penetration testing. You should have … teams to build AI capabilities that our customers can trust with their critical financial operations. Responsibilities Identifying vulnerabilities, demonstrating business impact, and articulating the risk of specific vulnerabilities to drive prioritization efforts Perform penetration testing and design reviews, looking for vulnerabilities and insecure designs, work with engineering and product ...

and Point Nine, and we're growing fast. There's never been a better time to join. The role in one line Being a GRC Engineer at incident.io means turning compliance from spreadsheets and screenshots into something that just runs, so “can you prove it?” gets answered before anyone asks. … What that looks like day to day As a GRC Engineer at incident.io, you own how we prove we’re doing the right thing: our compliance programme, our customer security questionnaires, and the evidence behind both. One day you’re building an AI workflow that drafts questionnaire answers, the next ...

Having surpassed $300M ARR and continuing to grow, Optro helps enterprises transform risk into opportunity through its AI-powered GRC Intelligence Platform. More than 50% of the Fortune 500, including 7 of the Fortune 10, leverage our award-winning technology to move their businesses forward with greater clarity and agility. … company and our surrounding communities. We are all about assisting each other and breaking through barriers to create the most loved audit, risk, ESG, and InfoSec platform by our customers. This is how we have become one of the 500 fastest-growing tech companies in North America for the seventh ...

broad, hands-on role spanning cloud and application security, vulnerability management, identity and access management, incident response, secure software delivery, SOC 2, risk management, and customer security assurance. You'll be the internal owner for security: maintaining a clear view of our security posture, identifying where we need to improve … from security tooling, audits, penetration tests, and engineering reviews into clear actions with owners and deadlines, and follow them through to remediation or explicit risk acceptance. You’ll also own our day-to-day SOC 2 programme and audit readiness. That means making sure our controls reflect how Lantern actually ...

Keeping our incident response and breach notification process ready, and testing it each year Requirements You really need to have: 5+ years in security compliance, GRC or data protection, ideally at a SaaS or developer tools company Experience at an early-stage startup as the first or only compliance hire … than just your day job Our code is public, so anyone can see how we build and run our platform. We want our security and compliance to be just as open. We publish our security reports and trust portal, so customers can check our work instead of taking our word ...

Teya, a regulated payments fintech serving local businesses across Europe, is hiring a Security GRC Manager in London. You will lead the Security GRC team, align policies with PCI DSS, SWIFT CSP, and ISO 27001, and drive regulatory compliance with UK authorities. The role focuses on transforming governance into scalable … automated processes. Reporting to the CISO, you’ll partner with security engineering and procurement to improve evidence collection and audit readiness while shaping risk #J-18808-Ljbffr ...

vulnerabilities, understanding how applications behave and working directly with developers to make software more secure. This isn’t a traditional vulnerability management, SOC or governance position. Instead, you’ll join a small Security Engineering team where you’ll investigate security findings, assess real‐world exploitability and risk, monitor security tooling … Kubernetes security experience, plus exposure to C#, .NET, Python, Bash or PowerShell. This Role Probably Isn’t For You If... Your experience is primarily GRC, audit, compliance or policy. Your background is traditional vulnerability management focused mainly on running scanners, raising tickets and chasing remediation. Your experience is predominantly ...

those systems is protected. In this role you will plan, build and run our identity provider setup and single sign-on estate, including Identity Governance and Administration (IGA) for all Flowdesk identities. You will also cover Data Protection - data encryption, PKI, Key Management, data classification and DLP from a plan … purpose and time, approved, logged and removed automatically Help run regular access review campaigns and manage break-glass accounts and service account governance Review application and API authentication designs with Secure Engineering, and advise teams on best practice implementation Produce evidence and reporting for audits and regulators Monitor identity logs ...

Consultant level in the Big Four or public accounting. Hands‐on technical experience with SaaS solutions, cloud technologies, and architectures preferred. Experience with ERP, GRC, GL, FP&A, or Analytics & Reporting solutions. Ability to present a value based, compelling software demonstrations. Travel Requirements & Working Conditions: Willingness to travel … platform designed to bring confidence, control, and a competitive edge to the world’s most complex organizations. Our AI‐powered platform unifies finance, risk, and sustainability on a single, secure foundation—ensuring data is trusted, traceable, and ready to act on. With an unbroken path from source to output, leaders ...

understand customer challenges, requirements and desired business outcomes. Lead solution discovery and value-based conversations across Workiva's core solutions, including Financial Reporting, GRC and Sustainability. Facilitate and guide conversations with enterprise IT, architecture and business leaders around technology strategy, data management, integrations and modernisation. Provide technical and architecture presentations … and consult on modern data strategies, enterprise integrations and practical AI applications within complex enterprise ecosystems. Deep multi-domain knowledge across Financial Performance Management, GRC or Sustainability/ESG frameworks. Experience engaging with and presenting to business and IT managers, senior stakeholders and executive-level audiences. Excellent client-facing presentation ...

representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‐Ready Governance PlatformTM, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance … responsibility for the customer relationship by working directly with our strategic customers to enhance their overall user experience with the OneTrust Privacy, Security and Governance platform. The Principal Consultant – Technical Consulting has a deep understanding of the privacy industry, including regulatory environment, and uses this knowledge to support ...