1 to 25 of 31 GRC Jobs in the Midlands

Internal Controls and Cyber Security teams to coordinate audits, evidence gathering and remediation activities. Produce meaningful risk dashboards, management information, Key Risk Indicators (KRIs) and governance reporting for senior leadership and risk forums. Collaborate with Technology, Retail Operations, Finance, Procurement, Legal and Supply Chain teams to embed effective risk management … recommend practical improvements. Excellent communication and stakeholder management skills, with the ability to engage technical and non-technical audiences. Experience working with Governance, Risk & Compliance (GRC) platforms such as OneTurst Passionate about strengthening governance, improving controls and enabling secure business growth across a complex global retail organisation. Professional certifications such ...

Information Security Risk and Compliance Analyst LET’S CUT STRAIGHT TO IT At Severn Trent, our people are at the heart of everything we do.We’rein the top 5% of utility companies worldwide for employee engagement, andwe’reequally proud of our strong Glassdoor score — reflecting how much our peopleloveworking here. … business, its people, and customers from these daily threats, and we have an opportunity for you to join us as anInformation Security Risk and Compliance Analyst. Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting on our information security compliance and ...

Travel (Twice a Month) | Up to £75,000 My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team. This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play … NIST CSF and IASME Governance. Conduct internal audits and provide recommendations for improvement. Support clients with information security governance, risk and compliance activities. Manage third-party risk assessments and vendor security reviews. Deliver security awareness training and engage with stakeholders at all levels. Support the sales team with scoping client ...

and time-critical projects across multiple sectors, including Aerospace, Defence, Critical National Infrastructure (CNI). Due to continued growth, we have opportunities in our Governance, Risk & Compliance (GRC), Security Architecture, Threat & Vulnerability, and Operational Technology (OT) teams. Our role as a trusted adviser allows us to offer rewarding careers … Provide strategic leadership and oversight for multiple complex OT cyber security projects. Ensure that each engagement aligns with the client’s business objectives and risk appetite, while delivering solutions that protect mission-critical systems and maximise operational resilience. Act as the engagement lead, managing client relationships and guiding internal teams ...

opportunities, and innovative solutions that support strategic objectives. Promote safe, secure, and compliant adoption of AI and innovation practices, ensuring alignment with governance, risk, and compliance requirements. Build and manage relationships with external partners, technology providers, and innovation ecosystems to maximise access to emerging technologies and expertise. Monitor and measure … stakeholder management skills, with the ability to influence and engage senior leaders across business and technology functions. Strong understanding of governance, risk management, security, and compliance considerations associated with emerging technologies. Exceptional analytical, problem-solving, communication, and presentation skills. Strategic thinker with the ability to challenge the status quo while ...

opportunities, and innovative solutions that support strategic objectives. Promote safe, secure, and compliant adoption of AI and innovation practices, ensuring alignment with governance, risk, and compliance requirements. Build and manage relationships with external partners, technology providers, and innovation ecosystems to maximise access to emerging technologies and expertise. Monitor and measure … stakeholder management skills, with the ability to influence and engage senior leaders across business and technology functions. Strong understanding of governance, risk management, security, and compliance considerations associated with emerging technologies. Exceptional analytical, problem-solving, communication, and presentation skills. Strategic thinker with the ability to challenge the status quo while ...

roadmap aligned with business priorities. Helping shape the future security function, identifying resource requirements and influencing future recruitment. Leading information security governance, risk management and compliance initiatives, including Cyber Essentials and ISO 27001. Providing technical oversight and guidance across infrastructure, cloud, networking and security platforms. Managing security risks, vulnerabilities and … strategies, policies and improvement programmes. A solid understanding of networking, Windows Server, Active Directory, Microsoft 365, Azure and hybrid infrastructure environments. Experience with security governance, risk management and recognised frameworks such as ISO 27001, Cyber Essentials and NIST. Knowledge of security operations, vulnerability management, incident response and endpoint protection. Experience ...

Severn Trent Plc is seeking an Information Security Risk and Compliance Analyst based in Coventry to protect our critical national infrastructure and support governance, risk and compliance across a complex technology environment. You will work with the Information Security team to identify, measure and report on information security compliance and … risk, driving gap analysis and remediation with internal and external partners. #J-18808-Ljbffr ...

architectures for our clients, with a particular focus on Google Cloud Platform (GCP) and emerging Agentic AI systems . Leveraging your strong cloud security and governance expertise, you will: Security Architecture Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS). … Service Controls , Cloud Armor , Confidential Computing , and secure workload segmentation . Develop security design documentation, diagrams, and rationale aligned with business and compliance requirements. Apply risk‐based and threat‐based approaches to recommend secure and proportionate solutions. Agentic AI & LLM Security Architecture You will be responsible for shaping security controls ...

grow and develop your career. We offer full 360-degree services to our clients from initial consulting on a range of areas including Risk Assessments, Vulnerability Management, Accreditations (ISO27001, GDPR), GRC (Governance, Risk, Compliance), Security Architecture Design and Build (Both technical and Non-Technical), Incident Response, Protective Monitoring Services, Penetration … build government security standards and processes such as ISO27001 standards, CEF, Cyber Essentials, NIST & Cyber Essentials Plus into service and project delivery Performing Security Risk Management of services, projects and client operations. Designing, Building, maintaining and operating ISMS Managing the security of major projects and services to meet client expectations ...

provide assurance to customers on MHR's approach to security, governance and responsible AI. What You'll Bring Experience in information security governance, risk and compliance Knowledge of security and AI control frameworks Experience delivering security awareness and training programmes Understanding of supplier and third‐party risk management Strong written … and verbal communication skills Experience supporting audits, certifications and compliance activities CompTIA Security+ and ISO 27001 certification (or equivalent experience) Exposure to ISO 42001, Microsoft Purview, AI governance or AI agent oversight would be advantageous Benefits to support you personally and professionally Alongside the opportunity to work with an incredible ...

and improve lives every day. We are seeking an exceptional Chief Information Security Officer to lead some of our most important cyber security, information governance and resilience capabilities. Working with the Executive team and leaders across the organisation, you will set the strategic direction for cyber and information security, information … from significant cyber incidents. Promote an organisation-wide security culture, embedding shared responsibility and informed risk management. Lead cyber and information security governance, risk and compliance, including GDPR, DSPT, CAF and DHSC requirements, ensuring regulatory compliance and audit readiness. Lead and develop a diverse, inclusive, high-performing team with ...

have an exciting, new opportunity for an AI Automation & Governance Lead to come and join our Systems team (as part of our wider IT function) at our Head Office in Ashby de la Zouch. Our IT department is responsible for delivering secure, reliable and innovative technology services that support Fisher … and automation technologies. As a regulated business and member of the Royal Institution of Chartered Surveyors (RICS), the responsible use of AI, data governance and information security are fundamental to maintaining professional standards and client trust. The successful candidate will work closely with Information Security, Data Governance, Compliance, Risk, Change ...

doing: Lead the delivery of complex cyber security projects and programmes from initiation through to completion. Manage project plans, budgets, timelines, risks, dependencies and governance activities. Build and maintain trusted relationships with customer stakeholders and executive sponsors. Facilitate programme boards, steering committees and project governance meetings. Work closely with cyber … security engineering or solution design role. Strong stakeholder management and customer-facing skills. Experience managing project budgets, forecasting and financial performance. Strong governance, risk and compliance management capabilities. Experience working with Agile, Waterfall and hybrid delivery methodologies. Excellent communication, leadership and problem-solving skills. Ability to manage multiple priorities while ...

doing: Lead the delivery of complex cyber security projects and programmes from initiation through to completion. Manage project plans, budgets, timelines, risks, dependencies and governance activities. Build and maintain trusted relationships with customer stakeholders and executive sponsors. Facilitate programme boards, steering committees and project governance meetings. Work closely with cyber … security engineering or solution design role. Strong stakeholder management and customer-facing skills. Experience managing project budgets, forecasting and financial performance. Strong governance, risk and compliance management capabilities. Experience working with Agile, Waterfall and hybrid delivery methodologies. Excellent communication, leadership and problem-solving skills. Ability to manage multiple priorities while ...

primary focus on external stakeholders and compliance. Working primarily in the disciplines of Architecture and consultancy, Identity and Access Management and Governance, Risk and Compliance you will be supported by a security operations and engineering team to deliver security, business value and cyber resilience. This role will involve working with … developing security architecture and patterns. Stewardship of information security risks working with the Business Assurance team on reporting. Focusing on crown jewel systems ensuring risk posture and cyber resiliency needs. Ensuring technical risks form Data Protection Impact Assessments are managed Ensure policy exceptions and risks are recorded and managed ...

security. We have teams that offer world class services in red teaming, penetration testing, threat intelligence, research and development, detection and response, governance, risk, and compliance, and plenty more. Our business is global and so are our clients. We work closely with central banks, central and local government, critical national … used solely for recruitment purposes, stored securely, and retained only as required. At LRQA, we belive that as a leading Global Leading Assurance and Risk Management Service provider, our talented people are our risk management advantage. We belive the best outcomes come from diverse perspectives, shared ambition and working together ...

report to the Director of Cyber Security and will be working to deliver the Architecture and consultancy, Identity and Access Management and Governance, Risk and Compliance activities within the Westcoast Security Model. The role will involve working in partnership across the group with both stakeholders, technical teams, development functions and … with customers etc.). Is this the role for you? We are looking for someone who can shape change and has an experience in GRC, security architecture, consultancy and identity management. Our ideal candidate will have a focus on improvement, a passion security and strong technical skills. To be successful ...

market to execute transformation and high-value projects for our global clients—solving problems in the areas of Business Transformation, Governance, Risk and Compliance, and Technology and Digital Innovation. Our unique consulting model allows you the radical flexibility and control you demand in the “Now of Work,” enabling ...

Digital Waffle is seeking an Information Security Consultant to join the GRC team remotely in the UK, with limited office travel (about twice monthly). You will lead ISMS activities, audit ISO 27001-based controls, and advise clients on governance, risk and compliance. The role emphasises strong stakeholder engagement and ...

Frasers Group is seeking a Technology GRC Analyst to support the ongoing development of its technology risk and assurance capability across the group’s global operations. You will identify, assess and monitor technology and cyber risks while ensuring IT and business controls are designed and operating effectively, collaborating with multiple … stakeholders. You will deliver risk assessments, controls testing and IAM assurance, maintain the risk register and contribute to supplier risk and #J-18808-Ljbffr ...

within a collaborative security team, you will play a key role in strengthening security controls across Azure, endpoint, identity and network environments , reducing cyber risk through effective protection, monitoring, remediation and automation. This is an excellent opportunity for a security professional looking to work across modern cloud technologies, security tooling … Zero Trust principles. Key Responsibilities Design, implement and maintain security controls across Microsoft Azure environments. Manage cloud security posture, identifying and remediating vulnerabilities, misconfigurations and compliance issues. Strengthen identity security through Conditional Access, MFA, Privileged Access Management and least-privilege principles . Administer and optimise Microsoft Defender, Defender for Cloud ...

within a collaborative security team, you will play a key role in strengthening security controls across Azure, endpoint, identity and network environments , reducing cyber risk through effective protection, monitoring, remediation and automation. This is an excellent opportunity for a security professional looking to work across modern cloud technologies, security tooling … Zero Trust principles. Key Responsibilities Design, implement and maintain security controls across Microsoft Azure environments. Manage cloud security posture, identifying and remediating vulnerabilities, misconfigurations and compliance issues. Strengthen identity security through Conditional Access, MFA, Privileged Access Management and least-privilege principles . Administer and optimise Microsoft Defender, Defender for Cloud ...

Security Officer to lead security controls across the group, with a focus on external stakeholders and compliance. You will work in architecture, IAM, and governance, supported by a security operations and engineering team. The role involves security assessments, risk stewardship, and implementing best practices such as SSO. Candidates with CISSP ...

border team of security practitioners and is the operational backbone of the security function as the broader organization builds out, including future Director and GRC leadership roles. On a typical day, you'll be responsible for: Own day-to-day security tooling and operations: EDR/XDR, SIEM, data-loss … active incidents Support the annual SOC 2 Type II audit cycle – evidence collection, control walkthroughs, and auditor liaison – in partnership with the compliance/GRC function Maintain NIST CSF control documentation and contribute to ongoing risk-remediation (POA&M) efforts Support HIPAA/PHI security controls and periodic risk assessments ...