51 to 75 of 78 GRC Jobs in the South East

Once For All is a high-growth, cloud-based, SaaS subscription business. Our technology helps our customers to manage their supply chain governance, risk management and compliance. We work across public and private sector and have over 250k customers across the UK across 20 different sectors including construction, transport, retail ...

Information Security Officer – GRC & Compliance Location: Reading area – hybrid Salary: £55,000–£57,000 basic Contract: Permanent About the Company We are working with a large, privately owned technology distribution business operating across the UK and Europe. The organisation partners with some of the world's leading technology brands, supplying … experienced Information Security Officer to join the team. The Role Reporting to the Director of Cyber Security, you will work across Information Security, GRC, ISMS, compliance and security consultancy , helping to maintain and improve the organisation's security controls and overall cyber maturity. The role has a strong focus ...

join our team in a fast-paced software house environment. In this role, your primary focus will be clearing the backlog of Application, Governance and Assurance Pack (AGAPs) required under our Security by Design (SbD) framework for all products owned by TLSE and Live Services. You will … and operational security data. Your work will ensure that the products across our portfolio are fully documented, assessed, and aligned with security standards and governance policies. Key Responsibilities Systematically review, prioritise, and clear the backlog of AGAP assessments required across the portfolio of TLSE-owned software products. Proactively collaborate with ...

SiXworks is seeking a Security Consultant to design, build, and deliver secure digital solutions in highly secure environments. You will collaborate with engineers, architects and delivery specialists to enable faster, safer decision-making for critical ...

sits at client site in Snodland, Kent, with hybrid flexibility and 1-2 days office attendance weekly. You will coordinate IT/OT convergence, governance, risk mitigation, and regulatory compliance, delivering multi-million pound programmes while protecting critical water infrastructure. #J-18808-Ljbffr ...

Information Security Lead/ISO27001/SOC/GRC/Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. We're currently recruiting for an Information Security Lead to own and drive our compliance programmes (ISO 27001, SOC 1 Type 2, SOC 2 Type … Type 2, and SOC 2 Type 2 programmes, including evidence collection, control testing, policy maintenance, and auditor liaison Maintain our GRC platform - keeping controls, evidence, and risk registers current and audit-ready at all times Drive continuous improvement of policies, procedures, and controls across the business Serve as the primary ...

seeking a GRC engineering lead to drive the global GRC technology strategy, architecture, and delivery. You will lead delivery squads across engineering and compliance, advancing AI-driven risk and control capabilities while upholding bp's standards and regulatory obligations. The role requires building and guiding a high-performing team, fostering … continuous improvement, and partnering with regional stakeholders to ensure effective governance across jurisdictions as bp moves some #J-18808-Ljbffr ...

with a world class leading consulting group in their latest phase of cyber security growth. We are interested in connecting with senior cyber security & risk consultant candidates based in London. Oliver James is partnered with a world class leading consulting group in their latest phase of cyber security growth. … interested in connecting with senior cyber security & risk consultant candidates based in London. This grade pays up to £60,000 basic salary plus bonuses, pension, broad benefits, professional membership costs, training & development and more. In addition, our client offers a clear and defined path career progression where employees have complete ...

their development. Candidates carrying a number of the below skills would be particularly relevant:- Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0 … CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

and hands-on technical support. You’ll work closely with internal teams and customers, helping to resolve technical issues while ensuring that security, confidentiality and compliance remain at the heart of every interaction. The role You will be responsible for: Troubleshooting hardware, software and network-related issues Identifying, triaging and … enjoys being technically hands-on but also wants exposure to cyber security, ISO 27001, compliance and incident management, rather than working in a purely GRC-focused position ...

Maxwell Bond is partnering with a technology distribution business to recruit an Information Security Officer for GRC and compliance. The role focuses on hands-on implementation of ISMS and security controls, working with auditors, suppliers and customers to demonstrate risk managed and controls operating effectively. The role requires building security … assurance across ISO 27001, PCI-DSS, NIST/CIS, with vendor risk management and cloud security in Microsoft 365, Azure, AWS or Google Cloud. #J-18808-Ljbffr ...

their development. Candidates carrying a number of the below skills would be particularly relevant:- Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0 … CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

open doors, win customers and close deals. What You'll Be Selling A combination of cybersecurity software and specialist services, including: Cybersecurity assessments, risk evaluations and penetration testing. Security consultancy, compliance assessments and improvement planning. Recurring software subscriptions and assurance services. You'll help customers understand their security risks and … from initial contact and discovery through to proposals, negotiations and signed contracts. Build relationships: Engage with senior business leaders, IT directors and cybersecurity, risk and compliance professionals. Develop revenue: Win new customers, secure recurring business and identify opportunities to grow existing accounts. Deliver results: Maintain accurate CRM records, forecast effectively ...

Skills: Technology Controls, GRC, Security, NIST/ISO, SC Clearance We are looking for Technology Control Frameworks Lead at Wokingham, UK - 2-3 days per week Onsite Security Clearance: Active SC Clearance is must have Technology Control Framework - Project, Resource Responsibilities: Design and develop the Technology Control Framework: Create … regulatory requirements, maintaining traceability to demonstrate coverage and identify gaps, while defining applicability across relevant technologies, services, processes and information asset types. Define control governance and assessment: Establish control ownership and accountability with Technology, Security, Risk and First Line stakeholders, alongside maturity and assessment criteria that enable consistent measurement ...

processes, including alert triage, incident response and vulnerability escalation. You’ll manage and challenge our SOC/MSSP provider, working closely with Technology, Engineering, GRC, Threat and Vulnerability colleagues to improve how we detect threats, respond to incidents and reduce risk. A key part of the role is improving … playbooks. Use methods such as MITRE ATT&CK and NIST to improve detection and incident readiness. Ensure vulnerabilities and exposures are prioritised, assigned clear risk owners and tracked through treatment and closure. Lead and develop the analysts, report clearly to the CISO and senior stakeholders, and work with Engineering, Technology ...

appropriate resilience is designed into their products and services. Provide subject matter expertise on continuity and resilience considerations for supplier onboarding processes, ensuring appropriate risk management throughout the supply chain. Work with product owners and critical process owners to quantify, document, and report on resilience metrics. Design scenarios and … function by identifying and implementing changes to enhance DR service quality, cost efficiency, and effectiveness. Communicate regularly with stakeholders, including system owners, Head of GRC, and senior management, providing updates on DR performance and other relevant information. Key Skills, Experience and Qualifications: Essential Requirements Experience in Business Continuity and Operational ...

Patching, Asset Management, Certificates, WebApps.* Experienced building & operating AM/VM/PC/PM programs, workflows, key metrics, best practices* Experienced in Cyber-Risk frameworks, Prioritization/Remediation + Scanning/Reporting strategies.* Breadth and depth of knowledge on the cybersecurity general threat landscape and attack techniques* Familiarity and … Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud (certified solutions architect level) #LI-REMOTE ...

leading organisation as they embark on a significant ServiceNow transformation and are looking for an experienced ServiceNow Architect to lead solution design, architecture governance, and platform best practice across multiple workstreams. This is a hands-on architecture role requiring strong technical expertise, stakeholder engagement skills, and a proven track record … operating as a ServiceNow Architect or Lead Developer with proven hands-on ServiceNow experience Experience delivering multiple ServiceNow modules including ITSM, ITOM, HRSD, SecOps, GRC/IRM and SPM . Strong expertise across: ServiceNow scripting (Client & Server-side) Flow Designer IntegrationHub Service Portal/Employee Center Automated Test Framework ...

Westcoast in Theale (Reading area) seeks a Principal Information Security Officer to lead architecture, governance, IAM and GRC activities within the Westcoast Security Model. You will partner with stakeholders, tech teams and third parties to drive secure development lifecycle processes and regulatory compliance. As an experienced security lead you will ...

Intact Insurance is seeking a recognised authority to lead AI governance and strategic initiatives across the organisation. You will define discipline standards, methodologies and technical direction, and act as the final escalation point for complex or high‐risk AI issues. You will influence senior leaders, oversee risk assessments, and build ...

understanding of Systems Engineering methodologies, digital engineering tools and the wider engineering lifecycle. This is not a traditional IT Cybersecurity, Information Assurance or GRC role. The focus is on engineering security into complex products and systems, and developing the digital workflows, models and integrations that support Product Security activities. … Responsibilities Translate Product Security engineering requirements into effective digital engineering solutions and workflows. Define digital processes supporting security requirements, threat and risk assessments, and security assurance. Establish traceability between security risks, requirements, system architectures and verification evidence. Support the integration of Product Security activities with Model-Based Systems Engineering (MBSE ...

Kingfisher is seeking a Security Governance lead to shape risk, compliance and assurance across the organisation. You will define and run governance frameworks, provide clear executive reporting, and drive improvements in security posture through data-driven insights. The role supports a hybrid working model with a base location either ...

ServiceNow Architect with strong Telecommunications Service Operations Management (TSOM) experience. Leading the design + implementation of ServiceNow modules including: ITSM, ITOM, ITAM, HRSD, CSM, GRC, SecOps, CMDB, discovery + custom applications. Proven expertise in ServiceNow integrations (REST, SOAP, APIs, MID Servers), ServiceNow scripting (JavaScript, Glide, Flow Designer) + ServiceNow data … models. Acting as the technical authority on ServiceNow architecture, strategy, roadmaps, design, implementation, governance + best practice. Ensuring ServiceNow platform scalability, security, performance + integration with other enterprise systems. Providing technical leadership in solution design workshops, architecture reviews + governance boards. Qualifications: ServiceNow Certified System Administrator (CSA), ServiceNow Certified Implementation ...

drive NIS2 and CRA compliance across the Solutions & Services Group. You will partner with product teams worldwide to embed secure-by-design principles, manage risk, and ensure regulatory readiness while supporting audits and regulatory engagements. The role requires extensive GRC experience, strong project management, and excellent communication to translate complex ...

Westcoast, headquartered near Reading, is seeking an Information Security Officer to govern Group security controls and external stakeholder assurance. You will focus on governance, architecture, and identity management, supported by a security operations and engineering team to deliver cyber resilience and compliance. You will engage with customers, suppliers, auditors, and ...