1 to 25 of 494 GRC Jobs in the UK

Head of GRC

Location
Bury, England, United Kingdom
Head of Technology GRC is responsible for building, leading and continuously developing the Group Technology GRC function, translating the Technology Risk, Governance & Assurance strategy into effective services, processes, controls and assurance activity across the Group. The role provides a unique opportunity to shape and lead the long-term Technology GRC … complex multi-fascia environment. This is a leadership role with accountability for the performance, capability and day-to-day operation of the Technology GRC function and the transition from programme delivery to a sustainable long-term operating model. The role leads a multi-disciplinary team spanning technology risk, controls and ...

SAP Security GRC Analyst

Location
Greater London, England, United Kingdom
Your base location will be in either our Lincoln or Huntingdon office. Are you an experienced SAP Security professional with strong knowledge of SAP GRC, access governance and risk management? We’re looking for an SAP Security GRC Analyst to join our Information Services team and play an important role … protecting Anglian Water’s business‐critical SAP platforms. You’ll bring specialist expertise across SAP Security, SAP GRC Access Control and access governance, helping us ensure access is designed, provisioned and maintained in line with cyber security policies, regulatory requirements, internal controls and business needs. What you’ll be doing ...

Business Analyst

Location
Greater London, England, United Kingdom
Requisition ID 3563 -Posted 07/16/2026 - Professional Services - Country (1) - City (1) MetricStream is the global market leader for Integrated Governance, Risk, and Compliance (GRC) solutions delivered on an intelligent integrated platform. MetricStream’s purpose-built platform is proven with over a million global users, designed … serve GRC use cases across industries and powered by deep domain expertise, embedded content, rich context, integrated data, and explainable AI. Since 2001, MetricStream has empowered organizations to intuitively harness front-line intelligence that enables all stakeholders to make real-time risk-aware business decisions. Job Description Business Analyst – MetricStream ...

Information Security GRC Analyst

Location
Ipswich, England, United Kingdom
GRC Analyst strengthens PCI Pal's central Information Security function by providing structured governance, risk and compliance analysis across audit, assurance, control management and strategic change. The role turns requirements, evidence, risks and delivery updates into accurate, traceable information that supports timely decisions by the GRC Lead and CISO. … Security Project Manager to track ongoing and strategic initiatives, maintain clear ownership and delivery visibility, and provide concise, evidence-based updates. It remains a GRC role: the Analyst provides assurance, analysis and tracking, while the Project Manager retains responsibility for project governance, planning and delivery coordination. Job requirements Relevant experience ...

AI GRC Consultant

Hiring Organisation
Sanderson Recruitment
Location
London, United Kingdom
Employment Type
Contract
Contract Rate
£300 - £650 per day
GRC Consultant Rate - £550 - £650 Inside IR35 Duration - 6 months Location - London (once/twice a week on site) A unique opportunity for an experienced Governance, Risk & Compliance (GRC) professional to help shape the responsible adoption of AI across a complex enterprise environment. This role sits across technology risk, security … governance and emerging technologies. You will lead on Responsible AI governance, ensuring AI solutions are deployed safely, transparently and in line with organisational risk appetite while enabling innovation and business value. Working closely with technology, security, legal, risk and business stakeholders, you will establish practical governance frameworks, assess AI and ...

Supervisor, IT Security, Governance, Risk & Compliance

Location
Winnersh, England, United Kingdom
Location(s): Winnersh, GB, RG41 5TS We Make Life More Rewarding and Dignified Location : Winnersh Department : IT Summary The Supervisor, Governance, Risk & Compliance (GRC) leads and enhances the organization's cybersecurity governance, risk management, regulatory compliance, audit readiness, third-party risk, security awareness, privacy coordination, and policy management programs. … Recruit, interview, onboard, and coach team members. Foster a collaborative team environment and work effectively with internal teams, business partners, and external vendors. Security GRC Oversight: Oversee day-to-day Cybersecurity GRC activities, including risk assessments, compliance activities, audits, and security assessment coordination. Develop and maintain SOPs, playbooks, and runbooks ...

Information Security & Data Governance Lead (UK)

Location
Aberdeen City, Scotland, United Kingdom
Technology (OT) environments Support incident response planning and continuous improvement of security controls Embed secure-by-design principles into infrastructure and operational systems Data Governance Establish and maintain an enterprise data governance framework Define and enforce data classification, handling, retention, and protection standards Ensure compliance with international data protection regulations … data ownership, stewardship, and accountability across business units Support data quality, integrity, and lifecycle management Compliance & Regulatory Oversight Ensure compliance with applicable cybersecurity, data governance, and energy sector regulations Lead and support internal and external audit activities, including evidence collection and remediation tracking Maintain enterprise risk registers and compliance reporting ...

GRC Pre-Sales Consultant / Solutions Engineer – EMEA

Location
Greater London, England, United Kingdom
clarity, feasibility, and alignment on the end-to-end solution. Because Vanta is the platform our customers rely on to build and run their GRC programmes, this is a natural next step for GRC professionals, programme managers, auditors, and compliance practitioners who want to apply their domain expertise … based from our London office or Dublin office with an office-centric hybrid schedule. The standard in-office days are Tuesday, Wednesday, and Thursday. GRC practitioners are especially encouraged to apply—whether you've managed GRC programmes in-house, audited them as an internal or external auditor, or helped customers ...

AI Advisory Consultant - Governance & Responsible AI

Location
Greater London, England, United Kingdom
Advisory Consultant - Governance & Responsible AI At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good. Your … impact Artificial Intelligence is transforming how organisations operate, but delivering value from AI requires more than technology alone. It requires the right governance, controls and confidence to ensure AI is deployed responsibly, safely and effectively. As a Senior Consultant within Jacobs' newly established AI Advisory team, you'll help clients ...

Senior Trust Security Analyst

Location
Greater London, England, United Kingdom
Have you got what it takes? Citizenship & Clearance: UK citizenship and ability to pass and maintain SC clearance. Experience: 5+ years in a security, GRC, trust, or technical customer-facing role, with direct ownership of security questionnaires, customer inquiries, and security reporting. Questionnaire Expertise: Hands-on experience responding ...

Technology Controls Office (TCO) Specialist

Location
Belfast City District, Northern Ireland, United Kingdom
and ask compensation related questions, including pay details for this role.Job Description:The Technology Solutions Technology Control Office (\"TCO Europe\") is responsible for providing governance, oversight, and challenge to ensure that technology services operate within TD's risk appetite and comply with applicable enterprise standards, regulatory and audit obligations, and … internal control requirements.. The TCO Europe Specialist is required to work closely with both the local and international technology, business and governance teams to strengthen the control environment, manage technology risk and resilience, support regulatory compliance initiatives, and drive the remediation of identified control gaps, audit findings, and regulatory actions.The ...

ServiceNow Solution Architect (GRC, IRM, Risk)

Location
United Kingdom
ServiceNow Solution Architect (GRC, IRM, Risk) Architect governance platforms that stand up to scrutiny The Solution Architect – GRC/Risk is responsible for leading the architecture, design, and implementation of ServiceNow Governance, Risk, and Compliance (GRC) and Integrated Risk Management (IRM) solutions for Pulsar’s clients.This role combines deep technical … continued growth of Pulsar’s Risk and Resilience practice. What you'll do Lead the end-to-end design and architecture of ServiceNow GRC and Risk solutions, including modules such as Policy and Compliance, Risk Management, Audit Management, and Vendor Risk. Develop comprehensive solution blueprints, architecture documentation, and integration designs ...

Information and Technology Governance & Risk Lead

Location
Greater London, England, United Kingdom
Governance and Risk Lead****About the role**Reporting to Head of I&T GRC, Governance and Risk Lead will be responsible for driving information and cyber security awareness, delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and manufacturing site teams. You will review … and review. You will take responsibility for managing a subset of aspects of ISO 27001 related documentation and control activities. As the I&T Governance and Risk Lead you will have the responsibility of aspects of the I&T GRC scope, delegated and assigned by the Head ...

Information and Technology Governance & Risk Lead

Location
City of Westminster, England, United Kingdom
Governance and Risk Lead About the role Reporting to Head of I&T GRC, Governance and Risk Lead will be responsible for driving information and cyber security awareness, delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and manufacturing site teams. You will review … and review. You will take responsibility for managing a subset of aspects of ISO 27001 related documentation and control activities. As the I&T Governance and Risk Lead you will have the responsibility of aspects of the I&T GRC scope, delegated and assigned by the Head ...

Security Architect

Location
Greater London, England, United Kingdom
matters relating to cyber security, information assurance, cyber risk, data privacy including regulatory and compliance considerations Contribute to the development and enhancement of governance, risk and compliance aligned to policy, standards an industry good practice Ensure that continuous assessment, identification, analysis and reporting of useful metrics to enable informed risk ...

GRC Analyst

Location
Mansfield, England, United Kingdom
Relevantto our people, our partners and the planet Are you ready to join the Fearless? Job Description The Role: We are seeking a Technology GRC Analyst to support the continued development of Frasers Group's technology risk and assurance capability. In this role, you will identify, assess and monitor technology … controls are designed and operating effectively. Working closely with Technology, Cyber Security, Internal Audit, Finance, Supply Chain and business stakeholders, you will help strengthen governance, improve operational resilience and ensure risks are managed in line with industry standards and regulatory requirements. You will play an important role in delivering technology ...

Security Architect

Location
Greater London, England, United Kingdom
matters relating to cyber security, information assurance, cyber risk, data privacy including regulatory and compliance considerations Contribute to the development and enhancement of governance, risk and compliance aligned to policy, standards an industry good practice Ensure that continuous assessment, identification, analysis and reporting of useful metrics to enable informed risk ...

Technology Controls Office (TCO) Specialist

Location
Belfast City, Northern Ireland, United Kingdom
compensation related questions, including pay details for this role. Job Description: The Technology Solutions Technology Control Office ("TCO Europe") is responsible for providing governance, oversight, and challenge to ensure that technology services operate within TD's risk appetite and comply with applicable enterprise standards, regulatory and audit obligations, and internal … control requirements. The TCO Europe Specialist is required to work closely with both the local and international technology, business and governance teams to strengthen the control environment, manage technology risk and resilience, support regulatory compliance initiatives, and drive the remediation of identified control gaps, audit findings, and regulatory actions. ...

Governance, Risk & Compliance (GRC) Infosec Manager (PCI)

Location
Northampton, England, United Kingdom
Travis Perkins plc is now hiring for a proactive and detail-oriented Governance, Risk, and Compliance (GRC) Infosec Manager (PCI) to join our central Information Security team. This is a high-visibility, specialised role focused on leading our Group-wide Payment Card Industry (PCI) compliance ecosystem. Reporting directly … Senior GRC Infosec Manager, you will serve as the primary subject matter expert and point of contact for external Qualified Security Assessors (QSAs), while also contributing across wider cyber risk, third-party assurance, and data privacy governance. If you are a driven GRC professional with a strong grounding ...

Compliance Risk Management Lead

Location
Greater London, England, United Kingdom
external risk events Required qualifications, capabilities, and skills Professional experience in risk management, compliance, or technology-related fields. Strong technical experience in technology, cybersecurity, governance, operational risk or technology compliance within the financial services industry or experience in an equivalent role in the technology industry Knowledge and experience with Information ...

AI Governance Director, Data Science

Location
Greater London, England, United Kingdom
passionate about building and owning practical, scalable AI governance frameworks that enable innovation while managing risk? About the Role As AI Governance Director, you will own and evolve the end-to-end AI and model governance framework on behalf of the Data Science function. You will provide strategic leadership, helping … responsibly while balancing regulatory compliance, risk management, innovation, and business outcomes. This role partners closely with technical, legal and product stakeholders to embed effective governance into how we use AI. Responsibilities Own the end-to-end AI and model governance framework on behalf of the Data Science function, including policy ...

IT Security Governance, Risk & Controls Analyst

Location
Greater London, England, United Kingdom
your work feels meaningful, you will feel at home at Ricoh. #RicohEurope What you will be doing We’re looking for an IT Security Governance, Risk & Controls Analyst to help strengthen the security, governance and resilience of our European IT environment. This is an exciting opportunity for someone who enjoys … working across security governance, technology risk and controls , helping organisations understand their security posture and make informed decisions about risk. Working closely with infrastructure, cloud, identity and operational IT teams, you’ll help develop and embed security policies, standards and controls, manage technology risks and support assurance activities across ...

Cybersecurity Engineer

Location
United Kingdom
common security risks and misconfigurations. Monitor and analyze security logs and alerts, fine-tuning detections and response playbooks. Risk & Compliance Support Work with GRC and compliance teams to implement security controls aligned with ISO 27001, NIST, SOC 2, and GDPR. Support security reviews for third-party vendors ...

Information Security Consultant

Location
United Kingdom
managing directors, boards, compliance officers and IT leads. Support scoping and proposal work for new engagements, including discovery workshops and drafting Statements of Works. Governance, risk and compliance Lead gap analyses and ongoing compliance monitoring against Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance and the GFSC Cyber Security Rules ...

Principal OT Security Consultant

Location
Greater London, England, United Kingdom
consultants,includingmentoring, coaching, performance management, and career development support. Support the ongoing development of other Bridewell capabilities in areassuch as OT security architecture,GRC, threat intelligence, or incident response. Oversee training pathways,success planningand technical competency development forconsultants ranging from Senior Lead to Consultant level. 5. Strategic & Organisational Contribution Help ...