1 to 25 of 235 GRC Jobs in the UK excluding London

Head of Technology GRC is responsible for building, leading and continuously developing the Group Technology GRC function, translating the Technology Risk, Governance & Assurance strategy into effective services, processes, controls and assurance activity across the Group. The role provides a unique opportunity to shape and lead the long-term Technology GRC … complex multi-fascia environment. This is a leadership role with accountability for the performance, capability and day-to-day operation of the Technology GRC function and the transition from programme delivery to a sustainable long-term operating model. The role leads a multi-disciplinary team spanning technology risk, controls and ...

Senior Technology Risk & Controls Governance Consultant - Banking Client - London Location: London - Hybrid (8 days onsite per month) Day Rate: Circa £700 per day Contract Type: Inside IR35 - Umbrella Company Required Industry: Financial Services/Banking We are currently seeking an experienced Senior Technology Risk & Controls Governance Consultant to join … leading global financial services organisation based in London. This is an excellent opportunity to play a pivotal role in strengthening Technology Risk Management, Cybersecurity Risk Governance and Control Oversight across a complex, highly regulated technology environment. Working closely with the Head of IT & Security Risk Management, you will support ...

NESO's Security Governance Framework, ensuring alignment with organisational strategy, risk appetite and regulatory obligations. Develop and maintain security policies, standards, control frameworks and governance processes across cyber, technology and operational environments. Act as a strategic advisor to the CISO on governance, risk and assurance matters. Threat-Led Risk Management … seeking a strategic security leader with the ability to operate at both executive and technical levels. You will combine strong governance and risk leadership capabilities with sufficient technical credibility to challenge technology decisions, understand emerging threats and influence security outcomes across complex environments. Essentials Significant experience leading Cyber Security Governance ...

compensation related questions, including pay details for this role.**Job Description:**The Technology Solutions Technology Control Office (\"TCO Europe\") is responsible for providing governance, oversight, and challenge to ensure that technology services operate within TD's risk appetite and comply with applicable enterprise standards, regulatory and audit obligations, and internal … control requirements.. The TCO Europe Specialist is required to work closely with both the local and international technology, business and governance teams to strengthen the control environment, manage technology risk and resilience, support regulatory compliance initiatives, and drive the remediation of identified control gaps, audit findings, and regulatory actions. ...

compensation related questions, including pay details for this role. Job Description: The Technology Solutions Technology Control Office ("TCO Europe") is responsible for providing governance, oversight, and challenge to ensure that technology services operate within TD's risk appetite and comply with applicable enterprise standards, regulatory and audit obligations, and internal … control requirements. The TCO Europe Specialist is required to work closely with both the local and international technology, business and governance teams to strengthen the control environment, manage technology risk and resilience, support regulatory compliance initiatives, and drive the remediation of identified control gaps, audit findings, and regulatory actions. ...

Lead, you will play a central role in maintaining and developing the Group's cyber governance framework, supporting subsidiaries with security compliance, audit readiness and risk management. You will also play an important role in integrating newly acquired businesses into the Group's cyber governance framework, building relationships with subsidiary … Risk & Compliance Lead Responsibilities Reporting to the Group Information Security Officer, you will act as a key point of contact for cyber governance, risk and compliance activity across the Group. Responsibilities will include: Acting as the main point of contact for cyber security audits and audit readiness across the Group. ...

and Governance Risk Compliance Solutions Architect (GRC) to lead the architecture of enterprise solutions across ServiceNow, with particular emphasis on Risk Management and Policy and Compliance Management. The ideal candidate will combine deep ServiceNow platform expertise with practical knowledge of governance, risk, controls, audit and regulatory compliance processes. This role … automation and reporting. Responsibilities: Lead the architecture, design and implementation of ServiceNow Integrated Risk Management solutions, with primary focus on Risk Management and Policy and Compliance Management. Partner with risk, compliance, audit, security, legal and business stakeholders to understand obligations, operating models and business outcomes, and translate them into robust ...

Global GRC team and Digital Compliance leadership team you will have responsibility for leading bp’s global GRC engineering teams and compliance management services portfolio. You will own the Global GRC technology, AI and data strategies, lead operational teams and oversee delivery squads to drive bp’s GRC capabilities.The Digital … Governance Risk and Compliance organization fosters a culture of transparency, accountability, and trust by promoting good governance, effective risk management, and regulatory compliance. These capabilities help bp balance security with usability, optimize technology investments, and enable bp’s business to meet its compliance obligations in all jurisdictions in which ...

Head of Digital Security, Risk & Governance Department: OCU Digital Employment Type: Permanent - Full Time Location: Preston Reporting To: James Mayers Description An exciting new opportunity for a Head of Digital Security, Risk & Governance to be based in Preston. What if you could take ownership of the security, risk and governance … spanning the UK, ANZ and India, our business is growing, evolving and becoming increasingly digital. We are looking for a Head of Digital Security, Risk & Governance to make sure our security capability grows with it. This is a role with genuine scope and influence. You’ll lead the strategy that ...

annual bonus + excellent benefits Contract: Permanent Help protect critical services through effective cyber security governance Are you passionate about cyber security, data governance and compliance? Do you enjoy translating complex security requirements into practical controls that make a real difference? We're looking for an experienced Cyber Security GRC … growing Cyber Security team. In this role, you'll play a key part in strengthening our cyber security posture through governance, risk management and compliance activities, while helping to ensure our information assets remain protected. A significant focus of the role will be the administration and continual improvement of Microsoft ...

annual bonus + excellent benefits Contract: Permanent Help protect critical services through effective cyber security governance Are you passionate about cyber security, data governance and compliance? Do you enjoy translating complex security requirements into practical controls that make a real difference? We're looking for an experienced Cyber Security GRC … growing Cyber Security team. In this role, you'll play a key part in strengthening our cyber security posture through governance, risk management and compliance activities, while helping to ensure our information assets remain protected. A significant focus of the role will be the administration and continual improvement of Microsoft ...

DORA and EBA guidance. Familiarity with risk and control frameworks such as NIST, ISO 27001, and COBIT. Proven ability to produce executive management information and risk reporting. Exceptional communication, stakeholder management, and organisational skills. An evidence-led approach, with the ability to influence without direct authority. ### Why Join This … robust governance while enhancing their career in a rapidly evolving sector. If you are a strategic thinker with a passion for Cyber Governance, Risk, and Compliance, this is the opportunity for you! Interested candidates are encouraged to apply now and take the next step in their professional journey with ...

Global GRC team and Digital Compliance leadership team you will have responsibility for leading bp's global GRC engineering teams and compliance management services portfolio. You will own the Global GRC technology, AI and data strategies, lead operational teams and oversee delivery squads to drive bp's GRC capabilities. … Digital Governance Risk and Compliance organization fosters a culture of transparency, accountability, and trust by promoting good governance, effective risk management, and regulatory compliance. These capabilities help bp balance security with usability, optimize technology investments, and enable bp's business to meet its compliance obligations in all jurisdictions in which ...

take ownership of key governance activities and make a meaningful impact across a large-scale organisation. Reporting directly to the Cyber Governance, Risk & Compliance (GRC) Manager, you'll play a key role in ensuring that information assets are appropriately identified, classified, retained, protected and managed in line with internal policies … reports, management information and recommendations for senior stakeholders. Identify opportunities to improve information management processes, controls and operational efficiency. Support wider Cyber Governance, Risk and Compliance initiatives. Skills and Experience Essential Previous experience in an Information Governance, Information Management, Data Governance or related role. Strong understanding of information classification, retention ...

track remediation actions and support cyber risk management. Produce security policies, standards, assessment reports, compliance evidence and executive reporting. Support audits, control reviews, assurance and compliance assessments. Engage stakeholders, facilitate workshops and gather evidence to support security initiatives. Contribute to supplier assurance and third-party risk management. Improve security governance … public sector, regulated or enterprise environments. Knowledge of GovAssure and public sector security requirements. Familiarity with Microsoft Azure and AWS. Experience with GRC platforms and risk management tools. Understanding of Secure by Design and security architecture principles. Certifications One or more of the following would be advantageous: ISO 27001 Lead ...

GRC framework, ensuring compliance with global regulations and industry standards, and maturing the organization's overall cybersecurity posture. Key Job Accountabilities: IT Governance, Risk, and Compliance Program Leadership: Develop and maintain the Cybersecurity GRC framework, policies, standards, and procedures in alignment with regulatory requirements (e.g., ISO 27001, NIST CSF, Cyber … Program roadmap, tracking and reporting on key performance indicators (KPIs) and key risk indicators (KRIs) to executive leadership. Drive continuous improvement in security controls and GRC processes by implementing best practices and automating controls where feasible. Talent Management and Core Values: Responsible to exemplify and hold their team accountable ...

forward-deployed engineering, we deliver business results for regulated and mission-critical industries where governance, sovereignty and uptime are non-negotiable. The Security Risk and Compliance Management Specialist (Level 5) acts as an advocate in development of overall information security program globally. You will create and perform global IT Risk … and Compliance assessments, and assist in the development and execution of information security, compliance, and risk best practices globally through audits, assessments, and policy-making. We will depend on you to develop systems to control and monitor assets in terms of operational risk, and evaluate alternative means of reducing ...

About the Role Are you early in your IT or cybersecurity career and looking to step into the fast-growing field of Governance, Risk, and Compliance (GRC)? You don’t need prior Governance, Risk and Compliance (GRC) experience to thrive in this role, just a solid grasp of fundamental … team. In this role, you will act as a key liaison between technical and business teams, helping build, maintain, and monitor our IT policies, risk management frameworks, and security compliance standards. Whether your background is in IT Support 1st/2nd line, you hold a relevant degree, or an entry ...

compliance activities while helping shape the organisation's approach to cyber security and AI governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third … party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. ...

Internal Controls and Cyber Security teams to coordinate audits, evidence gathering and remediation activities. Produce meaningful risk dashboards, management information, Key Risk Indicators (KRIs) and governance reporting for senior leadership and risk forums. Collaborate with Technology, Retail Operations, Finance, Procurement, Legal and Supply Chain teams to embed effective risk management … recommend practical improvements. Excellent communication and stakeholder management skills, with the ability to engage technical and non-technical audiences. Experience working with Governance, Risk & Compliance (GRC) platforms such as OneTurst Passionate about strengthening governance, improving controls and enabling secure business growth across a complex global retail organisation. Professional certifications such ...

and legislation relevant to client company information security and assurance. Act as the client company point of contact for information security governance, risk, assurance and compliance matters. Support client company governance forums by providing clear reporting, insight and challenge on key information security risks, audit outcomes, control maturity and remediation … Support the development, review and alignment of client company information security policies, standards, procedures and guidance. Maintain a proportionate client company information security risk and compliance approach, including information security risk assessments, treatment plans, escalation, tracking and a rolling compliance schedule. Review, challenge and track client company control actions, vulnerabilities ...

Premises) ISO 27001 PCI DSS GDPR GovAssure Framework NCSC Cyber Assessment Framework (CAF) Secure by Design Governance, Risk and Compliance (GRC) Risk Assessment and Risk Management Identity and Access Management (IAM) Authentication and Authorisation Cryptography Network Security Security Protocols Security Controls Design Cyber Security Compliance Information Security Strong understanding … Governance, Risk and Compliance (GRC). Comprehensive knowledge of the Confidentiality, Integrity, and Availability (CIA) triad. Ability to design secure enterprise solutions across cloud and hybrid environments. Excellent analytical, problem-solving, and decision-making skills. Strong communication skills with the ability to explain technical concepts to both technical and ...

looking for a talented Information Security Manager to join our growing function. In this role, you'll take ownership of key governance, risk and compliance activities, drive security projects across our global business, and work closely with technology and business teams to strengthen our security posture while enabling innovation and … bring: Proven experience in Information Security, Cyber Security, Security Risk Management, or a similar security‐focused role. Strong knowledge of Governance, Risk & Compliance (GRC) frameworks and practices. Hands‐on experience of Third‐Party Risk Management (TPRM). Experience managing and responding to security incidents. Solid technical security understanding across infrastructure ...

AVEVA is creating software trusted by over 90% of leading industrial companies. Job Title: IT Risk - Senior Manager. Location: London or Cambridge. Employment Type: Full-time/Hybrid (50% in office). As a software business, technology risk and cyber/security risk directly impact product availability, customer trust, and … regulatory commitments. The IT Risk Senior Manager is accountable for running a consistent, evidence-based technology risk lifecycle IT, ensuring risks are identified, assessed, treated, monitored, and reported in line with risk appetite. The IT Risk Senior Manager will be responsible for the management of all risks across IT. ...

established global technology company with a strong base in Edinburgh. This is a senior role within the Information Security team, focused on governance, risk and compliance, with responsibility for helping shape and continually improve the organisation’s security framework across a global environment. You’ll take ownership of key GRC … addressed. There is an evolving focus on AI governance too. As the business continues to adopt AI technologies, you’ll help establish the security and risk framework around their use, including acceptable‐use guidance, risk assessments and appropriate controls for new AI tools and services. You’ll also have ...