101 to 125 of 234 GRC Jobs in the UK excluding London

About Us Waystone is a leading provider of institutional governance, administration, risk and compliance services to the asset management industry. With over 25 years’ experience, we support many of the world’s largest asset managers, providing a comprehensive range of specialist services from a global network of offices. The Platform … Manage core infrastructure lifecycle tasks – vulnerability remediation and patching, upgrades, scaling and decommissioning across the Windows and Linux estate. Drive the adoption of cloud governance policies, security standards and architectural best practice, and help maintain continuous compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). ...

audit readiness, compliance programs and evidence-based assurance across frameworks such as ISO 27001, GDPR, SOC 2 and GxP Providing leadership on risk management, governance and security strategy Partnering with customers, auditors and key stakeholders on security reviews, assurance activities and regulatory compliance Supporting organizational readiness for emerging regulations, including … What we'll look for We're interested in professionals with experience in several of the following areas: Security leadership, governance, risk and compliance (GRC) Cloud security architecture and security strategy ISO 27001, GDPR, SOC 2, GxP, 21 CFR Part 11 or similar regulated frameworks Audit leadership, customer assurance and ...

capabilities that let colleagues discover, access, understand, share and use data with confidence, accelerating science, operations and decision-making. You will shape product strategies, governance and operating practices from the earliest stages, turning uncertainty into clear plans and scalable services. Do you thrive on translating user needs and regulatory requirements … adoption at pace? Accountabilities: Data & Information Marketplace Strategy and Operations: Define and evolve marketplace strategy, capabilities and operating practices; contribute to the enterprise roadmap, governance and prioritisation to increase adoption, compliance and user satisfaction. Marketplace Product Ownership and User Experience: Own marketplace products and services end-to-end; translate user ...

objectives. This role provides technical leadership across ServiceNow implementations, integrations, platform architecture, and modernization initiatives while ensuring adherence to best practices, security standards, and governance frameworks. The ideal candidate will possess deep expertise in the ServiceNow platform, strong architectural skills, and the ability to lead cross-functional teams in delivering … ServiceNow solutions aligned with enterprise architecture standards. Define platform architecture, integration patterns, data models, and technical roadmaps. Lead architectural reviews and provide technical governance for ServiceNow implementations. Ensure platform scalability, performance, reliability, and maintainability. Evaluate and recommend new ServiceNow capabilities and emerging technologies. Technical Leadership Provide technical direction to developers ...

experimentation to production-grade, enterprise-scale AI services.You will work with technology, engineering, operations and business leaders to establish the platforms, operating models, governance and reliability practices required to run AI-enabled services safely, effectively and at scale. Acting as a trusted advisor to senior stakeholders, you will shape client … and model performance drift. Implement controls, feedback loops and automated guardrails to ensure AI services remain secure, trusted and cost-effective.• Responsible AI & Platform Governance: Design and embed AI governance frameworks, model risk controls, compliance measures and responsible AI practices that address security, regulatory and ethical requirements while supporting innovation ...

experimentation to production-grade, enterprise-scale AI services.You will work with technology, engineering, operations and business leaders to establish the platforms, operating models, governance and reliability practices required to run AI-enabled services safely, effectively and at scale. Acting as a trusted advisor to senior stakeholders, you will shape client … and model performance drift. Implement controls, feedback loops and automated guardrails to ensure AI services remain secure, trusted and cost-effective.• Responsible AI & Platform Governance: Design and embed AI governance frameworks, model risk controls, compliance measures and responsible AI practices that address security, regulatory and ethical requirements while supporting innovation ...

track, and report control gaps, risks, and non-compliance issues to stakeholders, and support the development of remediation recommendations. Maintain ServiceNow (or an equivalent GRC/ITSM platform) workflows for remediation tracking and control lifecycle management. Collaborate with cross-functional technical and compliance stakeholders to ensure testing is consistent, well … NIST, CIS Controls, SOC 2). Working knowledge of automated control testing tools (e.g., Qualys, Tenable, Rapid7, or similar platforms). Experience with GRC or ITSM platforms such as ServiceNow, Archer, MetricStream, or similar for control and remediation tracking. Experience with Microsoft security tooling (e.g., Defender for Endpoint, Intune, Sentinel ...

help this iconic media organisation find an experienced Technology Risk and Controls Manager for a 12 month FTC. Reporting into the Head of GRC, you'll provide assurance over technology controls during an exciting period of change and transformation. This is a hands-on role in a hybrid setup; based ...

your company grows and changes, which is why we are committed to delivering cost effective Solutions. We are looking for a 3+ Experience Cybersecurity GRC Analyst for our growing team. As a Cybersecurity GRC Analyst you will be responsible for the: Development, implementation, and continuous improvement of VPN’s Information ...

months Location: Inverness or Preston | 5 days onsite The Senior Security Incident Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership, assurance, and strategic oversight of security incident management across a complex multi-supplier environment. The role is responsible for ensuring suppliers manage security incidents consistently … effectively, and in accordance with client policy, regulatory obligations, and operational risk requirements. Acting as the primary OI lead for incident governance, the consultant provides a consolidated view of incident risk, drives supplier accountability, and supports continual improvement across the incident management lifecycle. Key Responsibilities Security Incident Governance Reporting & Executive ...

Manage the delivery of virtualisation, migration, cloud adoption, and infrastructure modernisation initiatives. Develop and maintain project plans, RAID logs, delivery roadmaps, milestones, dependencies, and governance artefacts. Ensure successful delivery against agreed scope, budget, timelines, quality standards, and business outcomes. Drive proactive management of risks, issues, assumptions, and dependencies. Coordinate project … resources across infrastructure, engineering, architecture, security, operations, and vendor teams. Facilitate project governance forums, steering committees, and executive reporting. Technical Infrastructure Delivery Lead infrastructure migration activities including: VMware and hypervisor migrations Server modernisation programmes Data centre exit and consolidation initiatives Cloud migration and transformation projects Operating system upgrades and refresh ...

objectives. Conduct regular service reviews, presenting performance metrics, risk assessments, and improvement roadmaps. Manage client expectations proactively, ensuring alignment between delivery and contractual commitments. Governance, Risk & Compliance Ensure contractual compliance, regulatory adherence and fulfilment of all security and governance obligations. Maintain compliance with our Personnel Security policies, including Personnel Reliability ...

objectives. Conduct regular service reviews, presenting performance metrics, risk assessments, and improvement roadmaps. Manage client expectations proactively, ensuring alignment between delivery and contractual commitments. Governance, Risk & Compliance Ensure contractual compliance, regulatory adherence and fulfilment of all security and governance obligations. Maintain compliance with our Personnel Security policies, including Personnel Reliability ...

and assurance evidence Identifying and communicating security risks to both technical and non-technical audiences Reviewing security controls and recommending practical, proportionate improvements Supporting governance, assurance and compliance activities Working closely with customers, project teams and suppliers throughout the project lifecycle Building trusted relationships and acting as a valued advisor … clients What We're Looking For Experience working within Defence or other highly regulated environments Experience in Information Assurance, Security Assurance, Governance, Risk & Compliance, or Cyber Security Consulting Strong stakeholder engagement and communication skills Experience producing security documentation, assessments and assurance evidence Experience working with modern IT environments, with knowledge ...

ordinate platform onboarding, migration, and upgrade programmes, ensuring minimal disruption to operations. Ensure integration design and delivery adheres to security, compliance, and data governance standards. Operations & Service Management Own platform operational health, including incident management, problem resolution, and root‐cause analysis, aligned to the group service management framework. Define and … into business outcomes and helping stakeholders understand value delivery. Produce clear, executive‐level reporting on platform performance, risks, costs, and strategic initiatives. Facilitate platform governance forums, steering groups, and working groups as required. Manage communications around planned maintenance, incidents, and significant platform changes to minimise business impact. Commercial & Financial Management ...

Information Security GRC Lead Application Deadline: 4 October 2026 Department: Information Governance Employment Type: Permanent - Full Time Location: Chippenham, Wiltshire Reporting To: Carrie Coles Compensation: £50,000 - £60,000/year Description No day will be the same - here are some of the highlights Reporting into the Head of IGRC … this role provides information security GRC oversight, coordination and assurance across IT security, resilience and control governance, working closely with Technology Teams who retain ownership of technical implementation and day-to-day system administration. We are seeking a practical and technically capable Information Security GRC Lead to help strengthen Good ...

part of our supportive, collaborative Information Security team, you’ll play a key role in strengthening our security capabilities while building your expertise across governance, risk and compliance (GRC) and technical security. Job Title: Information Security Analyst Location: Liverpool City Centre, Hybrid working available Working Hours: Monday to Friday, 37.5 … risk Practical experience conducting security risk assessments and reviewing security controls Experience identifying control weaknesses and supporting assurance activities Good understanding of information security governance, risk management, and information handling requirements Ability to analyse technical information and translate findings into business risk Experience working with technical and non-technical stakeholders ...

more of the following is highly desirable: IT Service Management (ITSM), Financial Management (FM) Project Portfolio Management (PPM), DevOps, Agile, HR Service Delivery (HRSD), Governance Risk and Compliance (GRC), Security Operations, IT Operations Management (ITOM) including Cloud Management, Event Management, Infrastructure Discovery/Mapping or any complementary technologies such ...

more of the following is highly desirable: IT Service Management (ITSM), Financial Management (FM) Project Portfolio Management (PPM), DevOps, Agile, HR Service Delivery (HRSD), Governance Risk and Compliance (GRC), Security Operations, IT Operations Management (ITOM) including Cloud Management, Event Management, Infrastructure Discovery/Mapping or any complementary technologies such ...

Analyst will be responsible for supporting security compliance and customer trust enterprise-wide. The individual will support various functions, including customer response, compliance audits, governance review, controls monitoring, third-party risk management, contractual reviews, and other support as needed for the Information Security team. This role will work closely with … required for any non-compliance issues identified. WHAT YOU NEED TO BE SUCCESSFUL IN THIS ROLE 2+ years of information security experience, in particular Governance, Risk & Compliance (GRC) or with an IT audit background. Experience implementing or auditing information security programs based on industry frameworks such ...

leading the technical side of the compliance automation function of the team. A core part of the role is analyzing controls within the GRC platform to ensure they are accurate, meet framework requirements, and pull the necessary evidence to prove effectiveness. You will also partner with engineering teams to embed … make workflows and tooling more efficient. Manage compliance stack. Oversee control mapping, evidence collection, and monitoring workflows, and manage the integrations that connect the GRC platform to cloud platforms and internal systems. Establish control monitoring. Translate technical controls into automated, continuous checks, expanding monitoring coverage across the compliance stack and ...

level through to Principal level. You will work remotely, with travel to UK client sites when required, delivering practical cyber-security consultancy across assurance, governance, risk and secure technology delivery. What you'll be doing Delivering Security Assurance, accreditation and Secure by Design activity across complex client programmes. Producing and … Cases, RMADS, security management plans, risk assessments and assurance evidence. Completing technical design reviews, security gap assessments and risk-based remediation activity. Supporting security governance, control assessment and continuous-assurance activity. Advising client stakeholders on security architecture, cloud, SaaS, infrastructure, networks and secure software delivery. Building trusted relationships with technical ...

will have a primary focus on external stakeholders and compliance. Working primarily in the disciplines of Architecture and consultancy, Identity and Access Management and Governance, Risk and Compliance you will be supported by a security operations and engineering team to deliver security, business value and cyber resilience. This role will … managed on risk registers. Is this the role for you? We are looking for someone who can shape change and has an experience in GRC, security architecture, consultancy and identity management. Our ideal candidate will have a focus on improvement, a passion security and strong technical skills. To be successful ...

organisation’s IT infrastructure, systems and services. Lead technology and digital transformation initiatives that improve operational efficiency and business performance. Manage IT governance, cybersecurity, risk and compliance, ensuring robust controls and business continuity. Build strong relationships with stakeholders, clients, suppliers and technology partners. Manage the IT budget and ensure effective … Knowledge of Microsoft Azure, Microsoft 365, cloud infrastructure, hybrid environments and enterprise architecture. Familiarity with ISO 27001, Cyber Essentials, ITIL or other recognised IT governance and service management frameworks. Professional certifications such as CISSP, CISM, ITIL, TOGAF, Microsoft Azure or equivalent. What You'll Get Competitive salary and benefits package. ...

priorities with organisational objectives and government security standards. Represent the SOC in leadership forums and serve as the primary liaison with senior management, governance, assurance, and key stakeholders. Lead the operational day to day delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing … strengthen the organisation's security posture. Provide direction, guidance, and mentorship to Security Analysts. Foster collaborative culture that promotes knowledge sharing across Security Operations, GRC, third-party service providers, and Legal. About you. Proven experience managing diverse teams, including permanent staff, contractors, and third-party suppliers. Advanced experience in managing ...