26 to 50 of 185 GRC Jobs in the UK excluding London

number of varying consultancy assignments. Due to the potential variety in assignments your responsibilities will range from developing security architectures, to providing guidance on GRC activities. Other responsibilities will include: Providing security expertise for major system procurements and Agile programmes to ensure secure delivery; Identifying, analysing and evaluating information risks ...

CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

security awareness programme, delivering training, phishing simulations and engaging security communications Develop, maintain and improve security policies, standards, procedures and incident response playbooks Support governance, risk and compliance activities, ensuring security controls, backup and disaster recovery processes remain effective Produce regular security reporting and metrics, providing insight into vulnerabilities, patch ...

enhance security baselines, configuration standards, and policy enforcement across the estate. Lead continuous improvement initiatives across detection, response, automation, and cloud security posture. Support governance activities including risk assessments, audits, and compliance reviews. Technical Experience: Strong hands-on experience with Microsoft Defender XDR, Intune, Entra ID, Azure security controls, and ...

Security Analyst - GRC and Security Awareness focused Permanent - 50k- 60k + strong benefits Location: Hybrid - Leatherhead Your new company: A leading construction and development company in Surrey are currently looking for an IT Security Analyst to come in and support the existing IT Security Manager with ...

GRC Modernization Specialist, Malvern, PA, US GRC Modernization Specialist Responsibilities Role Overview As part of Client's GRC Modernization Program, we are seeking experienced Control Design & Modernization Specialists to help transform and standardize the control environment across Enterprise Security & Fraud (ES&F). This role is focused on designing … approaches and drive alignment on future-state control designs. Build consensus across diverse stakeholder groups and ensure control designs meet business and regulatory expectations. GRC Modernization Support Contribute to the development of enterprise control libraries, control standards, taxonomies, and framework mappings. Support broader GRC modernization initiatives focused on improving control ...

days onsite MUST BE PAYE THROUGH UMBRELLA Role Description: The Senior Security Incident Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership, assurance, and strategic oversight of security incident management across a complex multi-supplier environment. The role is responsible for ensuring suppliers manage security incidents … consistently, effectively, and in accordance with client policy, regulatory obligations, and operational risk requirements. Acting as the primary OI lead for incident governance, the consultant provides a consolidated view of incident risk, drives supplier accountability, and supports continual improvement across the incident management life cycle. This is a governance, assurance ...

recommending improvements to controls. Provide assurance across both on-premises and cloud environments, ensuring consistent security coverage. Assess and Manage Security Risk Collaborate with GRC teams, security architects, and business stakeholders to conduct risk assessments, define mitigations, and document outcomes. Work closely with IT teams to validate and assure ...

CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

GRC Analyst Location: Manchester, Hybrid | 80% remote, 20% onsite Duration: 31/10/2031 Rate - £480 - £520 CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years MUST … frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings Present governance information to client stakeholders and governance forums Support strategic ...

months Location: Inverness or Preston | 5 days onsite The Senior Security Incident Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership, assurance, and strategic oversight of security incident management across a complex multi-supplier environment. The role is responsible for ensuring suppliers manage security incidents consistently … effectively, and in accordance with client policy, regulatory obligations, and operational risk requirements. Acting as the primary OI lead for incident governance, the consultant provides a consolidated view of incident risk, drives supplier accountability, and supports continual improvement across the incident management lifecycle. Key Responsibilities Security Incident Governance Supplier Governance ...

Cyber) Information Security Consultant GRC (Governance, Risk and Compliance) £45,000 - £55,000 depending on experience REMOTE WORKING Own transport is essential to fulfil on-site consultancy visits M-F 8:30 am to 5:30 pm with an hour for lunch We are seeking a full-time GRC/ ...

General Controls is well managed. Promote best practise and help identify automated techniques both for operating and testing controls Collaborate with other GRC functions and IT management to ensure standardisation of ITGCs with other IT Controls operated across the business and with other regulatory frameworks Skills & Qualifications Ideal skills Experience ...

front line, plays a key part in this mission. Here’s how you will contribute... Providing support to different Security functions, including OT Security, Governance Risk and Compliance, Security Assurance and other key business needs Ensuring security metrics are well documented and presented at monthly reviews Being a subject matter ...

Build strong relationships with stakeholders across technology and business functions. Communicate complex technical concepts clearly to both technical and non-technical audiences. Contribute to governance, risk, compliance and security discussions where required. Support the delivery of strategic technology initiatives and digital transformation programmes. To find out more about Computer Futures ...

Location: Inverness or Preston (100% Onsite - 5 days/week) Contract Duration: Until March 31st, 2027 Rate: Inside IR35 Are you an experienced Cyber Governance/Information Assurance Consultant with a strong understanding of Digital Certificate Lifecycles and SIAM multi-supplier environments? We are seeking a Cyber Security Consultant … join an Operational Integrator (OI) team. This is a pure governance, assurance, and coordination role. You will govern suppliers, ensure policy compliance, manage certificate risk, and build executive reporting dashboards. Key Responsibilities: Oversee and govern certificate lifecycle management across multiple external suppliers. Ensure supplier processes align with client security policies ...

Access to cutting-edge cloud and cyber security technologies Work alongside highly experienced architects and cyber specialists Diverse project portfolio spanning cloud security, architecture, governance and risk Opportunity to influence strategic security decisions at senior stakeholder level Key Responsibilities of a Security Architect Design secure enterprise and cloud architecture solutions … practical security designs Develop and maintain security architecture patterns, standards and frameworks Conduct threat modelling, security assessments and risk reviews Advise clients on security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure and GCP environments Evaluate and recommend security technologies including IAM, SIEM, CASB and ...

Digital Certificate Management Consultant to join a large, multi-supplier (SIAM) environment, operating within the Operational Integrator (OI) function. This is a governance, coordination and assurance role covering digital certificate management across all suppliers - it does not involve certificate administration, PKI operations, cryptographic engineering or technical certificate deployment. Key Responsibilities … life cycle activities (issuance, renewal, revocation, replacement) Maintain visibility of certificate risk across the supplier landscape, supporting risk assessment, risk acceptance and escalation through governance forums Produce consolidated certificate reporting, dashboards and metrics for operational and security governance boards Define evidence requirements and support internal/external audit and assurance ...

serving clients worldwide, our powerful, enterprise-ready products are fuelled by beqom pay intelligence. Role Overview We are looking for an experienced and pragmatic GRC Manager to build, own, and continuously strengthen beqom's governance, risk, and compliance function. This role will ensure that beqom operates with a robust, scalable … and commercially effective GRC framework across our international footprint - while meeting the expectations of enterprise customers in highly regulated sectors, including banking and financial services. Reporting to the Head of Legal, you will own the company's compliance governance model, working closely with Legal, Security, Product, Engineering, Finance, People, and ...

About Waystone Waystone is a leading asset‐servicing solutions provider of institutional governance, administration, risk and compliance services to financial institutions. With over 25 years’ experience and a comprehensive range of specialist services to its name, Waystone helps our clients structure, operate and grow through our expertise, innovation and digitisation ...

maturity Overseeing a modern technology stack including React, Node.js, JavaScript and TypeScript Leading the organisation’s ISO 27001 implementation through to certification Strengthening security, governance, risk and compliance Overseeing an AWS cloud environment and modern cloud-native architecture Identifying and implementing practical AI opportunities across products, engineering and internal operations ...

and operation. You will lead technically demanding client work, either working hands-on yourself or directing a project team. This is not primarily a governance, risk and compliance role. Nor are we looking for someone who treats compliance with standards as the end goal. Established standards and techniques will often ...

Advisor serves as a trusted expert partner to both technical teams and business leadership. Domain Expertise (Any Combination of the Following) Security Strategy, Governance, Risk & Compliance (GRC) Security Architecture & Zero Trust Framework Design Threat Intelligence & Incident Response Advisory Cloud Security (AWS, Azure, GCP) OT/ICS/SCADA Cybersecurity Regulatory … senior leadership, providing strategic guidance on risk posture and security investments. Develop and present cybersecurity roadmaps, maturity improvement plans, and investment justifications. Lead cybersecurity governance initiatives including policy development, standards, and framework alignment. Oversee and direct security assessments, penetration testing programmes, and red team exercises. Advise on regulatory compliance obligations ...