251 to 275 of 598 GRC Jobs in the UK

Manager - Audit, Risk, and Controls London

Location
Greater London, England, United Kingdom
across key business processes. Audit Program & Governance Reporting & Communication Design and oversee the internal audit plan, ensuring comprehensive coverage of key business processes, systems, and risk areas across infrastructure, operations, product, and corporate functions. Conduct or coordinate internal audits across financial, operational, compliance, and IT domains, documenting findings and recommendations … mitigation strategies, and monitoring. Establish control testing protocols and coordinate periodic control effectiveness assessments. Identify control gaps and recommend improvements to strengthen operational resilience and compliance posture. Support the design of preventive and detective controls for high-risk areas (e.g., access management, financial transactions, data security). Maintain a controls ...

Security GRC Manager

Location
Greater London, England, United Kingdom
access. Security at Teya is three connected teams: Security Engineering builds and runs technical controls, Security Operations runs monitoring and incident response, and Security GRC owns policy, risk and regulatory alignment. As Security GRC Manager, reporting to the CISO, you will lead a team of three that turns … and EU regulation into clear, engineer-able and increasingly automated ways of working. The function is mid-transformation. Vanta is being rolled out, the risk approach is being redefined, findings are being consolidated and third-party risk is being rebuilt with Procurement. Your job is to finish that shift, make ...

Senior Data Governance Analyst

Location
Swindon, England, United Kingdom
Senior Data Governance Analyst - Zenith Location: Cheltenham, Gloucestershire The Role: We are looking for a Senior Data Governance Analyst to support the successful delivery of a major business transformation programme. In this role, you will help embed data governance practices across the programme lifecycle, ensuring data is trusted, well-managed … and aligned with business objectives. Working closely with business stakeholders and project teams, you will establish governance processes, define data ownership and accountability, support data quality initiatives, and help drive the adoption of governance standards across the organisation Key Responsibilities Support the implementation and ongoing operation of the Data Governance ...

IT Cyber Senior Project Manager 328596

Location
Sheffield, England, United Kingdom
doing: Lead the delivery of complex cyber security projects and programmes from initiation through to completion. Manage project plans, budgets, timelines, risks, dependencies and governance activities. Build and maintain trusted relationships with customer stakeholders and executive sponsors. Facilitate programme boards, steering committees and project governance meetings. Work closely with cyber … security engineering or solution design role. Strong stakeholder management and customer-facing skills. Experience managing project budgets, forecasting and financial performance. Strong governance, risk and compliance management capabilities. Experience working with Agile, Waterfall and hybrid delivery methodologies. Excellent communication, leadership and problem-solving skills. Ability to manage multiple priorities while ...

IT Cyber Senior Project Manager 328596

Location
Nottingham, England, United Kingdom
doing: Lead the delivery of complex cyber security projects and programmes from initiation through to completion. Manage project plans, budgets, timelines, risks, dependencies and governance activities. Build and maintain trusted relationships with customer stakeholders and executive sponsors. Facilitate programme boards, steering committees and project governance meetings. Work closely with cyber … security engineering or solution design role. Strong stakeholder management and customer-facing skills. Experience managing project budgets, forecasting and financial performance. Strong governance, risk and compliance management capabilities. Experience working with Agile, Waterfall and hybrid delivery methodologies. Excellent communication, leadership and problem-solving skills. Ability to manage multiple priorities while ...

Cyber Senior Project Manager

Hiring Organisation
Littlefish
Location
Nottingham, East Midlands, United Kingdom
Employment Type
Permanent Contract, Hybrid
Salary
£70,000
doing: Lead the delivery of complex cyber security projects and programmes from initiation through to completion. Manage project plans, budgets, timelines, risks, dependencies and governance activities. Build and maintain trusted relationships with customer stakeholders and executive sponsors. Facilitate programme boards, steering committees and project governance meetings. Work closely with cyber … security engineering or solution design role. Strong stakeholder management and customer-facing skills. Experience managing project budgets, forecasting and financial performance. Strong governance, risk and compliance management capabilities. Experience working with Agile, Waterfall and hybrid delivery methodologies. Excellent communication, leadership and problem-solving skills. Ability to manage multiple priorities while ...

Senior GRC Engineer — AI‐Native, Remote

Location
United Kingdom
Life360 seeks a Governance, Risk, and Compliance expert to manage and innovate our GRC frameworks. This role requires a background in security engineering along with 5+ years of GRC experience. The candidate should be proficient in AI tools, Python programming, and cloud security controls. The position includes a competitively structured ...

Continual Service Improvement & Service Quality Lead

Hiring Organisation
DXC Technology
Location
London, England, United Kingdom
meet UK Government or contractual security obligations.The Continual Service Improvement (CSI) & Service Quality Lead is responsible for driving service excellence through the leadership and governance of continual improvement and quality management across the IT Service Management organisation. The role owns the CSI framework and Quality Management System (QMS), ensuring improvement … processes consistently meet defined quality standards, contractual commitments, security requirements and business objectives. Working closely with Process Owners, Service Delivery Managers, service providers, security and compliance teams, and senior stakeholders, the role drives a data-led approach to service improvement, quality assurance and process maturity.Key ResponsibilitiesDevelop and maintain ...

Applied AI/LLM Lead Product Manager - Vice President

Location
Greater London, England, United Kingdom
patterns and infrastructure to accelerate delivery. Your role will influence how agentic AI is adopted and governed across the firm, ensuring alignment with data governance and control standards. Job Responsibilities: Own the product strategy, vision, and multi-year roadmap for agentic AI products, aligning priorities with business objectives and firmwide … Shape the architecture of agents and supporting infrastructure, advocating for reusable components and shared platform capabilities Prioritize investment across the portfolio using business value, risk, technical feasibility, and reuse potential Collaborate with senior business stakeholders to identify and size opportunities for AI-driven efficiency, risk reduction, or revenue growth Define ...

InfoSec GRC Lead — Hybrid Role (Chippenham)

Location
Chippenham, England, United Kingdom
Good Energy Group is seeking an Information Security GRC Lead in Chippenham, Wiltshire. The role oversees information security governance, risk and compliance across IT security, resilience and control governance, coordinating with Technology Teams to implement and evidence controls. The successful candidate will coordinate security activity, provide guidance, and track remediation ...

Information Security Compliance Lead

Hiring Organisation
Global Resourcing
Location
London, England, United Kingdom
working alongside a talented and supportive team.This is a genuine opportunity to make a borough wide impact, leading the development of a mature security and compliance function while helping to shape the future of information security across the council.About the RoleAs Information Security Compliance Lead, you will be responsible … ISMS) and drive continual improvement.Take ownership of the ISO 27001:2022 compliance journey and maintain certification standards.Develop, implement and maintain security policies, standards, procedures and governance frameworks.Coordinate internal and external audits, ensuring findings are effectively managed and remediated.Work closely with senior leaders and business stakeholders to identify, assess and mitigate ...

Principal Cyber Risk & Audit Consultant (Flexible Working)

Location
Greater London, England, United Kingdom
Methods is a leading digital transformation consultancy in the UK, focusing on governance, risk and compliance to deliver secure, resilient solutions for public and private sectors. The Principal Cyber Security Risk & Audit Consultant role offers leadership in audits, risk frameworks, and stakeholder engagement across regulated environments, with strong development ...

Global Product Senior Manager, AI Enterprise

Hiring Organisation
The Boston Consulting Group
Location
London, England, United Kingdom
decisions and implications clearly.Scale the AI product portfolio responsibly: Improve product reuse and interoperability, establish scalable governance processes, and partner with risk, legal, privacy, and compliance teams to support responsible deployment.Demonstrate product impact: Define success metrics, evaluate adoption and performance, and communicate measurable business outcomes and recommendations to senior leadership.What … partner closely with developers to translate product vision into technical solutions, and help resolve delivery challenges. You will also work with risk, legal, privacy, and compliance teams to ensure AI products meet BCG's quality, security, and governance expectations.Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will ...

Global Product Senior Manager, AI Enterprise

Location
Greater London, England, United Kingdom
and implications clearly. Scale the AI product portfolio responsibly: Improve product reuse and interoperability, establish scalable governance processes, and partner with risk, legal, privacy, and compliance teams to support responsible deployment. Demonstrate product impact: Define success metrics, evaluate adoption and performance, and communicate measurable business outcomes and recommendations to senior … partner closely with developers to translate product vision into technical solutions, and help resolve delivery challenges. You will also work with risk, legal, privacy, and compliance teams to ensure AI products meet BCG's quality, security, and governance expectations. Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants ...

Security GRC Lead — ISO27001, GDPR, PCI

Location
Biggin Hill, England, United Kingdom
Formula 1 is seeking an Information Security Officer to lead GRC initiatives within the IT department. You will drive governance, risk, and compliance programs, coordinating audits and reports for senior stakeholders. You will define and mature the security control framework, manage data governance across discovery, storage, and disposal, and liaise ...

Information Security Officer

Location
Nottingham, England, United Kingdom
primary focus on external stakeholders and compliance. Working primarily in the disciplines of Architecture and consultancy, Identity and Access Management and Governance, Risk and Compliance you will be supported by a security operations and engineering team to deliver security, business value and cyber resilience. This role will involve working with … developing security architecture and patterns. Stewardship of information security risks working with the Business Assurance team on reporting. Focusing on crown jewel systems ensuring risk posture and cyber resiliency needs. Ensuring technical risks form Data Protection Impact Assessments are managed Ensure policy exceptions and risks are recorded and managed ...

Information Security Officer

Location
Reading, England, United Kingdom
primary focus on external stakeholders and compliance. Working primarily in the disciplines of Architecture and consultancy, Identity and Access Management and Governance, Risk and Compliance you will be supported by a security operations and engineering team to deliver security, business value and cyber resilience. This role will involve working with … developing security architecture and patterns. Stewardship of information security risks working with the Business Assurance team on reporting. Focusing on crown jewel systems ensuring risk posture and cyber resiliency needs. Ensuring technical risks form Data Protection Impact Assessments are managed Ensure policy exceptions and risks are recorded and managed ...

Senior GRC Lead: Privacy, AI & Security (Hybrid)

Location
Greater London, England, United Kingdom
Intent HQ Limited in London seeks a Senior GRC Lead – Privacy, AI & Security to run the day-to-day governance, risk and compliance across information security, privacy and AI. You will operate the management systems and maintain risk registers, working with VP, DPO and cross-functional teams. The role emphasizes ...

Director of Information Security

Location
Cambridge, England, United Kingdom
mature its security function during a critical growth phase. This is a hands‐on leadership role requiring a pragmatic security professional who can balance risk management, regulatory compliance, technology innovation, and business enablement. You will work closely with senior leadership to develop and execute a group-wide security strategy whilst … and maintain a robust security framework incorporating industry best practices and a defence-in-depth approach. Drive organisation-wide security awareness, training, and human risk management initiatives. Lead identity and access management, endpoint security, and device governance programmes. Oversee application security, secure software development practices, vulnerability management, code scanning, and ...

Director of Information Security

Hiring Organisation
SoCode Limited
Location
London, United Kingdom
Employment Type
Permanent
Salary
£100000 - £120000/annum
mature its security function during a critical growth phase. This is a hands-on leadership role requiring a pragmatic security professional who can balance risk management, regulatory compliance, technology innovation, and business enablement. You will work closely with senior leadership to develop and execute a group-wide security strategy whilst … and maintain a robust security framework incorporating industry best practices and a defence-in-depth approach. Drive organisation-wide security awareness, training, and human risk management initiatives. Lead identity and access management, endpoint security, and device governance programmes. Oversee application security, secure software development practices, vulnerability management, code scanning, and ...

Senior GRC Lead - Privacy, AI & Security

Location
Gould's Green, England, United Kingdom
Intent HQ is seeking a Senior GRC Lead – Privacy, AI & Security to run day-to-day governance, risk and compliance for information security, privacy and AI. You will operate, monitor and improve the management systems in practice under the VP of InfoSec & Privacy Operations. The role emphasizes privacy controls, data ...

Cyber Security Engineer

Location
Redhill, England, United Kingdom
and HSM devices. Knowledge of wider security, audit, riskand compliance standards including: PCI-P2PE PCI-POI-PTS ISO27701 ISO27005 ISO31000 NIST GDPR Governance,Risk and Compliance tools Experience with quality managementsystems and external audit standards such as ISO 9001. #J-18808-Ljbffr ...

Information Security Manager

Hiring Organisation
Xceptor
Location
Greater London, United Kingdom
Employment Type
Full Time
evidence quality, stakeholder coordination and continuous improvement, working hands-on without a supporting team. Beyond compliance, you’ll build an internal culture of security and compliance, manage security incidents, work with the business on vulnerability management, and advise senior leadership on risk. 🧩 What You’ll Be Doing: Security leadership and … culture • Build and champion and information security and compliance culture across the business. • Advise business and senior leadership on security risks, priorities, and decisions. • Run periodic information security meetings and maintain governance and reporting: the audit and compliance calendar, risk register, findings tracker, KPIs/KRIs, and regular leadership updates. ...

IT Security Engineer

Location
Chichester, England, United Kingdom
email security platforms, working closely with managed security providers Own the organisation's patching and vulnerability management programme, ensuring timely remediation and reporting on risk Manage and maintain network security technologies, including firewalls, SASE, Network Access Control (NAC) and Zero Trust controls Protect manufacturing and OT environments by maintaining secure … programme, delivering training, phishing simulations and engaging security communications Develop, maintain and improve security policies, standards, procedures and incident response playbooks Support governance, risk and compliance activities, ensuring security controls, backup and disaster recovery processes remain effective Produce regular security reporting and metrics, providing insight into vulnerabilities, patch compliance, incidents ...

Information Security Engineer

Location
Greater London, England, United Kingdom
security documentation, policies, procedures, standards and audit evidence. Provide security input into projects, infrastructure changes and technology deployments. Review technical designs and deliver pragmatic, risk-based security recommendations. Communicate security risks, issues and remediation plans to both technical and non-technical stakeholders. Act as a key technical security contact … practical recommendations for stakeholders. Desirable Experience Security certifications such as AZ-500, SC-200, Security+, CISSP, CISM or CEH. Experience supporting security governance, risk and compliance activities. Exposure to security monitoring, threat detection and incident response processes. Experience within healthcare, financial services or other highly regulated environments. What ...