476 to 500 of 598 GRC Jobs in the UK

Manager and other security team members, this role will touch on IAM, SIEM, EDR and vulnerability management tool tweaking, integrating security into project lifecycles, GRC certifications, 3rd party risk and assurance and more. I'm looking for candidates with a self-driven, go-getter personality who are keen to progress … SDLC security Performing vulnerability scanning and remediation Working with the organisation's managed service provider and helping to manage alerts coming through Working with governance colleagues on the Cyber Essentials certification Helping the organisation with 3rd party risk management and assurance What I'm looking for: Experience in a cybersecurity ...

throw at us)- Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements- Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines- Collaborate with cross-functional teams to integrate … using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus- Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows- Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors ...

throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross-functional teams to integrate … using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors ...

their development. Candidates carrying a number of the below skills would be particularly relevant:- Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0 … CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

largest asset managers and provide powerful asset origination capabilities. Together, these underpin our retirement and protection solutions: we are an international player in pension risk transfer, in UK and US life insurance, and in UK workplace pensions and retirement income. L&G Institutional Retirement looks after around 700,000 institutional … around c.700,000 of whom are institutional customers who have had their retirement benefits secured with us. We’re looking for an Information Security GRC Analyst to help strengthen our approach to information and cyber security across our Retirement Retail and Investment business areas. Working collaboratively with technology teams and ...

and hands-on technical support. You’ll work closely with internal teams and customers, helping to resolve technical issues while ensuring that security, confidentiality and compliance remain at the heart of every interaction. The role You will be responsible for: Troubleshooting hardware, software and network-related issues Identifying, triaging and … enjoys being technically hands-on but also wants exposure to cyber security, ISO 27001, compliance and incident management, rather than working in a purely GRC-focused position ...

will engage architects, AI/ML leads, and C-level executives to define Workiva’s role in their AI infrastructure, focusing on data governance, integration, and model orchestration. By positioning Workiva as the system of trust for machine-generated financial, sustainability, and risk data, you will ensure outputs are controlled … fellow Solution Consultants to elevate AI fluency across the organization. Cross-Functional Discovery & Engagement: Lead technical discovery and alignment across both business functions (Finance, GRC, Sustainability) and IT/Security teams to map customer AI programs, identify where the governed core fits, and ensure safe, compliant integration. Deliver Tailored Demonstrations ...

from the Fortune 500 to fast-growing startups, use our no-code platform to onboard, assess, and monitor their vendors, suppliers, and partners across risk, compliance, and ESG. We have processed over 10 million entities for 100,000+ users across 120+ countries, and are backed by Fin Capital, Vertex Ventures … platform solutions, own the solution design from discovery through go-live, and serve as a trusted advisor to stakeholders ranging from procurement leads and risk officers to CIOs and CPOs. It's a high-impact, client-facing role for an experienced consultant who combines deep domain expertise in TPRM, vendor ...

Maxwell Bond is partnering with a technology distribution business to recruit an Information Security Officer for GRC and compliance. The role focuses on hands-on implementation of ISMS and security controls, working with auditors, suppliers and customers to demonstrate risk managed and controls operating effectively. The role requires building security … assurance across ISO 27001, PCI-DSS, NIST/CIS, with vendor risk management and cloud security in Microsoft 365, Azure, AWS or Google Cloud. #J-18808-Ljbffr ...

risks relating to information security and the delivery of services. Support internal and external auditors throughout audit activities. Maintain the Information Asset Inventory and Risk Register, supporting Information Asset and Risk Owners with periodic reviews. Maintain and regularly review Information Security policies and procedures. Attend and actively participate in team … Computer Science, Information Security, or a related field. A minimum of 5 years’ experience administering an ISMS, or experience in a similar Information Security, risk, compliance, or corporate governance role. Good knowledge and practical experience of security within IT systems. Strong written and verbal communication skills, with the ability ...

building agent-native risk infrastructure: risk management and trust building, delivered by AI agents, for a world increasingly run by them. As more decisions and transactions run through agents, the volume of risk to manage and trust to establish is growing very fast. Today both functions are fragmented, split across … spend their time deciding and acting on what matters, not assembling the evidence to get there. Hundreds of billions of dollars are spent across risk management and trust building annually. These funds are going to be reallocated to agent-native solutions in the next five years, and we will capture ...

path the default path. The thread running through everything here is influence. You will spend as much time with engineers, product managers, designers, operations, and compliance colleagues as you do with code and tooling. The person who succeeds in this role is the person who can walk into any team … explain the risk in language that team actually uses, and leave them better equipped than when they arrived. What you'll work on First 90 days Understand how we actually build. Map our real delivery paths, from idea to production, across the teams that matter most. Find where security currently ...

their development. Candidates carrying a number of the below skills would be particularly relevant:- Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0 … CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

open doors, win customers and close deals. What You'll Be Selling A combination of cybersecurity software and specialist services, including: Cybersecurity assessments, risk evaluations and penetration testing. Security consultancy, compliance assessments and improvement planning. Recurring software subscriptions and assurance services. You'll help customers understand their security risks and … from initial contact and discovery through to proposals, negotiations and signed contracts. Build relationships: Engage with senior business leaders, IT directors and cybersecurity, risk and compliance professionals. Develop revenue: Win new customers, secure recurring business and identify opportunities to grow existing accounts. Deliver results: Maintain accurate CRM records, forecast effectively ...

seed-stage company is building agent-native risk infrastructure: risk management and trust building, delivered by AI agents, for a world increasingly run by them. Their agents sit on top of proprietary data and reassess continuously rather than at fixed checkpoints - so customers spend their time deciding and acting … dirty with related development. You're the first person customers call and their trusted counterpart. You sit across the table from CSOs, VPs of Risk, and heads of compliance, and you turn their messiest workflows into something that runs on the platform. Expect roughly one to two customer meetings ...

Skills: Technology Controls, GRC, Security, NIST/ISO, SC Clearance We are looking for Technology Control Frameworks Lead at Wokingham, UK - 2-3 days per week Onsite Security Clearance: Active SC Clearance is must have Technology Control Framework - Project, Resource Responsibilities: Design and develop the Technology Control Framework: Create … regulatory requirements, maintaining traceability to demonstrate coverage and identify gaps, while defining applicability across relevant technologies, services, processes and information asset types. Define control governance and assessment: Establish control ownership and accountability with Technology, Security, Risk and First Line stakeholders, alongside maturity and assessment criteria that enable consistent measurement ...

border team of security practitioners and is the operational backbone of the security function as the broader organization builds out, including future Director and GRC leadership roles. On a typical day, you'll be responsible for: Own day-to-day security tooling and operations: EDR/XDR, SIEM, data-loss … active incidents Support the annual SOC 2 Type II audit cycle – evidence collection, control walkthroughs, and auditor liaison – in partnership with the compliance/GRC function Maintain NIST CSF control documentation and contribute to ongoing risk-remediation (POA&M) efforts Support HIPAA/PHI security controls and periodic risk assessments ...

Select how often (in days) to receive an alert: Analyst, Information Security GRC Requisition ID: 50617 Business Unit: Fitch Group Category: Information Technology Location: Manchester, GB Date Posted: Sep 8, 2026 Location: Manchester, UK | Work Arrangement: Hybrid | Department: Information Security About the Role Fitch is seeking an Information Security GRC … phishing simulation activities, campaigns, reporting, and program administration. This is an excellent opportunity for someone early in their cyber security, communications, learning and development, risk management, or employee engagement career who is interested in the human side of cyber security. The successful candidate will work closely with Information Security, Employee ...

internal standards), identifying gaps and supporting Lead-driven control strategy decisions Develop regulator-ready and high-quality artifacts, including evidence mappings, control narratives, risk statements, and audit support documentation Identify, analyze, and elevate regulatory risks and audit obligations, supporting proactive planning and risk visibility at the program level Partner cross … functionally with Legal, Public Policy, R&D, Security, Product, Sales, and Risk teams, supporting the Lead in aligning regulatory interpretation with technical and business implementation Drive execution of process improvements, tooling enhancements, and automation initiatives defined by the SCRA program Operate with high ownership and accountability, executing work independently while ...

Frasers Group is seeking a Technology GRC Analyst to advance its technology risk and assurance program. You will assess cyber risks, test ITGCs, and ensure controls operate effectively across enterprise systems and retail platforms. Collaborating with Technology, Internal Audit,Cyber Security and Supply Chain teams, you will maintain risk registers … manage evidence for audits, and drive continuous GRC improvements across a global retail ecosystem. #J-18808-Ljbffr ...

owns that program, its scope, and its direction. You are the engineer who makes it work in practice: implementing and evidencing controls, keeping the GRC platform accurate, preparing what auditors and customers ask for, and chasing the details that decide whether an audit goes well. This is a compliance role … control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline. Operate our GRC platform (Vanta) day to day: configure and maintain integrations, monitor automated control checks, and resolve drift and failing controls. Collect, organize, and quality-check evidence ...

What We Need Corpay is currently looking to hire an IT Compliance Analyst on a permanent basis within our IVP line of business, within GRC and Info Sec division. This position is located in our Swindon office. The IT Compliance Analyst is responsible for supporting internal and external audits, being … track of escalations and/or risks related to IT Compliance. Thoroughly document compliance events and audit shortcomings. Supporting the IT Compliance Manager and GRC Managers on monitoring and reporting current state and trends of IT compliance, especially on PCI and SOX related engagements. Liaising with the Information Security staff ...

Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius isseekingaIT Risk & Controls Manager to act as an embedded risk partnertoour engineering and technology organizations. You will help scale and strengthen a modern IT SOX andcontrolsframework acrossNebius … auditors toidentifyrisk, design scalable controls, improve evidence quality, driveremediationand embed compliance into the way our technology organizationsoperate. The successful candidate will combine deep IT risk andcontrolsexpertisewith meaningful in-house technology experience. You must be equally comfortable discussing technical control design with engineers, explaining risk implications to businessleadersand aligning audit expectations ...

processes, including alert triage, incident response and vulnerability escalation. You’ll manage and challenge our SOC/MSSP provider, working closely with Technology, Engineering, GRC, Threat and Vulnerability colleagues to improve how we detect threats, respond to incidents and reduce risk. A key part of the role is improving … playbooks. Use methods such as MITRE ATT&CK and NIST to improve detection and incident readiness. Ensure vulnerabilities and exposures are prioritised, assigned clear risk owners and tracked through treatment and closure.Lead and develop the analysts, report clearly to the CISO and senior stakeholders, and work with Engineering, Technology, GRC ...

processes, including alert triage, incident response and vulnerability escalation. You’ll manage and challenge our SOC/MSSP provider, working closely with Technology, Engineering, GRC, Threat and Vulnerability colleagues to improve how we detect threats, respond to incidents and reduce risk. A key part of the role is improving … playbooks. Use methods such as MITRE ATT&CK and NIST to improve detection and incident readiness. Ensure vulnerabilities and exposures are prioritised, assigned clear risk owners and tracked through treatment and closure. Lead and develop the analysts, report clearly to the CISO and senior stakeholders, and work with Engineering, Technology ...