51 to 75 of 377 GRC Jobs in the UK

enhance security baselines, configuration standards, and policy enforcement across the estate. Lead continuous improvement initiatives across detection, response, automation, and cloud security posture. Support governance activities including risk assessments, audits, and compliance reviews. Technical Experience: Strong hands-on experience with Microsoft Defender XDR, Intune, Entra ID, Azure security controls, and ...

Security Analyst - GRC and Security Awareness focused Permanent - 50k- 60k + strong benefits Location: Hybrid - Leatherhead Your new company: A leading construction and development company in Surrey are currently looking for an IT Security Analyst to come in and support the existing IT Security Manager with ...

enhance detection logic at scale, and drive measurable improvements to our security baseline across AWS, Azure, and GCP. You will partner closely with Engineering, GRC, Technology Risk and Security Operations - defining standards, fine tuning the SIEM, and progressively taking on the most complex cloud security and detection engineering challenges across ...

GRC Modernization Specialist, Malvern, PA, US GRC Modernization Specialist Responsibilities Role Overview As part of Client's GRC Modernization Program, we are seeking experienced Control Design & Modernization Specialists to help transform and standardize the control environment across Enterprise Security & Fraud (ES&F). This role is focused on designing … approaches and drive alignment on future-state control designs. Build consensus across diverse stakeholder groups and ensure control designs meet business and regulatory expectations. GRC Modernization Support Contribute to the development of enterprise control libraries, control standards, taxonomies, and framework mappings. Support broader GRC modernization initiatives focused on improving control ...

they treat their teams and communities. The Opportunity This is an exciting opportunity for an Information Assurance specialist looking to drive governance, risk and compliance capability forward, while helping shape the next generation of cybersecurity services. Stepping into this role, you'll be recognised as a subject matter expert leading ...

days onsite MUST BE PAYE THROUGH UMBRELLA Role Description: The Senior Security Incident Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership, assurance, and strategic oversight of security incident management across a complex multi-supplier environment. The role is responsible for ensuring suppliers manage security incidents … consistently, effectively, and in accordance with client policy, regulatory obligations, and operational risk requirements. Acting as the primary OI lead for incident governance, the consultant provides a consolidated view of incident risk, drives supplier accountability, and supports continual improvement across the incident management life cycle. This is a governance, assurance ...

explain complex technical solutions clearly to both technical and non-technical audiences. Awareness of security and Zero Trust networking architectures, including SASE, DDoS protection, GRC, SIEM, and hybrid/multi-cloud connectivity solutions. Familiarity with leading platforms and services such as Zscaler, AWS Direct Connect and Azure ExpressRoute or similar ...

networking, enterprise switching, routing, wireless technologies, automation, telemetry and network assurance. Awareness of security and Zero Trust networking solutions such as SASE, DDoS protection, GRC, Zscaler and SIEM platforms, as well as hybrid and cloud networking solutions including AWS Direct Connect and Azure ExpressRoute. Understanding of controller-led campus and ...

recommending improvements to controls. Provide assurance across both on-premises and cloud environments, ensuring consistent security coverage. Assess and Manage Security Risk Collaborate with GRC teams, security architects, and business stakeholders to conduct risk assessments, define mitigations, and document outcomes. Work closely with IT teams to validate and assure ...

recommending improvements to controls. Provide assurance across both on-premises and cloud environments, ensuring consistent security coverage. Assess and Manage Security Risk Collaborate with GRC teams, security architects, and business stakeholders to conduct risk assessments, define mitigations, and document outcomes. Work closely with IT teams to validate and assure ...

SaaS security models, multi-tenant architecture, and shared responsibility frameworks. Familiarity with security questionnaire and trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta). Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Comfort with process automation ...

Description Job Purpose The Engineer, Information Security GRC (Governance, Risk, and Compliance) is part of a team responsible for the global Information Security program. The role would gain exposure to the full suite of businesses and products which underpin the Parent Intercontinental Exchange (ICE) company. Information Security (IS) is charged … class cybersecurity and physical security program, and avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls. Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct ...

regardless of source, format or structure. By partnering with the industry's leading firms, we are helping to rethink operating models, increase efficiency, strengthen governance and regulatory compliance, reduce risk, streamline processes and build the workforce of the future. More than 10,000 users across 30+ countries process billions … York, Wroclaw, Antwerp, and Singapore, we move fast, build with purpose, and hold ourselves to a high bar. As we scale, information security, governance, and IT operations sit at the heart of that ambition. What you will be doing Security architecture and engineering Define security architecture standards and lead threat ...

CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

experience does not have to be purely cyber security consulting. We believe individuals with practical skillsets from in‐house roles, broader technology management or GRC, for example, would be well placed in our team. We know great candidates bring a mix of skills and experiences, you don’t need ...

SaaS security models, multi-tenant architectures, and shared responsibility frameworks. Familiarity with security questionnaires and trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta). Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Proficiency with process automation ...

cyber security consulting role with an AI focus. You will advise clients on core cyber security risks across cloud, identity, applications, data, operations and governance, while also helping them understand and manage the new risks introduced by AI systems that can reason, retrieve data, call tools and take action. … application development, including permission boundaries, identity controls, sandboxing, auditability, input/output validation and human-in-the-loop controls. Help clients establish governance and assurance processes for AI systems across the lifecycle, from experimentation through to production deployment. AI-Enabled Security Operations Identify opportunities to use AI safely to improve ...

point of contact throughout the partner onboarding lifecycle. Produce security assessment reports, recommendations and onboarding assurance outcomes. Work closely with security, architecture, delivery and governance teams to support onboarding decisions. Monitor and track remediation activities through to completion. Ensure consistent application of security assurance processes and assessment criteria. Maintain awareness … updating assessment approaches where required. Support ongoing assurance activities and periodic reviews of onboarded partners. Required Skills & Experience Proven experience in Security Assurance, Security Governance, Risk & Compliance (GRC), Third-Party Risk Management, or Information Security. Strong understanding of security control frameworks and assurance methodologies. Experience conducting security assessments, compliance reviews ...

GRC Analyst Location: Manchester, Hybrid | 80% remote, 20% onsite Duration: 31/10/2031 Rate - £480 - £520 CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years MUST … frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings Present governance information to client stakeholders and governance forums Support strategic ...

months Location: Inverness or Preston | 5 days onsite The Senior Security Incident Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership, assurance, and strategic oversight of security incident management across a complex multi-supplier environment. The role is responsible for ensuring suppliers manage security incidents consistently … effectively, and in accordance with client policy, regulatory obligations, and operational risk requirements. Acting as the primary OI lead for incident governance, the consultant provides a consolidated view of incident risk, drives supplier accountability, and supports continual improvement across the incident management lifecycle. Key Responsibilities Security Incident Governance Supplier Governance ...

Cyber) Information Security Consultant GRC (Governance, Risk and Compliance) £45,000 - £55,000 depending on experience REMOTE WORKING Own transport is essential to fulfil on-site consultancy visits M-F 8:30 am to 5:30 pm with an hour for lunch We are seeking a full-time GRC/ ...

engineering context. Ability to communicate security risk clearly to both technical and non‐technical audiences, without defaulting to jargon or compliance‐speak. Familiarity with GRC concepts including risk management, controls design, and third‐party assurance, gained through hands‐on practice rather than solely policy work. Comfort working across multiple teams ...

General Controls is well managed. Promote best practise and help identify automated techniques both for operating and testing controls Collaborate with other GRC functions and IT management to ensure standardisation of ITGCs with other IT Controls operated across the business and with other regulatory frameworks Skills & Qualifications Ideal skills Experience ...