17 of 17 GRC Jobs in the West Midlands

Information Security Risk and Compliance Analyst LET’S CUT STRAIGHT TO IT At Severn Trent, our people are at the heart of everything we do.We’rein the top 5% of utility companies worldwide for employee engagement, andwe’reequally proud of our strong Glassdoor score — reflecting how much our peopleloveworking here. … business, its people, and customers from these daily threats, and we have an opportunity for you to join us as anInformation Security Risk and Compliance Analyst. Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting on our information security compliance and ...

Travel (Twice a Month) | Up to £75,000 My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team. This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play … NIST CSF and IASME Governance. Conduct internal audits and provide recommendations for improvement. Support clients with information security governance, risk and compliance activities. Manage third-party risk assessments and vendor security reviews. Deliver security awareness training and engage with stakeholders at all levels. Support the sales team with scoping client ...

and time-critical projects across multiple sectors, including Aerospace, Defence, Critical National Infrastructure (CNI). Due to continued growth, we have opportunities in our Governance, Risk & Compliance (GRC), Security Architecture, Threat & Vulnerability, and Operational Technology (OT) teams. Our role as a trusted adviser allows us to offer rewarding careers … Provide strategic leadership and oversight for multiple complex OT cyber security projects. Ensure that each engagement aligns with the client’s business objectives and risk appetite, while delivering solutions that protect mission-critical systems and maximise operational resilience. Act as the engagement lead, managing client relationships and guiding internal teams ...

opportunities, and innovative solutions that support strategic objectives. Promote safe, secure, and compliant adoption of AI and innovation practices, ensuring alignment with governance, risk, and compliance requirements. Build and manage relationships with external partners, technology providers, and innovation ecosystems to maximise access to emerging technologies and expertise. Monitor and measure … stakeholder management skills, with the ability to influence and engage senior leaders across business and technology functions. Strong understanding of governance, risk management, security, and compliance considerations associated with emerging technologies. Exceptional analytical, problem-solving, communication, and presentation skills. Strategic thinker with the ability to challenge the status quo while ...

opportunities, and innovative solutions that support strategic objectives. Promote safe, secure, and compliant adoption of AI and innovation practices, ensuring alignment with governance, risk, and compliance requirements. Build and manage relationships with external partners, technology providers, and innovation ecosystems to maximise access to emerging technologies and expertise. Monitor and measure … stakeholder management skills, with the ability to influence and engage senior leaders across business and technology functions. Strong understanding of governance, risk management, security, and compliance considerations associated with emerging technologies. Exceptional analytical, problem-solving, communication, and presentation skills. Strategic thinker with the ability to challenge the status quo while ...

roadmap aligned with business priorities. Helping shape the future security function, identifying resource requirements and influencing future recruitment. Leading information security governance, risk management and compliance initiatives, including Cyber Essentials and ISO 27001. Providing technical oversight and guidance across infrastructure, cloud, networking and security platforms. Managing security risks, vulnerabilities and … strategies, policies and improvement programmes. A solid understanding of networking, Windows Server, Active Directory, Microsoft 365, Azure and hybrid infrastructure environments. Experience with security governance, risk management and recognised frameworks such as ISO 27001, Cyber Essentials and NIST. Knowledge of security operations, vulnerability management, incident response and endpoint protection. Experience ...

Severn Trent Plc is seeking an Information Security Risk and Compliance Analyst based in Coventry to protect our critical national infrastructure and support governance, risk and compliance across a complex technology environment. You will work with the Information Security team to identify, measure and report on information security compliance and … risk, driving gap analysis and remediation with internal and external partners. #J-18808-Ljbffr ...

architectures for our clients, with a particular focus on Google Cloud Platform (GCP) and emerging Agentic AI systems . Leveraging your strong cloud security and governance expertise, you will: Security Architecture Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS). … Service Controls , Cloud Armor , Confidential Computing , and secure workload segmentation . Develop security design documentation, diagrams, and rationale aligned with business and compliance requirements. Apply risk‐based and threat‐based approaches to recommend secure and proportionate solutions. Agentic AI & LLM Security Architecture You will be responsible for shaping security controls ...

and improve lives every day. We are seeking an exceptional Chief Information Security Officer to lead some of our most important cyber security, information governance and resilience capabilities. Working with the Executive team and leaders across the organisation, you will set the strategic direction for cyber and information security, information … from significant cyber incidents. Promote an organisation-wide security culture, embedding shared responsibility and informed risk management. Lead cyber and information security governance, risk and compliance, including GDPR, DSPT, CAF and DHSC requirements, ensuring regulatory compliance and audit readiness. Lead and develop a diverse, inclusive, high-performing team with ...

security. We have teams that offer world class services in red teaming, penetration testing, threat intelligence, research and development, detection and response, governance, risk, and compliance, and plenty more. Our business is global and so are our clients. We work closely with central banks, central and local government, critical national … used solely for recruitment purposes, stored securely, and retained only as required. At LRQA, we belive that as a leading Global Leading Assurance and Risk Management Service provider, our talented people are our risk management advantage. We belive the best outcomes come from diverse perspectives, shared ambition and working together ...

market to execute transformation and high-value projects for our global clients—solving problems in the areas of Business Transformation, Governance, Risk and Compliance, and Technology and Digital Innovation. Our unique consulting model allows you the radical flexibility and control you demand in the “Now of Work,” enabling ...

Digital Waffle is seeking an Information Security Consultant to join the GRC team remotely in the UK, with limited office travel (about twice monthly). You will lead ISMS activities, audit ISO 27001-based controls, and advise clients on governance, risk and compliance. The role emphasises strong stakeholder engagement and ...

within a collaborative security team, you will play a key role in strengthening security controls across Azure, endpoint, identity and network environments , reducing cyber risk through effective protection, monitoring, remediation and automation. This is an excellent opportunity for a security professional looking to work across modern cloud technologies, security tooling … Zero Trust principles. Key Responsibilities Design, implement and maintain security controls across Microsoft Azure environments. Manage cloud security posture, identifying and remediating vulnerabilities, misconfigurations and compliance issues. Strengthen identity security through Conditional Access, MFA, Privileged Access Management and least-privilege principles . Administer and optimise Microsoft Defender, Defender for Cloud ...

within a collaborative security team, you will play a key role in strengthening security controls across Azure, endpoint, identity and network environments , reducing cyber risk through effective protection, monitoring, remediation and automation. This is an excellent opportunity for a security professional looking to work across modern cloud technologies, security tooling … Zero Trust principles. Key Responsibilities Design, implement and maintain security controls across Microsoft Azure environments. Manage cloud security posture, identifying and remediating vulnerabilities, misconfigurations and compliance issues. Strengthen identity security through Conditional Access, MFA, Privileged Access Management and least-privilege principles . Administer and optimise Microsoft Defender, Defender for Cloud ...

security capability from the ground up. This is a foundational role within a well-established Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments. You'll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture … security technologies and services Lead implementation, integration and ongoing management of selected security solutions Develop OT/IoT security policies, standards, procedures and governance processes Establish security monitoring use cases, alerting requirements and detection coverageTune security controls to improve detection while reducing false positives Define secure configuration, network segmentation, access ...

build and lead the organization's OT/IoT security capability from the ground up. You will define strategy, roadmap, and operating model, owning governance, tooling and incident response for OT/IoT environments. You will work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture ...

business issues from strategy to execution. IT Audit Manager Job Requirements: Supervisory experience of audit and technology teams and demonstrable experience driving strong it risk and control environments Ability to manage multiple external client relationships and engagements, whilst also leading, developing, mentoring teams within the digital audit and technology landscapes … Reporting directly to the Senior Manager/Directors you will be responsible for providing robust IT risk and control environment knowledge Responsible for checking IT systems to ensure they are appropriately controlled by client management and to check data integrity, investigating and assessing any discrepancies Ability to review and develop ...