roadmap Hands on delivery when needed Oversight of Cyber Security delivery Stakeholder Management Project Delivery - working closely with IT project managers Vendor and 3p Management Introduction and oversight of GRC Experience required: Microsoft 365 Experience with on prem to cloud migration Organisational transformation experience - e.g. new systems implementation, Integration of systems, optimisation of data Vendor management Stakeholder Management - internal and … of IT Infrastructure Manager MSP negotiation stakeholder management SimPRO Microsoft365 PowerBI CyberSecurity Cyber Security Firewall AntiVirus Vendor Management IT Manager Head of IT Infrastructure Manager MSP negotiation stakeholder managementGovernanceGovernanceGovernanceGovernanceGRCGRCGRCGRCComplianceComplianceComplianceComplianceCompliance If you are interested in this position please click 'apply'. Hunter Selection Limited is a recruitment consultancy More ❯
Reading, Berkshire, England, United Kingdom Hybrid/Remote Options
Certain Advantage
Security Consultant – GRC (Governance, Risk & Compliance) Location: Reading (Remote role with once or twice per month on-site) Rate: Negotiable (DOE) Contract: Until May 2026An excellent opportunity has arisen for an experienced Security Consultant (GRC) to join a global technology organisation that’s expanding its EMEA cyber security consulting practice and investing heavily in a new Centre of Excellence.This is … a hands-on consulting position delivering Governance, RiskandCompliance (GRC) projects for major enterprise clients — including riskmanagement, cloud security governance, andcompliance frameworks such as ISO27001, NIST CSF, CIS Top 18 and COBIT .You’ll play a key role in engaging with senior stakeholders, assessing cyber maturity, and driving best-practice improvements across a range of industries. Key … Responsibilities Deliver Cyber GRC consulting engagements end-to-end — from scoping and planning through to delivery and close-out. Provide advisory services covering areas such as Information Security Governance, RiskManagement, Compliance, Business Continuity, and Cloud Security. Translate complex security andcompliance requirements into actionable business solutions. Build trusted relationships with clients at both technical and senior management levels. Skills More ❯
Are you a governance leader who thrives at the intersection of information security, compliance, and organisational resilience? We're looking for an experienced Senior Security Governance Manager to drive our Information Governance, Cyber Security, and Quality frameworks to new heights. This is a high-impact role where you'll shape the strategic direction of security governance across the business, ensuring … compliance with UK, NHS, and international regulations - while empowering teams to work securely and confidently in a complex digital environment. What You'll Be Responsible For Information Governance Develop and execute the organisation's Information Governance (IG) strategy in line with UK, NHS, and international data protection frameworks. Maintain governance policies and key artefacts such as DPIAs, Data Processing Agreements … and support independent audit processes. Monitor compliance across business units and lead corrective actions where required. Cyber Security Lead the implementation and maintenance of Cyber Security policies, ensuring robust governance across all business areas. Manage the ISO 27001 certification lifecycle - including audits, remediation, and recertification. Collaborate with technical and product teams to embed security standards and oversee incident response procedures. More ❯
Snelshall West, Milton Keynes, Buckinghamshire, England, United Kingdom
DS Smith
packaging solutions, paper products and recycling services in more than 30 different countries across EMEA with over 30,000 colleagues. About the role Reporting to Head of I&T GRC, GovernanceandRisk Lead will be responsible for driving information and cyber security awareness, delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and … risk register, tools, process, reporting and review. You will take responsibility for managing a subset of aspects of ISO 27001 related documentation and control activities. As the I&T GovernanceandRisk Lead you will have the responsibility of aspects of the I&T GRC scope, delegated and assigned by the Head of I&T GRC. Key Accountabilities Engage with More ❯
CISM and/or CRISC or other relevant certification is highly desirable ISO 27001:2022 Lead Implementer/Auditor certification is essential. Demonstratable experience in an Information Security, IT Governance, RiskandCompliance based role, including maintaining and continually improving an ISO 27001 compliant management system. Extensive experience of information security managementand/or security awareness. In-depth expert More ❯
and/or CISSP or other relevant certification is highly desirable ISO 27001:2022 Lead Implementer/Auditor certification is highly desirable Demonstratable experience in an Information Security, IT Governance, RiskandCompliance based role, including maintaining and continually improving an ISO 27001 compliant management system. Experience of information security managementand/or security awareness. Good knowledge of industry More ❯
such as M.Inst.ISP, CISSP, CISM, CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status and creating customer reports andMore ❯
willing to work at customer premises, sometimes requiring some degree of travel. Demonstrated professional consulting experience of 4 or more years with Enterprise IT-security, Information and Cyber Security Governance, Technology RiskManagement, Compliance, Business Continuity/DR, Cloud Security gained in a previous delivery capacity. Experience in delivering assignments using well known security frameworks, standards and methodologies such as More ❯
willing to work at customer premises, sometimes requiring some degree of travel. Demonstrated professional consulting experience of 4 or more years with Enterprise IT-security, Information and Cyber Security Governance, Technology RiskManagement, Compliance, Business Continuity/DR, Cloud Security gained in a previous delivery capacity. Experience in delivering assignments using well known security frameworks, standards and methodologies such as More ❯
Security Consultant (Governance, Risk, Compliance) Reading, UK (Hybrid with some travel) £30.00–£40.00 per hour (Inside IR35) 6-month contract. Potential to extend up to 2 years We are seeking an experienced Cyber Security Consultant (GRC) to join a leading global technology organization as part of their expanding Cyber Security practice. The successful candidate will deliver a range of Governance … Risk, andCompliance (GRC) consulting engagements for large enterprise clients, supporting the full project lifecycle from scoping to delivery and reporting. You’ll work closely with senior stakeholders, from technical teams through to directors, providing expert advisory support to strengthen cyber security frameworks and ensure compliance with global standards. Key Responsibilities Deliver end-to-end Cyber GRC consulting projects for … emerging technology risk management. Collaborate with internal and client teams to enhance cyber resilience andcompliance maturity. About You Minimum of 4+ years’ experience in IT Security, Information Security Governance, Technology RiskManagement, or Cyber Compliance. Strong consulting background with demonstrable client-facing experience. Relevant industry certifications such as CISSP, CISA, CRISC, CISM, or CISMP. A solid understanding of Cloud More ❯
Manchester, Lancashire, England, United Kingdom Hybrid/Remote Options
Michael Page Technology
focused on assessing and managing third-party risks. The role involves conducting supplier due diligence, reviewing compliance declarations, and supporting audit readiness across multiple frameworks. Reporting to Head of GRC, this is a FTC role with hybrid working in Manchester Client Details A major UK-based technology and infrastructure provider offering connectivity, cloud, and security services. The organisation operates across More ❯
This position sits within a well-established Security Risk & Governance team, responsible for managing the organisation's information security compliance framework. The role focuses on maintaining and improving external certifications, supporting audits, and driving awareness across the business. Reporting to the Head of GRC. It's a hybrid role requiring working in Manchester office for 3 days weekly Client Details More ❯
Manchester, Lancashire, England, United Kingdom Hybrid/Remote Options
Michael Page Technology
This position sits within a well-established Security Risk & Governance team, responsible for managing the organisation's information security compliance framework. The role focuses on maintaining and improving external certifications, supporting audits, and driving awareness across the business. Reporting to the Head of GRC. It's a hybrid role requiring working in Manchester office for 3 days weekly Client Details More ❯
Woking, Surrey, England, United Kingdom Hybrid/Remote Options
Nomad Foods
GRC Manager Woking based with Hybrid working Competitive salary, up to 25% bonus and excellent benefits package We’re looking for an experienced and proactive Governance, Risk & Compliance (GRC) Manager to join our dynamic team based in Woking. In this key role, you’ll help strengthen our riskmanagement framework, enhance compliance processes, and ensure robust governance across our operations. … You’ll work collaboratively with senior stakeholders to drive continuous improvement, embed a strong risk culture, and support strategic decision-making across the business. If you’re passionate about governance excellence, thrive in a fast-paced environment, and want to make real impact at Europe’s leading frozen food company. Responsibilities: Overseeing cyber security governance efforts, ensuring alignment with frameworks … and implement security policies, procedures, and standards that support risk mitigation andcompliance efforts in line with industry standards. Play an active, hands-on role in security initiatives andGRC activities, including incident management, vulnerability assessments, andcompliance reviews. Provide reporting to leadership committees and the Board. About you: We need someone who can communicate at all levels and with More ❯
Bolton, Greater Manchester, United Kingdom Hybrid/Remote Options
Entasis Partners
We are seeking a skilled ServiceNow GRC Consultant to join a high-impact, 6-month project in Switzerland. In this role, you will work closely with the C-suite and key stakeholders to implement and optimize ServiceNow Governance, Risk, andCompliance (GRC) modules, driving tangible change across the organization’s governanceandcompliance processes Key Responsibilities: 1. ServiceNow GRC Implementation … Configuration Implement and configure ServiceNow GRC modules including: Policy andComplianceManagementRiskManagement Vendor RiskManagement Customize workflows, dashboards, and reporting structures to align with organizational governance frameworks (e.g., ISO 27001, COBIT). 2. Process Design & Optimization Translate business andcompliance requirements into ServiceNow solutions. Develop automated controls, risk, andcompliance tracking processes. Streamline manual governanceand audit tasks … through automation. 3. Stakeholder Collaboration Work with risk officers, auditors, compliance teams, and IT to gather requirements and ensure alignment. Provide training and ongoing support for GRC users. Influence and drive change at the executive level through effective collaboration with the C-suite. 4. Reporting & Analytics Design and deliver riskandcompliance dashboards for executive leadership visibility. Provide actionable insights More ❯
Leeds, West Yorkshire, United Kingdom Hybrid/Remote Options
Entasis Partners
We are seeking a skilled ServiceNow GRC Consultant to join a high-impact, 6-month project in Switzerland. In this role, you will work closely with the C-suite and key stakeholders to implement and optimize ServiceNow Governance, Risk, andCompliance (GRC) modules, driving tangible change across the organization’s governanceandcompliance processes Key Responsibilities: 1. ServiceNow GRC Implementation … Configuration Implement and configure ServiceNow GRC modules including: Policy andComplianceManagementRiskManagement Vendor RiskManagement Customize workflows, dashboards, and reporting structures to align with organizational governance frameworks (e.g., ISO 27001, COBIT). 2. Process Design & Optimization Translate business andcompliance requirements into ServiceNow solutions. Develop automated controls, risk, andcompliance tracking processes. Streamline manual governanceand audit tasks … through automation. 3. Stakeholder Collaboration Work with risk officers, auditors, compliance teams, and IT to gather requirements and ensure alignment. Provide training and ongoing support for GRC users. Influence and drive change at the executive level through effective collaboration with the C-suite. 4. Reporting & Analytics Design and deliver riskandcompliance dashboards for executive leadership visibility. Provide actionable insights More ❯
Leigh, Greater Manchester, United Kingdom Hybrid/Remote Options
Entasis Partners
We are seeking a skilled ServiceNow GRC Consultant to join a high-impact, 6-month project in Switzerland. In this role, you will work closely with the C-suite and key stakeholders to implement and optimize ServiceNow Governance, Risk, andCompliance (GRC) modules, driving tangible change across the organization’s governanceandcompliance processes Key Responsibilities: 1. ServiceNow GRC Implementation … Configuration Implement and configure ServiceNow GRC modules including: Policy andComplianceManagementRiskManagement Vendor RiskManagement Customize workflows, dashboards, and reporting structures to align with organizational governance frameworks (e.g., ISO 27001, COBIT). 2. Process Design & Optimization Translate business andcompliance requirements into ServiceNow solutions. Develop automated controls, risk, andcompliance tracking processes. Streamline manual governanceand audit tasks … through automation. 3. Stakeholder Collaboration Work with risk officers, auditors, compliance teams, and IT to gather requirements and ensure alignment. Provide training and ongoing support for GRC users. Influence and drive change at the executive level through effective collaboration with the C-suite. 4. Reporting & Analytics Design and deliver riskandcompliance dashboards for executive leadership visibility. Provide actionable insights More ❯
Bury, Greater Manchester, United Kingdom Hybrid/Remote Options
Entasis Partners
We are seeking a skilled ServiceNow GRC Consultant to join a high-impact, 6-month project in Switzerland. In this role, you will work closely with the C-suite and key stakeholders to implement and optimize ServiceNow Governance, Risk, andCompliance (GRC) modules, driving tangible change across the organization’s governanceandcompliance processes Key Responsibilities: 1. ServiceNow GRC Implementation … Configuration Implement and configure ServiceNow GRC modules including: Policy andComplianceManagementRiskManagement Vendor RiskManagement Customize workflows, dashboards, and reporting structures to align with organizational governance frameworks (e.g., ISO 27001, COBIT). 2. Process Design & Optimization Translate business andcompliance requirements into ServiceNow solutions. Develop automated controls, risk, andcompliance tracking processes. Streamline manual governanceand audit tasks … through automation. 3. Stakeholder Collaboration Work with risk officers, auditors, compliance teams, and IT to gather requirements and ensure alignment. Provide training and ongoing support for GRC users. Influence and drive change at the executive level through effective collaboration with the C-suite. 4. Reporting & Analytics Design and deliver riskandcompliance dashboards for executive leadership visibility. Provide actionable insights More ❯
Altrincham, Greater Manchester, United Kingdom Hybrid/Remote Options
Entasis Partners
We are seeking a skilled ServiceNow GRC Consultant to join a high-impact, 6-month project in Switzerland. In this role, you will work closely with the C-suite and key stakeholders to implement and optimize ServiceNow Governance, Risk, andCompliance (GRC) modules, driving tangible change across the organization’s governanceandcompliance processes Key Responsibilities: 1. ServiceNow GRC Implementation … Configuration Implement and configure ServiceNow GRC modules including: Policy andComplianceManagementRiskManagement Vendor RiskManagement Customize workflows, dashboards, and reporting structures to align with organizational governance frameworks (e.g., ISO 27001, COBIT). 2. Process Design & Optimization Translate business andcompliance requirements into ServiceNow solutions. Develop automated controls, risk, andcompliance tracking processes. Streamline manual governanceand audit tasks … through automation. 3. Stakeholder Collaboration Work with risk officers, auditors, compliance teams, and IT to gather requirements and ensure alignment. Provide training and ongoing support for GRC users. Influence and drive change at the executive level through effective collaboration with the C-suite. 4. Reporting & Analytics Design and deliver riskandcompliance dashboards for executive leadership visibility. Provide actionable insights More ❯
Ashton-Under-Lyne, Greater Manchester, United Kingdom Hybrid/Remote Options
Entasis Partners
We are seeking a skilled ServiceNow GRC Consultant to join a high-impact, 6-month project in Switzerland. In this role, you will work closely with the C-suite and key stakeholders to implement and optimize ServiceNow Governance, Risk, andCompliance (GRC) modules, driving tangible change across the organization’s governanceandcompliance processes Key Responsibilities: 1. ServiceNow GRC Implementation … Configuration Implement and configure ServiceNow GRC modules including: Policy andComplianceManagementRiskManagement Vendor RiskManagement Customize workflows, dashboards, and reporting structures to align with organizational governance frameworks (e.g., ISO 27001, COBIT). 2. Process Design & Optimization Translate business andcompliance requirements into ServiceNow solutions. Develop automated controls, risk, andcompliance tracking processes. Streamline manual governanceand audit tasks … through automation. 3. Stakeholder Collaboration Work with risk officers, auditors, compliance teams, and IT to gather requirements and ensure alignment. Provide training and ongoing support for GRC users. Influence and drive change at the executive level through effective collaboration with the C-suite. 4. Reporting & Analytics Design and deliver riskandcompliance dashboards for executive leadership visibility. Provide actionable insights More ❯
Chelmsford, Essex, United Kingdom Hybrid/Remote Options
Brooks Automation, Inc
Operations to lead and mature our global IT infrastructure and SecOps capabilities. This role is responsible for the strategy, operations, and execution of all infrastructure services, enterprise security operations, GRCand IT service delivery. The ideal candidate is a technically proficient leader who can operate at both strategic and tactical levels - capable of leading teams, driving transformation, and diving deep More ❯
McFall Recruitment are partnering with a Global Financial Services organisation on a Security Governance, Risk & Compliance Manager 📍 London or Edinburgh | Hybrid We’re looking for an experienced Security Governance, Risk & Compliance Manager (GRC) to lead a global team responsible for strengthening and harmonising the organisation’s cybersecurity control framework. Reporting directly to the CISO, you’ll manage a team of … six covering governance, risk, and audit, driving consistency, compliance, and maturity across global operations. This is a key leadership role for a strategic yet hands-on cyber risk professional with strong knowledge of frameworks such as NIST, ISO 27001, CPMI-IOSCO, and the CRI Cyber Risk Profile. What you’ll do Lead and develop a global GRC team, ensuring effective … cyber riskmanagementandgovernance practices. Maintain and enhance policies, standards, and documentation to meet regulatory and audit requirements. Oversee vendor and third-party due diligence, supplier notifications, and control assurance. Utilise tools such as SecurityScorecard, RiskConnect, and SharePoint for risk monitoring and reporting. Translate technical risk into board-level reporting and engage with senior stakeholders across global regions. Collaborate More ❯
Manchester, England, United Kingdom Hybrid/Remote Options
Gravitas Recruitment Group (Global) Ltd
Lead Governance, Risk & Compliance Specialist Location: Manchester – Hybrid (Flexible) Salary: Up to £75,000+ (DOE) Join a global technology leader as a Lead GRC Specialist, driving governance, risk, andcompliance strategy across the business. You’ll lead audits, influence policy, and strengthen the organisation’s security andcompliance posture. Key Responsibilities Lead and enhance governance, risk, andcompliance frameworks. Manage … ISO 27001, GDPR, and NIST. Develop and improve policies, procedures, and vendor risk management. Support incident response and promote a culture of security awareness. Experience & Skills Proven leadership in GRC or Information Security. Strong knowledge of ISO 27001, PCI DSS, GDPR, NIST. Experience managing audits andcompliance programmes. Excellent communication and stakeholder management. Hands-on technical understanding of security controls. More ❯
GRC Specialist - PCI-DSS - Manchester We're seeking an experienced GRC Specialist with excellent cyber security, GRC & PCI-DSS payments experience to join our client's growing Cyber Security team. They need somebody who has excellent knowledge in PCI-DSS along with good governance, riskandcompliance experience and familiarity with other standards. Experience Required: At least 2-3 years … in a Cyber security & GRC role Be a PCI-DSS expert around payments ISO 27001and GDPR Knowledge of RiskManagement, including risk identification, assessment, and mitigation techniques Good experience around Audits andcompliance Any penetration testing experience would be a bonus You'll work closely with both internal and external stakeholders across Legal, Risk & Audit, Procurement, and IT to embed … strong governanceand maintain alignment with leading standards such as ISO 27001, NIST CSF, and GDPR. The position combines both strategic oversight and hands-on delivery, providing clear visibility of risks and driving measurable improvements in security maturity. This role is majority onsite in Central Manchester but there is flex on start and finish times. They have just opened their More ❯
New Works, Telford, Shropshire, England, United Kingdom Hybrid/Remote Options
Service Care Solutions
of our client, We are seeking an experienced Senior Information Security Analyst to provide immediate support to their Information Security team. This hybrid role combines technical security analysis with governance, risk, andcompliance (GRC) activities, offering a unique opportunity to influence and maintain the organisation’s security posture. About the Role: The successful candidate will assess risks, review supplier and … This is a hands-on delivery role requiring someone who can work independently, make sound judgments, and communicate effectively with both technical and non-technical stakeholders. Key Responsibilities: Security Governance & Risk Conduct security risk assessments for systems, projects, and suppliers, documenting findings consistently. Review, respond to, and attest security questionnaires and tender submissions. Support and track remediation actions arising from … protection. Promote good security practices across the organisation. Support incident briefings and reporting to senior stakeholders. Required Skills and Experience: 5+ years in Information Security roles, combining technical andGRC activities. Strong understanding of cloud and network security (Microsoft M365, Azure, Defender, DLP, Conditional Access preferred). Experience reviewing security questionnaires, tenders, and supplier assurance evidence. Knowledge of risk assessment More ❯