for GRC Analyst Business Area: Information Security Job Title: GRC Analyst Scope and Coverage: Global Outline Purpose of Role: Support in the development and maintenance of the GRC policy, risk and controls frameworks and the associated processes and artefacts. Conduct internal and external compliance and controls reviews, testing and audits. Support effective stakeholder engagement and maintenance of GRC information … repository such as policies and standards, risk register, etc. Help drive a robust security posture for a large, complex organisation, trading globally within a constantly evolving IT and information security threat environment. Impact of Role: Supports the organisation’s IT and cyber governance, risk and compliance processes. Help drive good risk culture and behaviours into the business … resources, contingent workers and systems integrators. Key Elements of the Role: The job holder will be responsible for assisting and supporting in a range of activities across the Governance, Risk and Compliance function. The job holder will be responsible for the following activities: Governance and Policy: Develop a clear understanding of the organisation, its various entities (business units, subsidiaries More ❯
Relationships This role will work closely with technical teams, operational teams, franchise partners and other central support teams alike, requiring a blend of hands-on technical work and strategic management to improve the organisation’s cybersecurity posture. Working closely with external suppliers and vendors, the role will lead an outsourced security operations team and ensure that cybersecurity tooling is … with business objectives. Key Duties/Responsibilities Strategy & Planning Develop and implement cybersecurity strategies aligned with organisational goals and industry standards. Identify and deploy cybersecurity solutions that balance cost, risk, and organisational needs. Create and execute security roadmaps, ensuring alignment with Agile project delivery methodologies. Work with the Global Information Security Officer to participate in the design and architecture … of secure systems, integrating security into the development lifecycle. Team Management Lead and manage an outsourced Security Operations Centre (SOC) team and Cyber Security Analysts. Collaborate with internal teams and external vendors to optimise cybersecurity operations. Compliance & RiskManagement Plan and conduct annual PCI DSS compliance assessments in collaboration with qualified security assessors, maintaining and communicating cybersecurity More ❯
Manchester, England, United Kingdom Hybrid / WFH Options
Capgemini
The Invent Digital Trust & Security (DT&S) practice focuses on ensuring secure business outcomes for our clients, providing Cybersecurity advisory and transformation consulting in areas such as security strategy, riskmanagement, human riskmanagement, data and identity security, secure intelligent industry, Gen-AI risk, and security operations modernisation. Our security specialists and innovators enable our … which are often the first steps in engaging our clients, helping to influence the board and CxO with top-down buy-in and understanding. Providing insight for threat modelling, riskmanagement and security overlay approaches by conducting security maturity assessments. Providing a business understanding of technical domains and tailoring these to help clients maximise value and leverage quick …/or security to positively influence the board and senior stakeholders to the required outcomes. Collaborating with teams and stakeholders to deliver security strategy, governance, security testing, identity & access management (IAM), security architecture, privacy, and cyber data analytics. As part of your role, you will also have the opportunity to contribute to the business and your own personal growth More ❯
Manchester, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
the Board Communicate the information security strategy to relevant parties, as well as developing supporting policies and procedures required to meet the strategy Develop, maintain, and expand the Cyber RiskManagement Framework as part of the overall Information Security Management System (“ISMS”) Responsible for the Company’s information security capabilities, including the technical training and awareness of … on containment and mitigation activities, as well as preparing for incidents by running threat simulations, tabletop and red team exercises Assess emerging and potential security threats using the Cyber RiskManagement Framework and act proactively to mitigate relevant threats End-to-end vulnerability management across the hybrid cloud environment Manage security toolset, including managing the relationship with … GDPR, etc. Good communication and interpersonal skills, with the ability to effectively communicate security-related questions to technical and non-technical stakeholders (employees, customers, and/or partners) Project management skills, with the ability to manage projects such as processes implementation and improvement, security systems implementation Ability to collaborate cross-functionally and influence stakeholders at all levels of the More ❯
Manchester, England, United Kingdom Hybrid / WFH Options
Capgemini Invent
The Invent Digital Trust & Security (DT&S) practice focuses on ensuring secure business outcomes for our clients, providing Cybersecurity advisory and transformation consulting in areas such as security strategy, riskmanagement, human riskmanagement, data and identity security, secure intelligent industry, Gen-AI risk, and security operations modernisation. Our security specialists and innovators enable our … which is often the first step in engaging our clients, helping to influence the board and CxO with top-down buy-in and understanding. Providing insight for threat modelling, riskmanagement and security overlay approaches by conducting security maturity assessments. Developing new security strategies to manage emerging risks in Cloud & agile/DevSecOps operating environments. Providing a business …/or security to positively influence the board and senior stakeholders to the required outcomes. Collaborating with teams and stakeholders to deliver security strategy, governance, security testing, identity & access management (IAM), security architecture, privacy, and cyber data analytics. As Part Of Your Role, You Will Also Have The Opportunity To Contribute To The Business And Your Own Personal Growth More ❯
Troubleshoot hardware, software, and network issues. Policy Implementation: Define and implement IT policies, procedures, and best practices that conform to industry standards, legal and regulatory requirements, and client requirements. RiskManagement: Take a proactive role in developing robust infrastructure and data systems by critically reviewing systems regularly and mitigating hardware, software, and data risks. Project Management: Participate … in key IT and business projects as a project manager or contributor. Supplier Management: Manage relationships with Managed Service Providers (MSPs) and other IT suppliers, ensuring service level agreements (SLAs) are met and cost-effectiveness is maintained. Drive Innovation: Think strategically about the company’s IT infrastructure. Security Management: Ensure the security of IT and data infrastructure, including … GDPR, and handling external security risks. Service Oversight: Oversee IT service desk and support, IT and data security policies, software licenses, third-party contracts, IT hardware and infrastructure, budget management, and data reporting systems. Network Management: Manage and support the network, including routers, switches, firewalls, VLANs, and ensure the smooth operation of all internal systems and servers, including More ❯
Manchester, England, United Kingdom Hybrid / WFH Options
Aareon UK
delivery of key software projects. Key Responsibilities Project Leadership: Oversee multiple, complex software projects, ensuring alignment with business goals and client needs in the social housing sector. Client Relationship Management: Serve as the primary liaison with clients, managing expectations and ensuring high levels of customer satisfaction throughout the project lifecycle. Scope Management: Define project scope, objectives, and deliverables … all stakeholders are aligned and that scope creep is minimized. Resource Allocation: Lead the planning and coordination of resources, including personnel, budget, and time to ensure successful project execution. RiskManagement: Proactively identify potential risks or issues, developing mitigation strategies and ensuring any roadblocks are addressed promptly. Team Collaboration: Work closely with cross-functional teams including developers, designers … clear and consistent communication with both internal and external stakeholders, providing regular project updates, status reports, and key performance indicators (KPIs). Continuous Improvement: Promote best practices in project management and drive process improvements to increase efficiency and project delivery success. Compliance & Quality Assurance: Ensure all projects comply with relevant regulatory standards and quality assurance protocols, particularly those specific More ❯
Join to apply for the Associate Director - RiskManagement - AI Governance role at Moody's Corporation 6 days ago Be among the first 25 applicants Join to apply for the Associate Director - RiskManagement - AI Governance role at Moody's Corporation Get AI-powered advice on this job and more exclusive features. 55 Princess Street, Floor … perspectives, turn inputs into actions, and uphold trust through integrity. Welcome to the Data Estate business unit at Moody's Analytics, where we are pioneering the future of data management and analytics in Moody's Analytics. Our mission is to deliver precise, timely data with a commitment to innovation. At Data Estate, we focus on enhancing Moody's digital … If you are passionate about data quality, governance, and innovation, we invite you to explore opportunities with us and help us deliver exceptional results. Job Summary: The Associate Director RiskManagement will focus on AI Governance, and will be responsible for supporting the identification, assessment, and mitigation of risks associated with AI technologies within the Data Estate. This More ❯
Manchester, England, United Kingdom Hybrid / WFH Options
Experis UK
start the role prior to clearance being fully completed. Role Overview We are seeking a highly experienced Senior Information Assurance Consultant to lead the development and implementation of security management processes for a new, high-profile service. This role will be instrumental in establishing and integrating a comprehensive Information Security Management System (ISMS) aligned with multiple industry standards … programme. As the role involves working with sensitive information, eligibility for SC clearance or holding active SC clearance is essential. Key Responsibilities Lead the design and implementation of security management processes for a new service offering. Develop and maintain a unified ISMS aligned with ISO/IEC 27001, NIST, PRISMA, and CoBIT frameworks. Conduct gap analyses and risk … standards and regulatory requirements. Collaborate with stakeholders across technical and business teams to embed security best practices throughout the service lifecycle. Provide expert guidance on information assurance, governance, and riskmanagement strategies. Support audit and certification activities, ensuring documentation and controls are in place and effective. Essential Skills & Experience Proven experience in information assurance, cyber security, or riskMore ❯
to the Head of Information Security, is a member of the UKTI leadership team, and oversees the design, implementation, and continuous enhancement of the Security Architecture, Identity and Access Management, and Secure Change Consultancy practices. This role works strategically across IT and the wider Bank to improve security, helping stakeholders manage Information Security risks effectively and influencing positive security … project and agile change lifecycles with risks identified, assessed, and managed. Maintain a framework of controls, methods, and tools for security in IT change, integrated into wider IT Change Management, architecture, Release management, and Group frameworks. Establish indicators and oversee the Security Posture in Change workstreams, including analysis of residual governance, risk, and control positions. Influence improvements … and Privacy risks within Change workstreams and operational risks into Run, aligned with the ORMF. Identify, diagnose, document facts, and resolve complex technical and organizational security issues, ensuring transparent riskmanagement and escalation. Influence at Roadmap steerco and risk committees to achieve security outcomes. Mobilize the Security Architecture practice with a plan to operationalize and embed, acting More ❯
ll work across a busy portfolio of change initiatives, ensuring quality, consistency, and compliance at every stage of the project lifecycle. Your Role Will Include: Monitoring adherence to project management methodologies (Agile, Waterfall, Hybrid) across multiple concurrent projects. Conducting regular health checks, compliance assessments, and quality reviews of project deliverables. Ensuring projects meet governance standards, including financial management … ability to engage and influence stakeholders at all levels, from delivery teams to leadership. Excellent communication and presentation skills with a clear analytical mindset. A passion for continuous improvement, riskmanagement, and quality assurance. Technical Skills Required: Proficient in MS Office (especially Excel, PowerPoint) Strong working knowledge of ServiceNow, JIRA, and Microsoft Project Familiar with risk and … issue tracking tools and methodologies Seniority level Seniority level Mid-Senior level Employment type Employment type Full-time Job function Job function Project Management and Information Technology Industries Banking Referrals increase your chances of interviewing at Atlanta Group by 2x Get notified about new Program Management Office Analyst jobs in Salford, England, United Kingdom . Manchester, England, United More ❯
have extensive hands-on experience in Microsoft 365, Entra ID (Azure AD), Microsoft Intune, Defender Suite, and Zero Trust Security Architecture. This role will focus on identity security, endpoint management, compliance, and cloud security, ensuring a secure and scalable IT infrastructure aligned with industry best practices. Experience with Layer 7 firewalls, VPNs, SD-WAN, and Virtual Desktop Infrastructure (VDI … is a plus. Your key responsibilities will include: 1. Microsoft Security & Identity Management Design and implement Zero Trust Security Architecture within Microsoft 365 and Azure environments. Manage Entra ID (Azure AD), Conditional Access, Multi-Factor Authentication (MFA), and Privileged Access Management (PAM). Optimize Microsoft Intune for endpoint security, compliance, and mobile device management (MDM). 2. … Apps, and Microsoft Defender XDR. Deploy Microsoft Sentinel (SIEM) for threat detection, log analysis, and incident response. Establish incident response playbooks and conduct forensic investigations when needed. 4. Compliance & RiskManagement Ensure adherence to ISO 27001, NIST, GDPR, and CIS Benchmarks. Conduct risk assessments, vulnerability scans, and security audits. Define data protection, backup, and retention policies aligned More ❯
security operations, implementing comprehensive security policies and initiatives. Threat Detection & Response : Leverage CrowdStrike and other EDR/XDR solutions to monitor, analyse, and respond to security threats. Identity & Access Management (IAM) : Design and enforce robust IAM policies, integrating with M365, Entra ID, and Active Directory. End User Computing Security : Implement security measures and controls for EUC environments, including endpoint … respond to security incidents, conducting forensic investigations as needed. Optimize Security Posture: Enhance security configurations to maintain compliance and mitigate risks. Automate Security Controls: Streamline security processes and data management to enhance metrics and operational support. Security Compliance & Governance : Ensure security configurations align with compliance frameworks such as CIS, ISO 27001, NIST, and regulatory requirements. Collaborate Across Teams: Work … vulnerabilities through ongoing monitoring, penetration testing, and vulnerability assessments, audits, and compliance checks. Security Awareness & Best Practices : Provide technical guidance and training to stakeholders, promoting security best practices and risk mitigation strategies. Security Automation & Optimization : Develop, implement, and optimize security automation processes to improve detection, response, and mitigation efforts. What we're looking for Experience : 3+ years in information More ❯
perspectives, turn inputs into actions, and uphold trust through integrity. Welcome to the Data Estate business unit at Moody's Analytics, where we are pioneering the future of data management and analytics in Moody's Analytics. Our mission is to deliver precise, timely data with a commitment to innovation. At Data Estate, we focus on enhancing Moody's digital … requirements: 2 - 4 years’ experience with preference given to quantitative background. Undergraduate/first-level degree (e.g., Bachelor’s degree) is required. Strong understanding of data sourcing strategies and risk management. Familiarity with data quality standards, taxonomies, and interoperability requirements. Familiarity with regulatory risks and compliance requirements related to data access and usage. Ability to assess complex data dependencies … such as Python, SQL, R. Familiarity with Machine Learning, GenAI models and project management. Strong decision-making skills with a focus on long-term growth and scalability. Excellent stakeholder management skills, with the ability to work across diverse teams and geographies. Strong written and verbal communication skills to articulate data strategies and risk mitigation plans. This role is More ❯
Currie & Brown is one of the leading International physical asset management and construction consultancies, dedicated to advising clients worldwide with our expertise and experience in multiple sectors and services. We are differentiated by our people, innovation and reputation with a genuine global office network. Our people, from the first-day apprentice to senior management make our business what … cost effective and resilient infrastructures on each site they work on. Conduct regular project review meetings with M & E consultants and contractors both on and off site. Develop project management systems, procedures and processes to ensure that external consultants and the internal team interface in the successful completion of the project. Advise and maintain standards for monitoring design and … programme, cost control and project information systems to ensure successful project delivery. Prepare monthly reports based on agreed standard formats that demonstrate and provide accurate information to the Senior Management team regarding projects currently in execution and that they are being managed for a successful outcome (including relevant financial and cash‐flow reports). Ensure compliance with all relevant More ❯
and listen to each other and customers in meaningful ways. Welcome to the Data Estate business unit at Moody's Analytics, where we are pioneering the future of data management and analytics in Moody's Analytics. Our mission is to deliver precise, timely data with a commitment to innovation. At Data Estate, we focus on enhancing Moody's digital … If you are passionate about data quality, governance, and innovation, we invite you to explore opportunities with us and help us deliver exceptional results. Job Summary: The Associate Director RiskManagement will focus on AI Governance, and will be responsible for supporting the identification, assessment, and mitigation of risks associated with AI technologies within the Data Estate. This … and implementation of AI governance frameworks and procedures to ensure the organization's compliance with regulatory requirements and industry best practices. The Associate Director will work closely with senior management, business segments, and other stakeholders to promote a strong risk culture and ensure effective riskmanagement practices for AI initiatives. Key Responsibilities: Assist in the development More ❯
perspectives, turn inputs into actions, and uphold trust through integrity. Welcome to the Data Estate business unit at Moody's Analytics, where we are pioneering the future of data management and analytics in Moody's Analytics. Our mission is to deliver precise, timely data with a commitment to innovation. At Data Estate, we focus on enhancing Moody's digital … If you are passionate about data quality, governance, and innovation, we invite you to explore opportunities with us and help us deliver exceptional results. Job Summary: The Associate Director RiskManagement will focus on AI Governance, and will be responsible for supporting the identification, assessment, and mitigation of risks associated with AI technologies within the Data Estate. This … and implementation of AI governance frameworks and procedures to ensure the organization's compliance with regulatory requirements and industry best practices. The Associate Director will work closely with senior management, business segments, and other stakeholders to promote a strong risk culture and ensure effective riskmanagement practices for AI initiatives. Key Responsibilities: Assist in the development More ❯
Senior Strategy Risk Manager , Worldwide Operations Security Amazon Manchester, England, United Kingdom Join or sign in to find your next job Join to apply for the Senior Strategy Risk Manager , Worldwide Operations Security role at Amazon Senior Strategy Risk Manager , Worldwide Operations Security Amazon Manchester, England, United Kingdom 6 days ago Be among the first 25 applicants … Join to apply for the Senior Strategy Risk Manager , Worldwide Operations Security role at Amazon Get AI-powered advice on this job and more exclusive features. Description Join Amazon's Worldwide Operations Security (WWOS) Strategy team as a Senior Strategy Risk Manager responsible for developing and implementing security through critical documentation frameworks. In this role, you will partner … plan through End-to-End Secure Network, Cost to Serve optimization, and Operational Resilience programs. Description Join Amazon's Worldwide Operations Security (WWOS) Strategy team as a Senior Strategy Risk Manager responsible for developing and implementing security through critical documentation frameworks. In this role, you will partner with senior leadership to develop and refine strategic communications, operational plans, and More ❯
Director/Associate Director of Project Management - AI Automation Join to apply for the Director/Associate Director of Project Management - AI Automation role at myGwork - LGBTQ+ Business Community Director/Associate Director of Project Management - AI Automation 2 days ago Be among the first 25 applicants Join to apply for the Director/Associate Director of … Project Management - AI Automation role at myGwork - LGBTQ+ Business Community Get AI-powered advice on this job and more exclusive features. This job is with Moody's, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Location(s): One Canada Square, Canary Wharf, London … in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity. We are seeking an experienced Director/Associate Director of Project Management to lead project delivery within our AI Automation team. The successful candidate will drive effective communication within the team and across the broader organisation, support riskmanagementMore ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Deloitte LLP
These five shared values lead every decision wemake and action we take, guiding us to deliver impact how and where it mattersmost . Connect to your opportunity The Control management Senior Manager - ServiceNow will be responsible for the following: Shape the development of technology control management including scoping, development of and testing ServiceNow tools for ITRM processes in … DT to allow for an effective, efficient and adaptable risk governance capability and contribute to its continuous improvement. Direct control development across DT, driving a consistent approach utilising the IRM capabilities within ServiceNow. Deliver the DT control library architecture and control data management. Secure commitment from member firms and stakeholders in the global firm to participate in the Technology … assess the member firm's overall IT capability/maturity and to help them establish their own priorities. Keep abreast of new and emerging technologies being deployed and ensure risk assessment processes are appropriately applied and advise on decisions with technology risk impacts as new activities and other change management/transformational initiatives. Leverage available technical resources More ❯
Manchester, England, United Kingdom Hybrid / WFH Options
Deloitte LLP
These five shared values lead every decision wemake and action we take, guiding us to deliver impact how and where it mattersmost . Connect to your opportunity The Control management Senior Manager - ServiceNow will be responsible for the following: Shape the development of technology control management including scoping, development of and testing ServiceNow tools for ITRM processes in … DT to allow for an effective, efficient and adaptable risk governance capability and contribute to its continuous improvement. Direct control development across DT, driving a consistent approach utilising the IRM capabilities within ServiceNow. Deliver the DT control library architecture and control data management. Secure commitment from member firms and stakeholders in the global firm to participate in the Technology … assess the member firm’s overall IT capability/maturity and to help them establish their own priorities. Keep abreast of new and emerging technologies being deployed and ensure risk assessment processes are appropriately applied and advise on decisions with technology risk impacts as new activities and other change management/transformational initiatives. Leverage available technical resources More ❯
Director/Associate Director of Project Management - AI Automation Join to apply for the Director/Associate Director of Project Management - AI Automation role at myGwork - LGBTQ+ Business Community Director/Associate Director of Project Management - AI Automation 2 days ago Be among the first 25 applicants Join to apply for the Director/Associate Director of … Project Management - AI Automation role at myGwork - LGBTQ+ Business Community Get AI-powered advice on this job and more exclusive features. This job is with Moody's, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Location(s): One Canada Square, Canary Wharf, London … in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity. We are seeking an experienced Director/Associate Director of Project Management to lead project delivery within our AI Automation team. The successful candidate will drive effective communication within the team and across the broader organisation, support riskmanagementMore ❯
Manchester, England, United Kingdom Hybrid / WFH Options
N BROWN
We're looking for a Governance, Risk and Compliance (GRC) Analyst to join our Cyber Security and Risk team here at N Brown Group. The Governance, Risk and Compliance team is responsible for the development and rollout of our security policies and procedures; for building an awareness programme to promote a strong security culture across the organisation … and tracking risks in our supply chain; and for ensuring we maintain compliance with regulations such as the PCI DSS. The team works closely with 1st and 2nd line risk to develop suitable controls and metrics to ensure the Digital Operations department is operating within risk appetite, and track remediation tasks when it is not. As a Governance … Risk and Compliance Analyst you will work across all these areas of the team's responsibilities and help to identify ways to improve simplicity and efficiency. Although this isn't a technical role, you will be expected to have sufficient technical expertise to understand technology risks and controls to mitigate them. You'll be an excellent communicator, with the More ❯
Manchester, England, United Kingdom Hybrid / WFH Options
N Brown Group
Governance, Risk and Compliance (GRC) Analyst Join to apply for the Governance, Risk and Compliance (GRC) Analyst role at N Brown Group Governance, Risk and Compliance (GRC) Analyst Join to apply for the Governance, Risk and Compliance (GRC) Analyst role at N Brown Group Get AI-powered advice on this job and more exclusive features. This … your skills and experience — talk with your recruiter to learn more. Base pay range Direct message the job poster from N Brown Group We’re looking for a Governance, Risk and Compliance (GRC) Analyst to join our Cyber Security and Risk team here at N Brown Group. The Governance, Risk and Compliance team is responsible for the … and tracking risks in our supply chain; and for ensuring we maintain compliance with regulations such as the PCI DSS. The team works closely with 1st and 2nd line risk to develop suitable controls and metrics to ensure the Digital Operations department is operating within risk appetite, and track remediation tasks when it is not. As a Governance More ❯
start the role prior to clearance being fully completed. Role Overview: We are seeking a highly experienced Senior Information Assurance Consultant to lead the development and implementation of security management processes for a new, high-profile service. This role will be instrumental in establishing and integrating a comprehensive Information Security Management System (ISMS) aligned with multiple industry standards … programme. As the role involves working with sensitive information, eligibility for SC clearance or holding active SC clearance is essential. Key Responsibilities: Lead the design and implementation of security management processes for a new service offering. Develop and maintain a unified ISMS aligned with ISO/IEC 27001, NIST, PRISMA, and CoBIT frameworks. Conduct gap analyses and risk … standards and regulatory requirements. Collaborate with stakeholders across technical and business teams to embed security best practices throughout the service lifecycle. Provide expert guidance on information assurance, governance, and riskmanagement strategies. Support audit and certification activities, ensuring documentation and controls are in place and effective. Essential Skills & Experience: Proven experience in information assurance, cyber security, or riskMore ❯