1 to 25 of 42 Contract GRC Jobs in the UK excluding London

Senior Technology Risk & Controls Governance Consultant - Banking Client - London Location: London - Hybrid (8 days onsite per month) Day Rate: Circa £700 per day Contract Type: Inside IR35 - Umbrella Company Required Industry: Financial Services/Banking We are currently seeking an experienced Senior Technology Risk & Controls Governance Consultant to join … leading global financial services organisation based in London. This is an excellent opportunity to play a pivotal role in strengthening Technology Risk Management, Cybersecurity Risk Governance and Control Oversight across a complex, highly regulated technology environment. Working closely with the Head of IT & Security Risk Management, you will support ...

Lead, you will play a central role in maintaining and developing the Group's cyber governance framework, supporting subsidiaries with security compliance, audit readiness and risk management. You will also play an important role in integrating newly acquired businesses into the Group's cyber governance framework, building relationships with subsidiary … Risk & Compliance Lead Responsibilities Reporting to the Group Information Security Officer, you will act as a key point of contact for cyber governance, risk and compliance activity across the Group. Responsibilities will include: Acting as the main point of contact for cyber security audits and audit readiness across the Group. ...

annual bonus + excellent benefits Contract: Permanent Help protect critical services through effective cyber security governance Are you passionate about cyber security, data governance and compliance? Do you enjoy translating complex security requirements into practical controls that make a real difference? We're looking for an experienced Cyber Security GRC … growing Cyber Security team. In this role, you'll play a key part in strengthening our cyber security posture through governance, risk management and compliance activities, while helping to ensure our information assets remain protected. A significant focus of the role will be the administration and continual improvement of Microsoft ...

take ownership of key governance activities and make a meaningful impact across a large-scale organisation. Reporting directly to the Cyber Governance, Risk & Compliance (GRC) Manager, you'll play a key role in ensuring that information assets are appropriately identified, classified, retained, protected and managed in line with internal policies … reports, management information and recommendations for senior stakeholders. Identify opportunities to improve information management processes, controls and operational efficiency. Support wider Cyber Governance, Risk and Compliance initiatives. Skills and Experience Essential Previous experience in an Information Governance, Information Management, Data Governance or related role. Strong understanding of information classification, retention ...

track remediation actions and support cyber risk management. Produce security policies, standards, assessment reports, compliance evidence and executive reporting. Support audits, control reviews, assurance and compliance assessments. Engage stakeholders, facilitate workshops and gather evidence to support security initiatives. Contribute to supplier assurance and third-party risk management. Improve security governance … public sector, regulated or enterprise environments. Knowledge of GovAssure and public sector security requirements. Familiarity with Microsoft Azure and AWS. Experience with GRC platforms and risk management tools. Understanding of Secure by Design and security architecture principles. Certifications One or more of the following would be advantageous: ISO 27001 Lead ...

compliance activities while helping shape the organisation's approach to cyber security and AI governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third … party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. ...

assessments from initial scoping to final risk rating in a timely manner. [ Due Diligence & Questionnaires: Administer, review, and score security questionnaires, vendor self-assessments, and risk artifacts. Evidence & Contract Review: Inspect security documentation (e.g., SOC 2 reports, policies, technical whitepapers) and review security/data protection clauses in third-party … external stakeholders, and support risk treatment or waiver workflows. Required Skills & Qualifications Experience: 2–4+ years of experience in Information Security, GRC (Governance, Risk, and Compliance), or Third-Party Risk Management (TPRM). Framework Knowledge: Solid working knowledge of ISO 27001 (mandatory validation experience) alongside familiarity with frameworks like NIST ...

effectiveness of cyber security controls, identifying areas of non-compliance, monitoring risk exposure and providing clear, evidence-based assurance reporting to senior leadership and governance committees. Working closely with first-line Cyber Security, IT, OT, Risk and Compliance teams, the postholder will provide independent scrutiny of cyber security arrangements, ensuring … control weaknesses, assurance gaps, emerging threats and areas of heightened cyber risk. Review and challenge first-line risk assessments, control self-assessments, remediation plans and risk acceptance decisions. Maintain oversight of cyber risk exposure, ensuring material issues are appropriately escalated through established governance channels. Cyber Assurance Reporting & Governance - Own and ...

consultancy supporting clients across government, defence and the commercial sector. This is an opportunity for a cyber security professional with experience in governance, risk and compliance to work directly with clients, helping them assess security controls, identify risks and meet compliance requirements. The ideal candidate will have previous consultancy experience … assessments. Assess client security controls against recognised standards and frameworks. Identify gaps, evaluate risks and recommend appropriate remediation. Support clients with governance, risk management and compliance requirements. Review evidence, document findings and provide actionable recommendations. Contribute to client engagements and deliverables across a range of sectors. About You Previous experience ...

Head Of Technology GRC Markerstudy Group have an exciting opportunity to share. This is a hybrid role with the requirement to work 2 days a week from either our Manchester, Stoke, Chesterfield, Peterborough or Tunbridge Wells office. Role Purpose To lead the Technology Governance, Risk & Compliance activities, ensuring technology … solutions align to overarching business objectives while safeguarding it against risk?. The role provides strategic leadership and direction across governance, risk management, assurance, and compliance activities. It ensures that technology risks are transparent, controlled, and embedded within enterprise risk management processes, while enabling innovation and digital transformation.? The role ...

title: Principal Consultant - AI Security & Governance (SME) Location: London/Hybrid Salary: Competitive market rate If you know what it takes to navigate AI security, risk and governance within complex organisations, this is an opportunity to take that experience somewhere you can actually shape the answer. Businesses are investing heavily … works and proving it's safe to deploy. Boards want confidence. Engineers need practical guardrails. We're looking for a Principal Consultant - AI Security & Governance to bridge that gap. You'll be joining a growing, AI-native technology consultancy, with the opportunity to build the security, governance and assurance capability ...

expanding professional community within the governance, risk and compliance (GRC) sector. The business provides a modern technology platform that helps organisations manage risk, compliance and governance more effectively. Working with recognised brands across financial services, retail, technology, energy and professional services, the company is continuing to grow its presence … and build meaningful connections. With an established membership of over 500 professionals, the ambition is to grow this into a leading community for risk and compliance professionals across the UK and beyond. This is where you come in. The Role This is a varied, hands-on opportunity for someone with ...

work in the role's location by the start of their employment. About us We're Wilmington plc, a group of businesses united by governance, risk and compliance. Acting as a trusted partner, we help our customers to do the right business in the right way as they navigate … Wilmington plc, we help global customers to do the right business in the right way - providing trusted data, insights, and education to navigate the Governance, Risk and Compliance (GRC) landscape. When you join us, you'll not only make a real difference for our customers, you'll also enjoy flexibility ...

Contract | London (2 Days per Month Onsite) | SC Clearance Required Are you an experienced Cyber Security professional with a strong background in Governance, Risk & Compliance (GRC) and cloud security assurance? We're supporting a leading consultancy delivering secure, mission-critical services within highly regulated environments and are seeking a Cyber … secure environments. Working closely with security teams, project stakeholders, governance forums, and government-facing organisations, you'll ensure cloud services meet stringent security, risk and compliance requirements throughout their lifecycle. You'll play a key role in influencing secure cloud adoption, managing assurance activities, providing expert guidance, and ensuring alignment ...

IR35 + Hybrid from Corsham The Role An opportunity for an experienced Security Assurance Coordinator to support the programme, delivering security governance, risk management and compliance across MOD OpNET environments. You will ensure systems meet MOD security assurance requirements, supporting Secure by Design (SbD), cyber risk management and security control … strategic security solutions. Organise and chair project Security Working Groups. Support the Security Architect and Security Engineer in ensuring solutions meet Secure by Design and risk tolerance requirements. Balance operational and business requirements with information assurance and cyber security obligations. Coordinate assurance activities with the OpNET Black/Red Security ...

opportunities, and innovative solutions that support strategic objectives. Promote safe, secure, and compliant adoption of AI and innovation practices, ensuring alignment with governance, risk, and compliance requirements. Build and manage relationships with external partners, technology providers, and innovation ecosystems to maximise access to emerging technologies and expertise. Monitor and measure … stakeholder management skills, with the ability to influence and engage senior leaders across business and technology functions. Strong understanding of governance, risk management, security, and compliance considerations associated with emerging technologies. Exceptional analytical, problem-solving, communication, and presentation skills. Strategic thinker with the ability to challenge the status quo while ...

opportunities, and innovative solutions that support strategic objectives. Promote safe, secure, and compliant adoption of AI and innovation practices, ensuring alignment with governance, risk, and compliance requirements. Build and manage relationships with external partners, technology providers, and innovation ecosystems to maximise access to emerging technologies and expertise. Monitor and measure … stakeholder management skills, with the ability to influence and engage senior leaders across business and technology functions. Strong understanding of governance, risk management, security, and compliance considerations associated with emerging technologies. Exceptional analytical, problem-solving, communication, and presentation skills. Strategic thinker with the ability to challenge the status quo while ...

recruiting on behalf of a client in the Critical National Infrastructure (CNI) sector for Cyber GRC Analysts at intermediate and senior levels. These roles embed effective cyber risk management across a large, highly regulated organisation, identifying, assessing, and treating cyber risks in line with business objectives and enterprise risk frameworks. … What you'll do Conduct cyber risk assessments across systems, services, and projects Maintain and update the cyber risk register, escalating significant risks Collaborate with ICT, business units, and project teams to embed risk management practices Support development of cyber risk frameworks, tools, and methodologies Advise on risk mitigation strategies ...

London or Stockport Office. Full-time hours apply. We are happy to discuss flexible working! Top 3 skills needed for this role: Proven security governance expertise Strong information risk judgement Credible stakeholder communication What this role is all about Play a key role in shaping the future of Information Security … Vitality. As our Senior Information Security Officer, you'll lead on security governance and risk, strengthen our ISO 27001 framework and bring clear, practical security thinking to key business decisions. From strategic projects and suppliers to regulatory requirements, you'll influence across the business, drive continuous improvement and support ...

London or Stockport Office. Full-time hours apply. We are happy to discuss flexible working! Top 3 skills needed for this role: Proven security governance expertise Strong information risk judgement Credible stakeholder communication What this role is all about Play a key role in shaping the future of Information Security … client. As our Senior Information Security Officer, you'll lead on security governance and risk, strengthen our ISO 27001 framework and bring clear, practical security thinking to key business decisions. From strategic projects and suppliers to regulatory requirements, you'll influence across the business, drive continuous improvement and support ...

and resilience: Lead triage and resolution of critical platform incidents, own root-cause prevention and keep communication with clients transparent throughout recovery. Governance, risk and compliance: Implement robust governance frameworks and compliance controls, acting as the authoritative lead on risk mitigation and the primary technical contact for regulatory matters. Knowledge … databases Proficiency in SQL, with experience in data integration and ETL tools Excellent knowledge of big data technologies and frameworks Strong knowledge of data governance and data security best practices An analytical mindset, attention to detail and a consultative approach Excellent communication and stakeholder management skills Disclaimer: Any remuneration stated ...

software configuration and release management across development, testing and production environments. The role combines hands-on configuration, build and deployment responsibilities with release planning, governance, risk management and stakeholder coordination.A key focus will be maintaining release integrity, improving deployment reliability and ensuring releases comply with established change, security, audit and … Production. Facilitate release planning meetings and deployment readiness reviews. Maintain release calendars and communicate schedules to relevant stakeholders. Ensure releases follow change management and governance processes. Build & Deployment Management Manage and optimise build processes to improve reliability, consistency and deployment efficiency. Support automated deployments across cloud and on-premises platforms. ...

software configuration and release management across development, testing and production environments. The role combines hands-on configuration, build and deployment responsibilities with release planning, governance, risk management and stakeholder coordination.A key focus will be maintaining release integrity, improving deployment reliability and ensuring releases comply with established change, security, audit and … Production. Facilitate release planning meetings and deployment readiness reviews. Maintain release calendars and communicate schedules to relevant stakeholders. Ensure releases follow change management and governance processes. Build & Deployment Management Manage and optimise build processes to improve reliability, consistency and deployment efficiency. Support automated deployments across cloud and on-premises platforms. ...

experienced Information Security professional with Investment Management experience? You could be progressing your career, working at the intersection of technology, security and governance within a fast paced Hedge Fund. As a Senior Information Security Engineer, you'll lead the security function from both a technical and risk perspective … with colleagues in New York. You will be the sole UK based security engineer/lead responsible for designing, implementing and maintaining security controls and GRC compliance. You will work closely with the global CISO team (New York/London), report to senior leadership and influence security strategy across ...

and resilience capabilities. This is a highly visible role where you will work closely with senior stakeholders across technology and business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring … cloud-related risks and controls. We are looking for a confident and influential cyber security professional with a proven track record in governance, risk and compliance, information security auditing and enterprise risk management. You will possess excellent stakeholder management skills, the ability to translate technical issues into business language and ...