1 to 25 of 27 Permanent GRC Jobs in Central London

Governance and Risk Lead About the role Reporting to Head of I&T GRC, Governance and Risk Lead will be responsible for driving information and cyber security awareness, delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and manufacturing site teams. You will review … and review. You will take responsibility for managing a subset of aspects of ISO 27001 related documentation and control activities. As the I&T Governance and Risk Lead you will have the responsibility of aspects of the I&T GRC scope, delegated and assigned by the Head ...

expect Work to agile best practices and cross-functionally with multiple teams and stakeholders. You'll be helping clients design, implement and operationalise AI governance frameworks, as well as contributing to internal initiatives. Support clients in navigating emerging AI regulations, standards, and guidance while enabling innovation and business value. Facilitate … workshops, governance forums, risk assessments, and operating model design activities with senior stakeholders. Live in-person whiteboarding sessions to problem solve as a team, alongside asynchronous communication on Teams. Hybrid working with the team on client site or in our office a minimum of two days per week. However ...

delivery processes including sprint planning, testing, and release management. Monitor product performance, user adoption, and stakeholder feedback to drive continuous improvement. Ensure solutions meet governance, risk, compliance, and financial control requirements. Skills Required 5+ years' experience in Product Management, Finance Transformation, Financial Systems, Business Analysis, or related disciplines. Bachelor ...

ensuring data integrity, securing information, and navigating regulatory compliance with confidence. With a blend of technical expertise and clever thinking, we redefine GRC and IT strategies, empowering organisations to shine. From wielding cyber-superpowers to mastering security frameworks like ISO 27001:2013 and NIST, we’re certified wizards ready ...

capable Cyber Security Specialist to support the protection of the organisation's information assets, systems, and services. The role will work across security operations, governance, risk management, compliance, incident response, and security awareness to help maintain a robust and resilient security posture. What you'll do: Security Operations Monitor security … security incidents, coordinating containment, eradication, and recovery activities. Support vulnerability management activities, including remediation tracking and reporting. Assist with threat intelligence gathering and analysis. Governance, Risk & Compliance Support the maintenance and continual improvement of the Information Security Management System (ISMS). Conduct security risk assessments and maintain risk registers. Assist ...

and remediation of control weaknesses and issues. Provide clear, risk-based reporting on control effectiveness, issues, and remediation progress to the Group CISO and governance forums. Regulatory & Risk Management Support regulatory examinations, client due diligence, and external audits related to technology and cyber controls. Ensure technology controls support Apex … control expectations for managed service providers and offshore service models. Address evolving risks associated with cloud platforms, SaaS solutions, and emerging technologies. Stakeholder Engagement & Governance Act as a key advisor to the Group CISO on technology control maturity, risks, and investment priorities. Engage senior Technology, Risk, Compliance, and business leaders ...

and Cyber Essentials Plus programme. The role focuses on policy, risk management, audits, and continuous improvement across UK operations. You will coordinate certifications, manage GRC tooling, and support clients with compliance services, audits, and readiness assessments, while collaborating with engineering and operations teams. #J-18808-Ljbffr ...

ticketing system for London. Role overview The Senior Security Consultant plays a pivotal role in shaping and executing the organisation's information security strategy, governance and risk management activities to protect services, systems and data. The role is responsible for implementing security frameworks, leading risk and incident management, ensuring regulatory … party security, and driving continuous improvement through monitoring, reporting and awareness initiatives. Key Responsibilities Define, implement and monitor corporate information security strategies, objectives and governance frameworks. Design and implement information security management systems and security master plans. Lead risk management activities, including risk identification, assessment, treatment and reporting. Define cybersecurity ...

London. This is an excellent opportunity for an information security professional to play a key role in protecting a global business, strengthening security governance and ensuring compliance with industry standards and regulatory requirements. Working closely with the Senior Information Security Manager, Cyber Security Manager and wider business, you will take … processes, improving compliance and promoting a strong security-aware culture across the organisation. Key Responsibilities Develop, implement and maintain information security policies, procedures and governance frameworks. Manage information security risks, maintain the risk register and oversee remediation activities. Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus , alongside relevant ...

stakeholder management. What you'll be doing: • Lead cybersecurity projects and programmes from strategy through to delivery • Advise senior clients on cyber strategy, risk, governance and security transformation • Deliver security assessments, workshops and risk reviews • Develop security frameworks, policies and governance approaches • Provide expertise across areas including OT Security, Security … Operations, IAM, GRC and AI Security • Build trusted relationships with senior client stakeholders • Identify new opportunities and support proposals, bids and account growth • Manage, mentor and develop security consultants • Contribute to wider cyber thought leadership and capability development What they're looking for: • Strong background in cybersecurity consulting, advisory ...

same standards plus UK GDPR and DORA: configuring the tools, writing the templates and collateral, and delivering the first engagements. Core systems Compliance Manager GRC (Kaseya): frameworks, assessments, evidence collection, risk register (administrator and owner) Network Detective and VulScan (Kaseya) for assessment and technical evidence (user) myITprocess (Kaseya) for compliance … carried out by accredited bodies) A policy and procedure template library clients can adopt Automated evidence collection and continuous monitoring in Compliance Manager GRC Employee security and compliance training programmes, using BullPhish ID Compliance project plans and roadmaps in myITprocess Compliance as a Service: an ongoing monthly service combining ...

performance, maintainability and operational readiness. Support the deployment of analytical solutions within the organisation's cloud environment while adhering to enterprise security controls and governance requirements. DevOps, Automation & Platform Engineering Champion modern engineering and DevOps practices across the platform. Drive adoption and maturity of CI/CD pipelines, Infrastructure … Terraform and Infrastructure as Code principles to ensure repeatable, secure and scalable environments. Continuously assess and improve engineering efficiency through automation and standardisation. Security, Governance & Compliance Embed security‐by‐design principles within all platform components and services. Ensure solutions align with organisational governance standards, security policies and regulatory obligations. Balance ...

direction, development and ongoing optimisation of the ServiceNow platform. This role will be responsible for ensuring the platform delivers maximum business value through effective governance, innovation and operational excellence. Working closely with Technology, business stakeholders and external partners, the successful candidate will drive platform adoption, service improvements and long-term … platform stability, performance, security and availability across all ServiceNow services. Oversee third-party vendors, service providers and platform-related budgets. Establish strong governance, risk management and compliance controls for the platform. Lead, coach and develop platform and engineering teams to drive high performance. What you’ll bring Extensive experience managing ...

Officer to help mature our Information Security Management System (ISMS). You will assume day-to-day ownership of information security, privacy and cyber governance while maintaining enough technical knowledge to confidently oversee IT partners and work within Microsoft 365 administration environments. Key Responsibilities Governance, Compliance & ISMS: Maintain and improve … security sections. Maintain a library of standard responses, policies, and certifications. Candidate Profile & Key Skills Experience: 2-5 years in information security, compliance, GRC, or risk management. Standards & Audit: Hands-on experience with ISO 27001 audits, Cyber Essentials Plus (CE+), and the IASME assessment framework. Understanding of privacy principles, regulations ...

permission to work in the roles location by the start of their employment. About us Were Wilmington plc, a group of businesses united by governance, risk and compliance. Acting as a trusted partner, we help our customers to do the right business in the right way as they navigate … Wilmington plc, we help global customers to do the right business in the right way - providing trusted data, insights, and education to navigate the Governance, Risk and Compliance (GRC) landscape. When you join us, youll not only make a real difference for our customers, youll also enjoy flexibility through hybrid ...

role’s location by the start of their employment. Before you go.... About us We’re Wilmington plc, a group of businesses united by governance, risk and compliance. Acting as a trusted partner, we help our customers to do the right business in the right way as they navigate … Wilmington plc, we help global customers to do the right business in the right way - providing trusted data, insights, and education to navigate the Governance, Risk and Compliance (GRC) landscape. When you join us, you’ll not only make a real difference for our customers, you’ll also enjoy flexibility ...

Enablement, you will take end-to-end ownership of the Academy — its strategy, curriculum, proficiency pathways, champion networks, platform, community, measurement and governance — and the small central team and specialist contributors that deliver it. The strategic challenge has shifted from access to depth: moving the firm from broad enablement … Academy framework alongside the AI Enablement Partner function, the champions and power users, and partner closely with Technology, our build partner (Percepta), AI Governance, Risk, Compliance and Learning & Development. Own and evolve the AI Academy strategy and operating model Own the AI Academy strategy end-to-end as the upskilling ...

vulnerabilities, understanding how applications behave and working directly with developers to make software more secure. This isn’t a traditional vulnerability management, SOC or governance position. Instead, you’ll join a small Security Engineering team where you’ll investigate security findings, assess real‐world exploitability and risk, monitor security tooling … Kubernetes security experience, plus exposure to C#, .NET, Python, Bash or PowerShell. This Role Probably Isn’t For You If... Your experience is primarily GRC, audit, compliance or policy. Your background is traditional vulnerability management focused mainly on running scanners, raising tickets and chasing remediation. Your experience is predominantly ...

Junior Information Security Analyst (GRC) Are you in the early stages of your Information Security career and looking for an opportunity to develop your GRC experience? We're recruiting for a Junior Information Security Analyst to join an established Information Security and Risk team within a highly regarded professional services … organisation in Central London. This is a junior-level opportunity aimed at someone with around 1–2 years' experience within Information Security, GRC, IT risk or a related area. You'll work alongside experienced Information Security professionals and receive support and guidance while developing your knowledge across ISO 27001, risk ...

Trayport is seeking a GRC Manager to lead the governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services. Lead a team, partner with Legal, Privacy, Procurement and ...

based Chief Growth Officer to drive strategic partnerships and revenue growth in the UK. In this role, you'll spearhead sales of our innovative GRC and HRIS software suite. Working closely with our delivery teams, you'll play a key role in expanding and retaining our customer base … what you will be upto in this role: Insightful Exploration: Dive into the array of solutions Grouper offers, with a focus on our pioneering GRC an HRIS tech software suite. Strategic Partnerships Champion: Forge strategic alliances with data analytics integrators, paving the way for widespread adoption of Grouper’s software ...

Cushman & Wakefield is seeking an AI Governance Manager in London to operationalize its enterprise AI governance framework and ensure AI systems comply with internal policies and regulatory expectations globally. The role works with Privacy, Legal, Compliance, Risk, Information Security, IT, and business teams to translate policies into practical governance processes ...

Information Security and Risk team in Central London. This junior role targets individuals with around 1–2 years of experience in Information Security, GRC or IT risk, providing guidance and development in ISO 27001 and related compliance. You will support a wide range of GRC activities, assist with ISMS maintenance ...

Lead | Permanent | London (Canary Wharf/Watford) | Hybrid Overview We're hiring a SAP IAM Lead to take ownership of identity governance, access control and risk management across a major, complex SAP landscape spanning S/4HANA, ECC and cloud applications. You'll be the go-to specialist for secure … lead position covering everything from role design and provisioning through to SoD risk analysis and workflow configuration, with genuine scope to shape access governance standards across the organisation. Role & Responsibilities Implement and configure SAP IAM (ARA, ARM, EAM, RDP) Run SoD risk analysis; manage rulesets and mitigation controls Design business ...

Smith is seeking an I&T Governance and Risk Lead to join our global packaging platform. You will report to the Head of I&T GRC and drive information and cyber security awareness, deliver training, and coordinate cyber scenario simulations across central and manufacturing sites. You will review responses ...