10 of 10 Permanent GRC Jobs in Edinburgh

Governance Lead Location: Edinburgh - Hybrid Salary: £100,000 + Bonus We are seeking an AI Governance Lead to join a leading global consulting and technology organisation helping clients harness the potential of Artificial Intelligence safely, responsibly and at scale. Working across a broad range of sectors, you'll partner with … organisations to navigate the opportunities and risks associated with AI, helping them develop robust governance frameworks, policies and operating models. You'll work closely with senior stakeholders across business, legal, compliance, risk, technology, security, data and engineering teams to deliver practical solutions that enable innovation while meeting regulatory and operational ...

your career! We are seeking a highly motivated, experienced professional to join the Cirrus Logic Information Security team as a Lead Information Security Analyst - Governance, Risk Management, & Compliance (GRC). You will be responsible for designing, operating, and continually improving our ISO 27001–aligned governance, risk, and compliance program, with … enterprise from a security and risk perspective. This role is highly collaborative and supports business strategy in a dynamic, engineering driven environment.Key Responsibilities:GRC Program & ISO 27001: Lead day‐to‐day operation and continuous improvement of our ISO 27001–aligned Information Security Management System (ISMS), including policies, standards, and control ...

noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

enabled business models.Supporting organisations in developing actionable transformation programmes for the organisations, and navigating cyber transformation to support new, digitally enabled business models.Designing effective governance roles and operational frameworks to assess and define prioritised, risk-based roadmaps to increase cyber maturity, prepare for and support regulatory compliance, and allow cyber … CISM, CISA or an MSc in cyber security or a related discipline.Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews.Consulting Skills:Experience building relationships with clients and developing an internal network of subject matter experts.Experience of business ...

Description:Head of Governance, Risk and Compliance (Information Security) Your impact Leonardo UK operates in a complex security, regulatory and defence environment. As Head of Governance, Risk and Compliance for the information security team, you will lead the function responsible for setting clear security standards, supporting proportionate risk decisions and … required to travel between Leonardo UK sites, with hybrid working supported where appropriate for the role. What you will do as Head of Governance, Risk and Compliance: Lead the Information Security Governance, Risk and Compliance function. Own and maintain UK Information Security standards, assurance arrangements and governance processes. Help ensure ...

Role: Senior AI Governance Consultant Location: Edinburgh Salary:£70,000£95,000 An experienced consulting professional to design and operationalise AI governance at scale across regulated and complex organisations. Large multidisciplinary consulting firm operating across defence, government, financial services, life sciences and transport; global delivery footprint and multi-discipline project … teams. Key responsibilities: - Lead design and implementation of AI governance frameworks, policies, controls and operating models across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance ...

organisation to deliver well-evidenced control assessments, validate remediation submitted by risk and control owners, and support the program’s wider reporting and governance activities. The role suits someone who is comfortable moving between hands-on technical testing, structured documentation, and proactive stakeholder follow-up.Key ResponsibilitiesSupport execution of the Control … required.Identify, track, and report control gaps, risks, and non-compliance issues to stakeholders, and support the development of remediation recommendations.Maintain ServiceNow (or an equivalent GRC/ITSM platform) workflows for remediation tracking and control lifecycle management.Collaborate with cross-functional technical and compliance stakeholders to ensure testing is consistent, well-evidenced ...

Technology Group and include Data Security, Identity & Access Management, Security Engineering, IAM Administration and Privileged Access Management, the team work alongside Security Operations and Governance, Risk and Compliance to protect Arup’s platforms, information and data.Watch this short clip to discover how Arup are shaping a better world and … standing up Arup’s new Data Security service, defining its vision, operating model, roadmap and measures of success.You’ll build the team, establish clear governance, and work closely with peers across Cyber to embed data protection into how the firm operates and delivers work.The role provides single‐point ownership ...

supplier incidents, service failures and operational resilience events.Governance & ReportingPrepare risk reporting for management, Executive committees and Board forums.Representing Second Line Risk at appropriate FNZ governance committees.Provide management information and key risk metrics relating to third-party risks.Ensure material supplier risks, issues and trends are clearly communicated to senior stakeholders.Support preparation … supplier populations.Track and monitor remediation actions arising from audits, risk assessments and regulatory reviews.Facilitate risk and control assessments relating to third-party arrangements.Using the Governance, Risk & Compliance system (Archer) to support the risk management oversight of third-party arrangements.Stakeholder ManagementBuild strong relationships with team and functional leadership, procurement teams and ...

priorities and enable joined-up delivery.Represent the function in key forums, providing insight, constructive challenge and strategic direction.Ensure commercial decisions are supported by robust governance, risk management and regulatory compliance, proactively mitigating delivery risks.Why join us We’re on an exciting journey to transform our Group and … utilising insight to drive optimisations across digital channelsProven success in leading cross-functional initiatives and delivering measurable outcomes.Deep understanding of performance frameworks, investment governance, and value tracking.Ability to lead through ambiguity, challenge constructively, and drive strategic transparency.Exceptional stakeholder management and influencing skills, with experience engaging at executive levels.Exceptional project management ...