1 to 25 of 99 Permanent GRC Jobs in London

Governance Manager An excellent opportunity for an experienced governance professional to support robust corporate governance, compliance, Board and Committee processes within a highly regulated environment. If youve also worked in the following roles, wed also like to hear from you: Corporate Governance Manager, Governance and Compliance Manager, Company Secretarial Manager … Board Governance Manager, Governance Lead, Corporate Governance Lead, Risk and Compliance Manager, Compliance Manager, Governance Officer, Company Secretarial Officer SALARY: £58,714 to £61,500 per annum + Benefits LOCATION: Hybrid working from home with limited office attendance required in Ealing (W5) JOB TYPE: Full-Time, Permanent WORKING HOURS ...

Cyber Governance Consultant Salary: Up to £100,000 base + package Location: Hybrid (UK client sites, office and home-based) I'm recruiting for an experienced Cyber Governance Consultant to join a leading cybersecurity consulting team delivering high-impact security and governance solutions across government and secure-sector clients. This … excellent opportunity to work on complex cyber governance, risk and compliance programmes, helping organisations strengthen their security posture while meeting regulatory and business requirements. What you'll be doing You'll work closely with clients to assess, design and improve cybersecurity governance frameworks, providing strategic advice across areas including: Cyber ...

and ensure governance, security and compliance information remains accurate and up to date Leadership & Stakeholder Engagement: Build, lead and develop a high-performing compliance and governance function. Provide regular reporting and strategic guidance to senior leadership and the Board on AI, privacy and compliance risks. Promote … culture of responsible AI, data protection and regulatory awareness through training and engagement programmes. Collaborate with cross-functional teams to embed governance, risk management and compliance into business processes and technology delivery. Key Requirements: 10–15+ years of experience across privacy, governance, compliance, intellectual property (IP), R&D incentives and ...

people fulfil their hopes and realise their ambitions. We’re currently seeking an experienced professional to join our team in the role of AI Governance Delivery Lead. You’ll sit within the Credit and Capital Management AI & Innovation team as the key bridge between AI delivery teams and HSBC … governance, risk and control functions, helping AI initiatives move through governance processes with clarity, pace and confidence while ensuring risks are understood, documented, and managed to meet the expectations of risk stewards and senior decision-makers, and supporting the safe and effective delivery of AI initiatives by helping the team ...

GRC Director Location: London (West Hampstead) – Hybrid (3 days onsite, 2 days remote) Salary: TBC We are creating this role to build and lead our Governance, Risk & Compliance practice and Compliance as a Service offering. You will offload senior leadership workload and drive client-facing GRC delivery. You will Lead … Cyber Essentials, GDPR, and related assessments Present to senior stakeholders and boards Support growth of virtual CISO and compliance services Essential Proven experience in GRC, Information Security, Audit or Risk Management Strong knowledge of Cyber Essentials/Plus and UK GDPR Excellent report writing and client-facing communication skills Ability ...

GRC Specialist City of London/Hybrid Circa 90k + bonus and excellent benefits A well-established and highly regarded financial services organisation in the City of London is looking for an experienced, IT GRC Specialist to take on a broad, senior-level role spanning risk, controls, and governance across … outsourced IT infrastructure partners, so you'll need to be comfortable navigating that kind of complexity from day one. What you'll be doing Governance Lead the development and continuous improvement of IT risk and control governance methodologies Provide change governance oversight across IT programmes and transformation initiatives Produce senior ...

and Board to communicate risk posture and information security considerations clearly. Requirements A minimum of 5 years’ experience in a second line information security, GRC or data protection role within a UK regulated financial services firm. Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements. ...

Description Job Purpose The Engineer, Information Security GRC (Governance, Risk, and Compliance) is part of a team responsible for the global Information Security program. The role would gain exposure to the full suite of businesses and products which underpin the Parent Intercontinental Exchange (ICE) company. Information Security (IS) is charged … class cybersecurity and physical security program, and avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls. Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct ...

SaaS security models, multi-tenant architectures, and shared responsibility frameworks. Familiarity with security questionnaires and trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta). Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Proficiency with process automation ...

SaaS security models, multi-tenant architecture, and shared responsibility frameworks. Familiarity with security questionnaire and trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta). Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Comfort with process automation ...

post-launch optimization. Ensure AI products are designed for enterprise scale, global deployment, local market needs, and the security standards required in financial services. Governance, Risk & Compliance Embed responsible AI, data governance, privacy, security, and compliance requirements into the product lifecycle. Partner with legal, privacy, security, compliance, risk, and audit … Define approval gates and production-readiness criteria based on agent autonomy, data sensitivity, tool access, regulatory exposure, and business impact. Drive consistency across AI governance, model governance, data governance, and enterprise access-control policies. Customer Adoption & Commercialization Drive adoption of the Agent Factory across internal product, engineering, data, and business ...

engineering context. Ability to communicate security risk clearly to both technical and non‐technical audiences, without defaulting to jargon or compliance‐speak. Familiarity with GRC concepts including risk management, controls design, and third‐party assurance, gained through hands‐on practice rather than solely policy work. Comfort working across multiple teams ...

white papers, and public engagements that build confidence in Oracle’s security posture Cross‐functional Leadership Collaborate with Product Security, Product Development, Security Operations, GRC, Legal, and Global Industries teams to ensure customer‐facing security messaging aligns with operational reality Act as a connective tissue between Oracle’s internal teams ...

regardless of source, format or structure. By partnering with the industry's leading firms, we are helping to rethink operating models, increase efficiency, strengthen governance and regulatory compliance, reduce risk, streamline processes and build the workforce of the future. More than 10,000 users across 30+ countries process billions … York, Wroclaw, Antwerp, and Singapore, we move fast, build with purpose, and hold ourselves to a high bar. As we scale, information security, governance, and IT operations sit at the heart of that ambition. What you will be doing Security architecture and engineering Define security architecture standards and lead threat ...

Infrastructure and Cyber Security capabilities. The role provides both strategic direction and hands-on leadership across infrastructure services, cloud platforms, cyber security, governance, risk, compliance and technology transformation, ensuring that technology remains secure, resilient, scalable and aligned to business needs.Working closely with senior stakeholders, the role is accountable for maintaining … computing, collaboration platforms, identity management and infrastructure monitoring.* Drive standardisation, automation and continual service improvement.**Cyber Security*** Define and maintain the Cyber Security strategy, governance framework and operating model.* Ensure compliance with recognised security frameworks including ISO 27001, NIST Cyber Security Framework and IEC 62443.* Lead security architecture, Security Operations ...

forecasting, and resource allocation.* Track spend against plan and provide variance analysis.* Assist in developing business cases for new initiatives or investments.6. Security Program Governance* Oversee the implementation and governance of global security programs in EMEA.* Ensure adherence to enterprise security policies and frameworks.* Coordinate across multiple stakeholders to maintain … governance and accountability.7. Risk, Compliance & Audit Coordination* Act as the single point of contact for IT Security related audits and compliance engagements.* Manage audit readiness, evidence coordination, and remediation tracking.* Maintain strong relationships with internal audit, compliance, and regulatory teams.8. Reporting & Global/Regional Coordination* Coordinate EMEA security reporting and ...

improvements. Participate in on‐call and incident response, helping to diagnose and resolve production issues. Security & compliance aware engineering Work closely with Security and GRC teams to ensure services meet security and compliance requirements (e.g. SOC 2, ISO 27001). Implement secure coding practices, strong authentication and authorization patterns, and ...

supplier award for our delivery into this international banking group, Deerfoot is assisting with a Senior VP Level opportunity where you can shape risk, governance and control across a major technology function. This is a unique role for a high-calibre practitioner who can bridge the gap between deep technical … months. This role requires a 50/50 balance between strategic evolution and hands-on execution. Acting as a trusted partner and a robust governance function, you will ensure technical risks are accurately identified and remediated while translating complex data into decision-ready insights for executive leadership. What ...

supplier award for our delivery into this international banking group, Deerfoot is assisting with a Senior VP Level opportunity where you can shape risk, governance and control across a major technology function. This is a unique role for a high-calibre practitioner who can bridge the gap between deep technical … months. This role requires a 50/50 balance between strategic evolution and hands-on execution. Acting as a trusted partner and a robust governance function, you will ensure technical risks are accurately identified and remediated while translating complex data into decision-ready insights for executive leadership. What ...

supplier award for our delivery into this international banking group, Deerfoot is assisting with a Senior VP Level opportunity where you can shape risk, governance and control across a major technology function. This is a unique role for a high-calibre practitioner who can bridge the gap between deep technical … months. This role requires a 50/50 balance between strategic evolution and hands-on execution. Acting as a trusted partner and a robust governance function, you will ensure technical risks are accurately identified and remediated while translating complex data into decision-ready insights for executive leadership. What ...

development and management of its Information Security and Cyber Security framework. The successful candidate will play a key role in cyber risk management, security governance, policy management, audit support, third-party risk assessment, and security operations. Working closely with internal stakeholders, offshore teams, and external service providers, this individual will … security controls are implemented and operating effectively across the organisation. Contribute to the continuous improvement of the organisation's cyber security maturity framework. Security Governance & Compliance Coordinate security assessments, including vulnerability assessments, penetration testing, ethical hacking exercises, and cyber security reviews. Support internal audits, external audits, regulatory reviews, and security ...

GRC Manager Locations: UK Wide (Hybrid) Salary: £60,000 - £84,000 Are you an Information Assurance or Cyber Security professional looking to lead security governance, risk, and compliance initiatives? This is an opportunity to join a leading cyber team, supporting clients with complex security challenges and helping shape effective assurance … strategies. Youll act as a subject matter expert, delivering assurance projects, advising stakeholders on cyber risk, and helping organisations improve their security posture across governance, compliance, and operational security. What you'll have the opportunity to work across: Identify, assess, and manage cyber security risks using recognised methodologies. Conduct assurance ...

and reusable services that accelerate AI product development across LSEG. Drive enterprise adoption of common AI infrastructure and developer tooling. Collaborate with Security, Architecture, Governance and Risk teams to ensure compliance with enterprise policies and Responsible AI standards. Work closely with product teams across LSEG to understand platform requirements and ...

runtime and control plane infrastructure.* Partner with relevant teams and stakeholders to ensure a coherent, governed AI foundation.Governance, Risk & Compliance* Accountable for AI model governance across the division - ensuring all systems meet regulatory standards for explainability, auditability, and bias prevention.* Engage proactively with market risk, legal, compliance, audit and other ...

enterprise risk appetite into an actionable, outcome‐driven security strategy; and support the multi‐year roadmap and quarterly OKRs. Chair the executive security governance forums and drive enterprise security governance mechanisms. Architecture & Engineering Oversee Security Architecture and Engineering; ensure “secure‐by‐default” across cloud, application, data, identity, and infrastructure landscapes. … drive constant improvement. Drive secure‐by‐design into applications and ensure all applications and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee ...