1 to 25 of 27 Permanent GRC Jobs in Scotland

Governance ManagerLocation - Hybrid - GlasgowWork Arrangement - HybridWhat we do at WeirWe are a global leader in mining technology for a sustainable future. We help our customers extract the resources the world needs more efficiently and more sustainably. Our planet’s future depends on the transition to renewable energy, and that transition … engineering, planning or customer support. You’ll work with purpose, learn every day and help shape a more sustainable future.What you’ll do• AI Governance Framework & Operating Model: Maintain and continuously improve the enterprise AI Governance Framework by developing policies, standards, procedures, and control requirements. Define and embed governance roles ...

Governance Lead Location: Edinburgh - Hybrid Salary: £100,000 + Bonus We are seeking an AI Governance Lead to join a leading global consulting and technology organisation helping clients harness the potential of Artificial Intelligence safely, responsibly and at scale. Working across a broad range of sectors, you'll partner with … organisations to navigate the opportunities and risks associated with AI, helping them develop robust governance frameworks, policies and operating models. You'll work closely with senior stakeholders across business, legal, compliance, risk, technology, security, data and engineering teams to deliver practical solutions that enable innovation while meeting regulatory and operational ...

your career! We are seeking a highly motivated, experienced professional to join the Cirrus Logic Information Security team as a Lead Information Security Analyst - Governance, Risk Management, & Compliance (GRC). You will be responsible for designing, operating, and continually improving our ISO 27001–aligned governance, risk, and compliance program, with … enterprise from a security and risk perspective. This role is highly collaborative and supports business strategy in a dynamic, engineering driven environment.Key Responsibilities:GRC Program & ISO 27001: Lead day‐to‐day operation and continuous improvement of our ISO 27001–aligned Information Security Management System (ISMS), including policies, standards, and control ...

myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the job you’re considering The GRC Lead operates within the Operational Integrator (OI) function and is responsible for leading cyber security governance, risk, and compliance activities across a multi-supplier (SIAM … environment. The role provides oversight and coordination of supplier security governance activities, ensuring risks, controls, compliance obligations, and assurance requirements are consistently managed and reported. Acting as a key interface between suppliers, security functions, service management teams, and client stakeholders, the Security GRC Lead enables effective security governance, risk-informed ...

noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

full-time UK-based role, with a minimum of three days per week in the office.Key Duties & Responsibilities Support the Supply Chain and GRC function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UKAnalyse technical, physical, environmental and personnel security risks, advise/support ...

helping to protect critical IT and OT environments that support onshore and offshore renewable operationsWhat you’ll be doingReporting to the Head of SPR Governance, Risk and Compliance, you will identify, assess, and mitigate cyber risks across renewable energy assets, supply chains, and business operations. You will develop and maintain ...

enabled business models.Supporting organisations in developing actionable transformation programmes for the organisations, and navigating cyber transformation to support new, digitally enabled business models.Designing effective governance roles and operational frameworks to assess and define prioritised, risk-based roadmaps to increase cyber maturity, prepare for and support regulatory compliance, and allow cyber … CISM, CISA or an MSc in cyber security or a related discipline.Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews.Consulting Skills:Experience building relationships with clients and developing an internal network of subject matter experts.Experience of business ...

design, development, validation, and rollout of AI-enabled capabilities.Contribute to Agile and hybrid delivery programmes through backlog refinement, sprint planning, stakeholder management, reporting, and governance activities.Support responsible AI adoption by contributing to governance, risk, compliance, change management, training, and business readiness activities.Analyse data, AI performance metrics, and operational outcomes … problem-solving skills, with experience interpreting data, identifying insights, and building recommendations.Familiarity with Agile delivery methodologies, product operating models, and change management frameworks.Understanding of governance, operational risk, regulatory considerations, and responsible AI principles within financial services.Bonus Points ForExperience working directly within investment banking or capital markets organisations.Previous consulting or advisory ...

improve operational efficiency Work with multiple levels of our clients, from C-level executives, senior and management staff, to on-the-ground professionals Establish governance frameworks for our clients, including strategies, organisation, policies, processes, standards, and guidelines. Review and analyse client IT and Cyber environments, from infrastructure and databases … advantage (e.g. banking and finance, aviation, transportation, property development, pharmaceuticals, etc.) Familiarity with any of the following technologies would be an advantage: o GRC tools o Security controls like firewalls, proxies, segmentation, VPN, IDS/IPS, application firewalls, database controls, encryption o IOT/Mobile technologies and related security best ...

Description:Head of Governance, Risk and Compliance (Information Security) Your impact Leonardo UK operates in a complex security, regulatory and defence environment. As Head of Governance, Risk and Compliance for the information security team, you will lead the function responsible for setting clear security standards, supporting proportionate risk decisions and … required to travel between Leonardo UK sites, with hybrid working supported where appropriate for the role. What you will do as Head of Governance, Risk and Compliance: Lead the Information Security Governance, Risk and Compliance function. Own and maintain UK Information Security standards, assurance arrangements and governance processes. Help ensure ...

Automation platforms.Establish patterns for integrating AI services into enterprise applications.Ensure solutions align with enterprise architecture, security and compliance requirements.Lead technical design reviews and architecture governance activities.Engineering & DeliveryBuild and oversee development of AI-powered applications and services.Lead proof-of-concepts, pilots and production implementations.Collaborate with Agile delivery teams to embed … Copilot, Azure OpenAI and other enterprise AI services where appropriate.Governance, Risk & ComplianceEnsure responsible AI principles are embedded in all solutions.Implement monitoring, auditability and model governance controls.Assess risks relating to bias, security, privacy and ethical use of AI.Work with legal, security and compliance teams to maintain regulatory adherence.Support AI governance boards ...

and experienced professional, ready to lead on safeguarding digital infrastructure in a large government department? Will you join us in embedding robust governance, risk management and compliance practices across the Home Office In this critical role, you will identify, understand and mitigate cyber-related risks and evaluate the risks … personal expertise.Person specificationMain ResponsibilitiesIndependently and impartially undertaking risk management activities within a given area of practice or expertise, usually within established security and risk management governance structures. You will lead the independent derivation and analysis of security needs and conduct tailored threat assessments, security audits, or other risk management activities ...

Role: Senior AI Governance Consultant Location: Edinburgh Salary:£70,000£95,000 An experienced consulting professional to design and operationalise AI governance at scale across regulated and complex organisations. Large multidisciplinary consulting firm operating across defence, government, financial services, life sciences and transport; global delivery footprint and multi-discipline project … teams. Key responsibilities: - Lead design and implementation of AI governance frameworks, policies, controls and operating models across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance ...

organisation to deliver well-evidenced control assessments, validate remediation submitted by risk and control owners, and support the program’s wider reporting and governance activities. The role suits someone who is comfortable moving between hands-on technical testing, structured documentation, and proactive stakeholder follow-up.Key ResponsibilitiesSupport execution of the Control … required.Identify, track, and report control gaps, risks, and non-compliance issues to stakeholders, and support the development of remediation recommendations.Maintain ServiceNow (or an equivalent GRC/ITSM platform) workflows for remediation tracking and control lifecycle management.Collaborate with cross-functional technical and compliance stakeholders to ensure testing is consistent, well-evidenced ...

organisation to deliver well-evidenced control assessments, validate remediation submitted by risk and control owners, and support the program’s wider reporting and governance activities. The role suits someone who is comfortable moving between hands-on technical testing, structured documentation, and proactive stakeholder follow-up.Key ResponsibilitiesSupport execution of the Control … required.Identify, track, and report control gaps, risks, and non-compliance issues to stakeholders, and support the development of remediation recommendations.Maintain ServiceNow (or an equivalent GRC/ITSM platform) workflows for remediation tracking and control lifecycle management.Collaborate with cross-functional technical and compliance stakeholders to ensure testing is consistent, well-evidenced ...

organisation to deliver well-evidenced control assessments, validate remediation submitted by risk and control owners, and support the program’s wider reporting and governance activities. The role suits someone who is comfortable moving between hands-on technical testing, structured documentation, and proactive stakeholder follow-up.Key ResponsibilitiesSupport execution of the Control … required.Identify, track, and report control gaps, risks, and non-compliance issues to stakeholders, and support the development of remediation recommendations.Maintain ServiceNow (or an equivalent GRC/ITSM platform) workflows for remediation tracking and control lifecycle management.Collaborate with cross-functional technical and compliance stakeholders to ensure testing is consistent, well-evidenced ...

Advise on data protection, cybersecurity, and cross‐border data transfer issues (GDPR and other global regimes). Support privacy compliance frameworks, DPIAs, and data governance processes. Risk, Governance & Compliance Provide pragmatic advice on legal and regulatory risk across multiple jurisdictions. Support internal policies, governance requirements and compliance programmes. Assist with ...

and innovation strategy Provide leadership and oversight to project managers, lead engineers, and integrated project teams Drive accountability across project teams, ensuring effective delivery, governance, and risk management Ensure compliance with engineering processes, stage-gate reviews, safety requirements, regulatory standards, export controls, and cybersecurity protocols Monitor portfolio performance, including delivery … delivering complex projects from concept through to implementation Commercially aware with the ability to balance innovation, customer requirements, and business objectives Experienced in project governance, compliance, and structured delivery methodologies Strong stakeholder management, communication, and presentation skills Degree qualified in Engineering or a related discipline Experience within highly regulated industries ...

positioned to successfully navigate due diligence. Role Purpose The Chief Financial Officer will lead the finance function, providing strategic leadership across financial planning, reporting, governance, treasury, risk management and commercial finance. The role exists to ensure the organisation has the financial capability, systems, controls and insight required to support sustainable … improve financial visibility across manufacturing and supply chain activities; support operational investment and scalability decisions; and ensure financial controls support operational growth and efficiency. Governance, Risk & Compliance: Lead financial governance and risk management activities across the Group; ensure compliance with all statutory, tax, audit and regulatory requirements; maintain robust financial ...

Technology Group and include Data Security, Identity & Access Management, Security Engineering, IAM Administration and Privileged Access Management, the team work alongside Security Operations and Governance, Risk and Compliance to protect Arup’s platforms, information and data.Watch this short clip to discover how Arup are shaping a better world and … standing up Arup’s new Data Security service, defining its vision, operating model, roadmap and measures of success.You’ll build the team, establish clear governance, and work closely with peers across Cyber to embed data protection into how the firm operates and delivers work.The role provides single‐point ownership ...

Technology Group and include Data Security, Identity & Access Management, Security Engineering, IAM Administration and Privileged Access Management, the team work alongside Security Operations and Governance, Risk and Compliance to protect Arup’s platforms, information and data.Watch this short clip to discover how Arup are shaping a better world and … standing up Arup’s new Data Security service, defining its vision, operating model, roadmap and measures of success.You’ll build the team, establish clear governance, and work closely with peers across Cyber to embed data protection into how the firm operates and delivers work.The role provides single‐point ownership ...

supporting a leading global financial services organisation, is looking for a hands-on Data Modelling Specialist/Senior Python Developer to join their data governance function, sitting within a technology risk and controls team. We are looking for candidates with strong Python development experience, alongside hands-on Collibra metadata management … expertise. Experience in data modelling, governance, APIs, SQL and financial services would be particularly relevant. You will work closely with data governance, architecture, technology, risk and compliance teams, turning complex regulatory and metadata requirements into robust models and platform-ready solutions. What You'll Do Design, enhance and maintain asset ...

supplier incidents, service failures and operational resilience events.Governance & ReportingPrepare risk reporting for management, Executive committees and Board forums.Representing Second Line Risk at appropriate FNZ governance committees.Provide management information and key risk metrics relating to third-party risks.Ensure material supplier risks, issues and trends are clearly communicated to senior stakeholders.Support preparation … supplier populations.Track and monitor remediation actions arising from audits, risk assessments and regulatory reviews.Facilitate risk and control assessments relating to third-party arrangements.Using the Governance, Risk & Compliance system (Archer) to support the risk management oversight of third-party arrangements.Stakeholder ManagementBuild strong relationships with team and functional leadership, procurement teams and ...

priorities and enable joined-up delivery.Represent the function in key forums, providing insight, constructive challenge and strategic direction.Ensure commercial decisions are supported by robust governance, risk management and regulatory compliance, proactively mitigating delivery risks.Why join us We’re on an exciting journey to transform our Group and … utilising insight to drive optimisations across digital channelsProven success in leading cross-functional initiatives and delivering measurable outcomes.Deep understanding of performance frameworks, investment governance, and value tracking.Ability to lead through ambiguity, challenge constructively, and drive strategic transparency.Exceptional stakeholder management and influencing skills, with experience engaging at executive levels.Exceptional project management ...