1 to 25 of 49 Permanent GRC Jobs in the South East

security awareness programme, delivering training, phishing simulations and engaging security communications Develop, maintain and improve security policies, standards, procedures and incident response playbooks Support governance, risk and compliance activities, ensuring security controls, backup and disaster recovery processes remain effective Produce regular security reporting and metrics, providing insight into vulnerabilities, patch ...

secure solution design. Applying Secure by Design principles within technology, engineering or digital programmes. Working within Defence or with Defence industry partners. Cyber security governance, risk and compliance. Security assurance. Cloud security and modern digital platforms. DevSecOps and Agile delivery environments. Identity and access management. Enterprise security technologies and controls. ...

secure solution design. Applying Secure by Design principles within technology, engineering or digital programmes. Working within Defence or with Defence industry partners. Cyber security governance, risk and compliance. Security assurance. Cloud security and modern digital platforms. DevSecOps and Agile delivery environments. Identity and access management. Enterprise security technologies and controls. ...

around c.700,000 of whom are institutional customers who have had their retirement benefits secured with us. We’re looking for an Information Security GRC Analyst to help strengthen our approach to information and cyber security across our Retirement Retail and Investment business areas. Working collaboratively with technology teams and ...

CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud (certified solutions architect level) #LI-REMOTE ...

function by identifying and implementing changes to enhance DR service quality, cost efficiency, and effectiveness. Communicate regularly with stakeholders, including system owners, Head of GRC, and senior management, providing updates on DR performance and other relevant information. Key Skills, Experience and Qualifications Essential Requirements Experience in Business Continuity and Operational ...

differing operational, safety, resilience and regulatory contexts across SSE businesses. Working with the Senior Technology Risk & Controls Manager and the wider Cyber Defence GRC team, the role translates enterprise risk requirements into practical delivery. It enables risks to be clearly articulated, consistently assessed and linked to controls, obligations, issues, incidents ...

across cloud, enterprise and operational technology environments. Defining and scoping security testing activities and communicating findings, remediation strategies and residual risks to stakeholders. Supporting governance, risk and compliance activities within secure and regulated environments. Depending on experience, you may: Lead consultancy engagements and workstreams. Mentor and support the development … and secure government environments. You will have opportunities to build specialist knowledge in Secure by Design, security assurance, cyber risk management and Defence security governance while working on nationally significant programmes. We support professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ...

Governance, Risk and Compliance Manager - Job Advert About the job. As part of the development of our Digital Services function, we are recruiting to strengthen internal digital capability within Cyber Security, Digital Operational Services, and Digital Corporate and Shared Services. These roles are central to building sustainable in-house expertise … that supports the management, development and delivery of digital solutions across the transport network. As Governance, Risk and Compliance Manager at National Highways, you will play a key leadership role in strengthening how we manage security governance, risk and compliance across our organisation. Reporting to the Head of Security Services ...

United Kingdom, seeks a Technical Program Manager for the Trust and Assurance team to lead compliance automation. You will analyze controls in the GRC platform, drive engineering integration, and ensure continuous, audit-ready controls across cloud and internal systems. Strong knowledge of NIST, ISO 27001, SOC 2 and related frameworks ...

mature, and contributes to its ongoing development through practical, on-the-ground execution. This role translates strategy into practical, company-wide operations, ensuring effective governance, accountability and risk management across all RWS functions and markets. Working closely with stakeholders across Legal, Security, Technology, Product, HR and other business functions … Program Manager will drive program execution, coordinate key initiatives, support incident response and audit readiness, and help mature RWS's approach to privacy, AI governance and information security. The successful candidate will bring a combination of privacy and compliance expertise, program management capability, and a strong interest in information security. ...

they are completed on time, within budget and deliver business value. Manage technology suppliers, contracts and service level agreements. Cyber and Information Security, Data & Governance Ensure the security, integrity and resilience of all systems, applications and data. Develop and maintain IT policies, standards and governance frameworks. Ensure compliance with legal … regulatory and cyber security requirements. Lead data governance and business intelligence initiatives to support effective decision-making. Ability to identify technological threats and the need to evolve and improve systems to prevent risks. Resource Management Develop and manage the departmental budget, ensuring value for money and effective resource allocation. Prepare ...

design principles, vulnerability management, SBOMs, and incident reporting processes. Drive implementation of cybersecurity and risk management controls, ensuring compliance with regulatory requirements related to governance, accountability, supply chain security, and operational resilience. Manage compliance programs and projects end-to-end, defining timelines, milestones, and deliverables while proactively tracking progress, risks … reporting, and insights that measure program maturity and communicate compliance status to leadership. What You Will Need: 7+ years of experience in cybersecurity compliance, governance, risk & compliance (GRC), IT/cyber risk management, or a related regulatory compliance function. Strong knowledge of EU cybersecurity regulations, including NIS2 and the Cyber ...

Information Security Officer – GRC & Compliance Location: Reading area – hybrid Salary: £55,000–£57,000 basic Contract: Permanent About the Company We are working with a large, privately owned technology distribution business operating across the UK and Europe. The organisation partners with some of the world's leading technology brands, supplying … experienced Information Security Officer to join the team. The Role Reporting to the Director of Cyber Security, you will work across Information Security, GRC, ISMS, compliance and security consultancy , helping to maintain and improve the organisation's security controls and overall cyber maturity. The role has a strong focus ...

leadership and act as the key deputy to the Director of Cyber Security. The Role This is a senior position combining Information Security leadership, GRC, security architecture, compliance and hands-on security delivery . You will take ownership of significant security initiatives and projects, provide guidance across the wider business … with technical teams to make sure security controls are properly designed, implemented and maintained. Key Responsibilities Act as the senior Information Security SME across GRC, ISMS, security architecture and compliance . Support the Director of Cyber Security with the delivery of the wider security strategy and improvement plan. Provide leadership ...

SiXworks is seeking a Security Consultant to design, build, and deliver secure digital solutions in highly secure environments. You will collaborate with engineers, architects and delivery specialists to enable faster, safer decision-making for critical ...

help this iconic media organisation find an experienced Technology Risk and Controls Manager for a 12 month FTC. Reporting into the Head of GRC, you'll provide assurance over technology controls during an exciting period of change and transformation. In addition to evaluating and identifying risks, you'll partner with ...

Legal & General (L&G) seeks a Senior Information Security Analyst on a fixed-term contract to strengthen information security across Retirement Retail and Investment businesses. You will work with technology teams and business stakeholders to ...

across the partner ecosystem and stakeholder community, providing technical assurance, solution oversight, and engineering direction throughout the programme lifecycle. Establish and maintain robust engineering governance, assurance, risk management, compliance, configuration management, and technical review processes, ensuring adherence to Defence, NATO, security, and industry standards and regulatory requirements. Develop and sustain … data centre technologies, server and virtualisation platforms, distributed edge-compute environments, networking, communications systems, cyber security, and secure operational environments. Strong understanding of engineering governance, technical assurance, quality management, configuration management, technology management, safety, security, and risk management frameworks. Experience with modern engineering and delivery methodologies, including SAFe, Agile, DevSecOps ...

profile projects. Successful candidates may work across several specialist areas, including: Information Security and Risk Management Cyber Security Assurance Operational Technology (OT) Security Security Governance, Risk & Compliance (GRC) Business and Operational Resilience Secure-by-Design Implementation Key Responsibilities Conduct security risk assessments within complex operational and technology environments Support clients … identifying, analysing and managing cyber security risks Deliver security assurance and governance activities aligned to recognised standards Provide cyber security advice across systems, networks and business processes Contribute to resilience planning, incident preparedness and recovery activities Engage with customers and stakeholders to communicate risks and recommendations effectively Support the development ...

teams worldwide to embed secure-by-design principles, manage risk, and ensure regulatory readiness while supporting audits and regulatory engagements. The role requires extensive GRC experience, strong project management, and excellent communication to translate complex requirements for technical and non-technical #J-18808-Ljbffr ...

Information Security Lead/ISO27001/SOC/GRC/Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. We're currently recruiting for an Information Security Lead to own and drive our compliance programmes (ISO 27001, SOC 1 Type 2, SOC 2 Type … Type 2, and SOC 2 Type 2 programmes, including evidence collection, control testing, policy maintenance, and auditor liaison Maintain our GRC platform - keeping controls, evidence, and risk registers current and audit-ready at all times Drive continuous improvement of policies, procedures, and controls across the business Serve as the primary ...

objectives. This role provides technical leadership across ServiceNow implementations, integrations, platform architecture, and modernization initiatives while ensuring adherence to best practices, security standards, and governance frameworks. The ideal candidate will possess deep expertise in the ServiceNow platform, strong architectural skills, and the ability to lead cross-functional teams in delivering … ServiceNow solutions aligned with enterprise architecture standards. Define platform architecture, integration patterns, data models, and technical roadmaps. Lead architectural reviews and provide technical governance for ServiceNow implementations. Ensure platform scalability, performance, reliability, and maintainability. Evaluate and recommend new ServiceNow capabilities and emerging technologies. Technical Leadership Provide technical direction to developers ...

help this iconic media organisation find an experienced Technology Risk and Controls Manager for a 12 month FTC. Reporting into the Head of GRC, you'll provide assurance over technology controls during an exciting period of change and transformation. This is a hands-on role in a hybrid setup; based ...