1 to 25 of 545 Permanent GRC Jobs in the UK

Vendor Governance & Risk Management Officer

Location
Greater London, England, United Kingdom
Services (GTS) manages a large and complex portfolio of third-party service providers, managed service arrangements, and intra-company service agreements. The Vendor Performance, Governance and Risk Management function is responsible for ensuring these relationships are governed effectively, aligned to business objectives, managed within risk appetite, and compliant with internal … teams, Global Procurement Services, Third Party Risk Management (TPRM), Risk, Compliance, Legal, Audit, Finance, and vendor partners. The Officer role provides operational, administrative, and governance support across risk management, outsourcing oversight, Annual Intra-Company IT Recertification, and performance management activities for a global portfolio of technology vendors and managed service ...

SAP Security GRC Analyst

Location
Greater London, England, United Kingdom
Your base location will be in either our Lincoln or Huntingdon office. Are you an experienced SAP Security professional with strong knowledge of SAP GRC, access governance and risk management? We’re looking for an SAP Security GRC Analyst to join our Information Services team and play an important role … protecting Anglian Water’s business‐critical SAP platforms. You’ll bring specialist expertise across SAP Security, SAP GRC Access Control and access governance, helping us ensure access is designed, provisioned and maintained in line with cyber security policies, regulatory requirements, internal controls and business needs. What you’ll be doing ...

Business Analyst

Hiring Organisation
MetricStream
Location
London, UK
Employment Type
Full-time
MetricStream is the global market leader for Integrated Governance, Risk, and Compliance (GRC) solutions delivered on an intelligent integrated platform. MetricStream's purpose-built platform is proven with over a million global users, designed to serve GRC use cases across industries and powered by deep domain expertise, embedded content, rich … between client stakeholders and the MetricStream implementation team, ensuring that customer requirements are accurately captured, translated into functional configurations, and delivered successfully within the GRC (Governance, Risk & Compliance) platform. Key ResponsibilitiesClient Engagement & RequirementsConduct discovery workshops and stakeholder interviews to gather business and functional requirementsDocument current-state processes and map them ...

Business Analyst

Location
Greater London, England, United Kingdom
Requisition ID 3563 -Posted 07/16/2026 - Professional Services - Country (1) - City (1) MetricStream is the global market leader for Integrated Governance, Risk, and Compliance (GRC) solutions delivered on an intelligent integrated platform. MetricStream’s purpose-built platform is proven with over a million global users, designed … serve GRC use cases across industries and powered by deep domain expertise, embedded content, rich context, integrated data, and explainable AI. Since 2001, MetricStream has empowered organizations to intuitively harness front-line intelligence that enables all stakeholders to make real-time risk-aware business decisions. Job Description Business Analyst – MetricStream ...

Information Security GRC Analyst

Location
Ipswich, England, United Kingdom
GRC Analyst strengthens PCI Pal's central Information Security function by providing structured governance, risk and compliance analysis across audit, assurance, control management and strategic change. The role turns requirements, evidence, risks and delivery updates into accurate, traceable information that supports timely decisions by the GRC Lead and CISO. … Security Project Manager to track ongoing and strategic initiatives, maintain clear ownership and delivery visibility, and provide concise, evidence-based updates. It remains a GRC role: the Analyst provides assurance, analysis and tracking, while the Project Manager retains responsibility for project governance, planning and delivery coordination. Job requirements Relevant experience ...

Group AI Governance, Risk and Compliance Manager (DPO)

Location
Greater London, England, United Kingdom
Title: Group AI Governance, Risk and Compliance Manager (DPO) Department: Group IT Location: London – Hybrid (plus multi-site travel as required) We are Strata! Strata Group is a collective of award-winning specialist agencies, united by one ambition: to help people and brands on a missioncreate meaningful, memorable and measurable … clients one partner, uniting experts –giving them access to the right combination of people and capabilities for every challenge. Job Overview The Group AI Governance, Risk & Compliance Manager is responsible for establishing, maintaining and continuously improving the Group's governance, compliance, information security, data protection and AI governance frameworks. Acting ...

UK Account Executive

Location
Greater London, England, United Kingdom
LogicGate® is the leading AI GRC platform for the Enterprise, helping governance, risk, and compliance teams limit surprises, strengthen resilience, augment program performance, and confidently quantify impact and business value. Built to provide a centralized view of risk and compliance, with AI intelligence woven into the platform's core, LogicGate … and actionable data to help drive current business decisions, with the flexibility to scale alongside evolving business needs. Recognized as a Leader in the GRC Market, LogicGate continues to further solidify its position as a best-in-class platform. At LogicGate, our people are the foundation of everything we do. ...

Supervisor, IT Security, Governance, Risk & Compliance

Location
Winnersh, England, United Kingdom
Location(s): Winnersh, GB, RG41 5TS We Make Life More Rewarding and Dignified Location : Winnersh Department : IT Summary The Supervisor, Governance, Risk & Compliance (GRC) leads and enhances the organization's cybersecurity governance, risk management, regulatory compliance, audit readiness, third-party risk, security awareness, privacy coordination, and policy management programs. … Recruit, interview, onboard, and coach team members. Foster a collaborative team environment and work effectively with internal teams, business partners, and external vendors. Security GRC Oversight: Oversee day-to-day Cybersecurity GRC activities, including risk assessments, compliance activities, audits, and security assessment coordination. Develop and maintain SOPs, playbooks, and runbooks ...

Cyber Security Manager – Governance, Risk and Compliance (GRC)

Hiring Organisation
Essex Partnership University NHS Foundation Trust
Location
Grays, RM16 2PX, United Kingdom
Salary
£51657.00 to £58785.00
summary Cyber Security Manager - Governance, Risk and Compliance (GRC) Band 7 - £49,387 - £56,515 per annum Thurrock Community Hospital Are you ready to lead cyber security at scale in a complex, mission-driven organisation where your work truly matters? We're looking for an experienced and passionate Cyber Security … Manager - Governance, Risk & Compliance (GRC) to drive our cyber assurance agenda and strengthen the resilience of critical NHS services. Reporting directly to the Associate Director of Information Security (CISO), you will play a pivotal leadership role, shaping how we manage cyber risk, compliance, and governance across the Trust. This ...

Privacy & Data Governance Manager

Location
Glasgow, Scotland, United Kingdom
Privacy & Data Governance Manager Location - Hybrid - Glasgow Work Arrangement - Hybrid What we do at Weir We are a global leader in mining technology for a sustainable future. We help our customers extract the resources the world needs more efficiently and more sustainably. Our planet’s future depends on the transition … planning or customer support. You’ll work with purpose, learn every day and help shape a more sustainable future. What you’ll do Privacy Governance: Develop, maintain, and enhance the organisation's Privacy Management Framework ensuring compliance with GDPR, UK data protection, and other global privacy laws. Support Privacy ...

Governance, Risk & Compliance (GRC) Consultant

Location
City Of London, England, United Kingdom
Governance, Risk & Compliance (GRC) Consultant Department: Tech Hub Employment Type: Contract Location: London, England, United Kingdom Contract Contract: Initial 4-month engagement Daily rate: GBP 600-GBP 800 a day Outside IR35 (subject to final determination and contractual agreement) Location: Canary Wharf Hybrid. Attendance at LCCC offices will be required … where necessary to support workshops, stakeholder engagement, evidence gathering and delivery of agreed project outcomes About the Engagement LCCC is seeking two experienced Governance, Risk & Compliance (GRC) consultants to support the delivery of a NIST Cybersecurity Framework (CSF) 2.0 maturity assessment programme. This engagement has been established to deliver specific ...

GRC Pre-Sales Consultant / Solutions Engineer – EMEA

Location
Greater London, England, United Kingdom
clarity, feasibility, and alignment on the end-to-end solution. Because Vanta is the platform our customers rely on to build and run their GRC programmes, this is a natural next step for GRC professionals, programme managers, auditors, and compliance practitioners who want to apply their domain expertise … based from our London office or Dublin office with an office-centric hybrid schedule. The standard in-office days are Tuesday, Wednesday, and Thursday. GRC practitioners are especially encouraged to apply—whether you've managed GRC programmes in-house, audited them as an internal or external auditor, or helped customers ...

Vulnerability Management Service Lead

Location
Lancashire, England, United Kingdom
management capability within a highly regulated enterprise environment. This is an opportunity to play a critical role in protecting business-critical systems by driving governance, risk reduction, supplier accountability, and continuous improvement across a large-scale security operation. You'll work closely with senior stakeholders, security teams, and delivery partners … ensure vulnerabilities are effectively identified, prioritised, remediated, and reported across the organisation. If you're passionate about cyber risk management, security governance, and influencing positive security outcomes at scale, we'd love to hear from you. The Role As the Vulnerability Management Service Lead, you will be responsible for owning ...

Senior Trust Security Analyst

Location
Greater London, England, United Kingdom
Have you got what it takes? Citizenship & Clearance: UK citizenship and ability to pass and maintain SC clearance. Experience: 5+ years in a security, GRC, trust, or technical customer-facing role, with direct ownership of security questionnaires, customer inquiries, and security reporting. Questionnaire Expertise: Hands-on experience responding ...

Technology Controls Office (TCO) Specialist

Location
Belfast City District, Northern Ireland, United Kingdom
and ask compensation related questions, including pay details for this role.Job Description:The Technology Solutions Technology Control Office (\"TCO Europe\") is responsible for providing governance, oversight, and challenge to ensure that technology services operate within TD's risk appetite and comply with applicable enterprise standards, regulatory and audit obligations, and … internal control requirements.. The TCO Europe Specialist is required to work closely with both the local and international technology, business and governance teams to strengthen the control environment, manage technology risk and resilience, support regulatory compliance initiatives, and drive the remediation of identified control gaps, audit findings, and regulatory actions.The ...

ServiceNow Solution Architect (GRC, IRM, Risk)

Location
United Kingdom
ServiceNow Solution Architect (GRC, IRM, Risk) Architect governance platforms that stand up to scrutiny The Solution Architect – GRC/Risk is responsible for leading the architecture, design, and implementation of ServiceNow Governance, Risk, and Compliance (GRC) and Integrated Risk Management (IRM) solutions for Pulsar’s clients.This role combines deep technical … continued growth of Pulsar’s Risk and Resilience practice. What you'll do Lead the end-to-end design and architecture of ServiceNow GRC and Risk solutions, including modules such as Policy and Compliance, Risk Management, Audit Management, and Vendor Risk. Develop comprehensive solution blueprints, architecture documentation, and integration designs ...

Information and Technology Governance & Risk Lead

Location
Greater London, England, United Kingdom
Governance and Risk Lead****About the role**Reporting to Head of I&T GRC, Governance and Risk Lead will be responsible for driving information and cyber security awareness, delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and manufacturing site teams. You will review … and review. You will take responsibility for managing a subset of aspects of ISO 27001 related documentation and control activities. As the I&T Governance and Risk Lead you will have the responsibility of aspects of the I&T GRC scope, delegated and assigned by the Head ...

Information and Technology Governance & Risk Lead

Location
City of Westminster, England, United Kingdom
Governance and Risk Lead About the role Reporting to Head of I&T GRC, Governance and Risk Lead will be responsible for driving information and cyber security awareness, delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and manufacturing site teams. You will review … and review. You will take responsibility for managing a subset of aspects of ISO 27001 related documentation and control activities. As the I&T Governance and Risk Lead you will have the responsibility of aspects of the I&T GRC scope, delegated and assigned by the Head ...

Security Architect

Location
Greater London, England, United Kingdom
matters relating to cyber security, information assurance, cyber risk, data privacy including regulatory and compliance considerations Contribute to the development and enhancement of governance, risk and compliance aligned to policy, standards an industry good practice Ensure that continuous assessment, identification, analysis and reporting of useful metrics to enable informed risk ...

Security Architect

Hiring Organisation
The Nippon Telegraph And Telephone Corporation (NTT)
Location
London, UK
Employment Type
Full-time
matters relating to cyber security, information assurance, cyber risk, data privacy including regulatory and compliance considerations Contribute to the development and enhancement of governance, risk and compliance aligned to policy, standards an industry good practice Ensure that continuous assessment, identification, analysis and reporting of useful metrics to enable informed risk ...

Security Architect

Location
Greater London, England, United Kingdom
matters relating to cyber security, information assurance, cyber risk, data privacy including regulatory and compliance considerations Contribute to the development and enhancement of governance, risk and compliance aligned to policy, standards an industry good practice Ensure that continuous assessment, identification, analysis and reporting of useful metrics to enable informed risk ...

Technology Controls Office (TCO) Specialist

Location
Belfast City, Northern Ireland, United Kingdom
compensation related questions, including pay details for this role. Job Description: The Technology Solutions Technology Control Office ("TCO Europe") is responsible for providing governance, oversight, and challenge to ensure that technology services operate within TD's risk appetite and comply with applicable enterprise standards, regulatory and audit obligations, and internal … control requirements. The TCO Europe Specialist is required to work closely with both the local and international technology, business and governance teams to strengthen the control environment, manage technology risk and resilience, support regulatory compliance initiatives, and drive the remediation of identified control gaps, audit findings, and regulatory actions. ...

Governance, Risk & Compliance (GRC) Infosec Manager (PCI)

Location
Northampton, England, United Kingdom
Travis Perkins plc is now hiring for a proactive and detail-oriented Governance, Risk, and Compliance (GRC) Infosec Manager (PCI) to join our central Information Security team. This is a high-visibility, specialised role focused on leading our Group-wide Payment Card Industry (PCI) compliance ecosystem. Reporting directly … Senior GRC Infosec Manager, you will serve as the primary subject matter expert and point of contact for external Qualified Security Assessors (QSAs), while also contributing across wider cyber risk, third-party assurance, and data privacy governance. If you are a driven GRC professional with a strong grounding ...

AI Governance Director, Data Science

Hiring Organisation
Elsevier
Location
London, UK
Employment Type
Full-time
passionate about building and owning practical, scalable AI governance frameworks that enable innovation while managing risk? About the RoleAs AI Governance Director, you will own and evolve the end-to-end AI and model governance framework on behalf of the Data Science function. You will provide strategic leadership, helping … responsibly while balancing regulatory compliance, risk management, innovation, and business outcomes. This role partners closely with technical, legal and product stakeholders to embed effective governance into how we use AI.ResponsibilitiesOwn the end-to-end AI and model governance framework on behalf of the Data Science function, including policy implementation and ...

AI Governance Director, Data Science

Location
Greater London, England, United Kingdom
passionate about building and owning practical, scalable AI governance frameworks that enable innovation while managing risk? About the Role As AI Governance Director, you will own and evolve the end-to-end AI and model governance framework on behalf of the Data Science function. You will provide strategic leadership, helping … responsibly while balancing regulatory compliance, risk management, innovation, and business outcomes. This role partners closely with technical, legal and product stakeholders to embed effective governance into how we use AI. Responsibilities Own the end-to-end AI and model governance framework on behalf of the Data Science function, including policy ...