and communication activities • Working closely with Technology project teams to realise the end to end delivery of technology changes that are required to realise the business goal • Ensuring all governance, riskmanagement, controls andcompliance requirements are considered, planned for an adhered to safeguard the customer experience • Driving the delivery of pragmatic business and operational design solutions which maximise benefits More ❯
and communication activities • Working closely with Technology project teams to realise the end to end delivery of technology changes that are required to realise the business goal • Ensuring all governance, riskmanagement, controls andcompliance requirements are considered, planned for an adhered to safeguard the customer experience • Driving the delivery of pragmatic business and operational design solutions which maximise benefits More ❯
Success or similar roles within enterprise software, preferably in security or systems integration. Proven experience managing strategic and enterprise-level customers with measurable success. Strong understanding of network security, governance, audit, risk, andcompliance practices. Customer-first mindset, highly proactive, and comfortable with client-facing engagements (calls/visits). Excellent consulting, project management, and data-driven decision-making skills. More ❯
the business. You will also act as a key partner to the CEO and Board, contributing to strategic planning, value creation, and investor engagement. The role includes oversight of governance, risk, compliance, and support for future fundraising or M&A activity. The Ideal Candidate: Qualified Accountant (ACA/ACCA/ACMA). Experienced CFO or Finance Director in a PE More ❯
the market, and how to respond. At the same time, regulations are tightening. From data protection requirements to the Online Safety Act, organisations face growing pressure to demonstrate strong governanceand accountability. For sectors like finance, healthcare, energy and the public sector, this is especially urgent. Digital transformation is also playing a role. As cloud adoption accelerates and hybrid working … teams and forensic analysts. Supply chain risk is under the spotlight Breaches linked to third-party providers have exposed vulnerabilities beyond company walls. In response, organisations are investing in governance, riskandcompliance roles to help manage vendor relationships and strengthen oversight. AI is creating both opportunities and risks Artificial intelligence is helping defenders automate responses and improve detection. But … Typical salary: £40,000 to £60,000 Cloud Security Engineer - Experts in building and securing infrastructure in AWS, Azure or Google Cloud. Typical salary: £70,000 to £100,000 GRC Specialist - Professionals who align security with risk, complianceandgovernance frameworks. Typical salary: £60,000 to £90,000 IAM Lead - Focused on identity and access management, a vital area as More ❯
of our Insurance clients on a 12-month contract. Inside IR35 Hybrid Responsibilities: Analyze large datasets to identify trends, anomalies, and emerging risks across technology and cyber domains. Support governanceandrisk forums with timely and accurate reporting on key risk indicators (KRIs), control effectiveness, and remediation progress. Develop and maintain dashboards and reports to visualize technology and cyber risk … general controls, cyber security principles, and technology risk domains. Proven experience in risk analytics, data visualization, and reporting (e.g., using Power BI, Tableau, or similar tools). Familiarity with GRC platforms andrisk data management practices. Experience in a riskmanagement, IT audit, or cyber security role within a financial services or regulated environment. Qualifications: Educated to degree level or More ❯
This includes ensuring necessary evidence is available and that audit findings or improvement areas are integrated into business-as-usual processes to mitigate associated risks. Acting as secretariat for Governance Committees, compiling relevant information and metrics, and contributing to the preparation of governance reports and documentation. Promoting a strong security culture by delivering ongoing training and awareness programs focused on … current and emerging threats. Core Experience, Qualifications, and Skills This role is ideal for an individual with a strong background particularly experienced in leading all facets of Governance, Risk, andCompliance (GRC). The ideal candidate will have: A solid understanding of Information Security principles, including relevant concepts, standards, frameworks, and technologies Good knowledge of UK Data Protection legislation and … its underlying principles Experience in managing security governanceandcompliance obligations (e.g., DPA, PCI-DSS, ISO 27001) The ability to work independently with minimal supervision, as well as effectively contribute to larger, more complex project teams Strong communication skills, with the ability to explain technical, complex, or sensitive issues and risks to a diverse audience and align them with broader More ❯
about CyberArk , visit our CyberArk blogs or follow us on X , LinkedIn or Facebook . Job Description About the Role: We are seeking a highly motivated and detail-oriented GRCCompliance Expert to join our Governance, Risk, andCompliance team. This role is pivotal in supporting customer security assessments during RFx processes, driving compliance initiatives including DORA , NIS2 , and other … regulatory frameworks, and assisting with broader GRC activities across the organization. The ideal candidate is a self-starter with strong communication skills, who thrives in a fast-paced environment and is passionate about cybersecurity, regulatory compliance, andrisk management. Please note that this is a hybrid role located in our office in London. We ask to come to the office … to compliance initiatives such as DORA , NIS2 , and other applicable standards and frameworks (e.g., ISO 27001, SOC 2, GDPR). Assist in the development, maintenance, and improvement of internal GRC processes, policies, and documentation. Collaborate with cross-functional teams (Security, Legal, IT, Product, etc.) to gather information and ensure compliance obligations are met. Participate in risk assessments, control testing, andMore ❯
critical infrastructure . Strong understanding of cyber-physical systems , OT environments , and connected infrastructure . Experience applying assurance frameworks and technical standards (e.g. NIST, ISO27001, CAF). Background in governance, risk, andcompliance (GRC) functions. Excellent communication and stakeholder engagement skills. Agile, analytical, and solutions-focused mindset. Experience in sectors such as energy, water, transport, or smart cities is highly More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
Reed Technology
critical infrastructure . Strong understanding of cyber-physical systems , OT environments , and connected infrastructure . Experience applying assurance frameworks and technical standards (e.g. NIST, ISO27001, CAF). Background in governance, risk, andcompliance (GRC) functions. Excellent communication and stakeholder engagement skills. Agile, analytical, and solutions-focused mindset. Experience in sectors such as energy, water, transport, or smart cities is highly More ❯
Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Reed Technology
critical infrastructure . Strong understanding of cyber-physical systems , OT environments , and connected infrastructure . Experience applying assurance frameworks and technical standards (e.g. NIST, ISO27001, CAF). Background in governance, risk, andcompliance (GRC) functions. Excellent communication and stakeholder engagement skills. Agile, analytical, and solutions-focused mindset. Experience in sectors such as energy, water, transport, or smart cities is highly More ❯
Senior Analyst, Technology and Cyber Security GRC LSEG City Of London, England, United Kingdom Support the first line Technology & Cyber Issue, Audit and Regulatory compliance function and ensure all compliance matters are quality driven and centrally supported with standard methodology. Support the governance of technology & cyber related Self-Identified Issues as well as Internal Audit and External audit actions undertaken … regulatory evidence and responses for re-use and with reporting. Maintain a centralised repository of Customer RFI responses for re-use and with reporting. Support the work of wider GRC teams where required and in areas of interest and expertise. Work with partners to ensure conformance with Regulatory, Company and Industry standards. Supporting the production of required Metrics at committees … Responsibilities Support the first line Technology & Cyber Issue, Audit and Regulatory compliance function and ensure all compliance matters are quality driven and centrally supported with standard methodology. Support the governance of technology & cyber related Self-Identified Issues as well as Internal Audit and External audit actions undertaken Perform quality reviews of all Technology and Cyber Security related Audit Observations andMore ❯
East London, London, United Kingdom Hybrid / WFH Options
A&O Shearman
data stored on the firms AI products. Manage the data encryption and access control mechanisms implemented on the firms AI products to ensure they are fit for purpose. Compliance & Governance Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC 2) and any emerging AI regulations (e.g., ISO 42001, EU AI Act, UK AI Code of Conduct, GDPR … and ethical guidelines. Standardise a control framework for any AI products produced by the firm, ensuring consistent security practices across all environments. Oversee the undertaking of any Governance, Risk, andCompliance (GRC) tasks or activities related to AI products, such as responding to queries or requests from external parties or auditors pertaining to AI products. Collaborate with legal teams to … legal sector organisations. Certifications in AI ethics, data privacy (e.g., CIPP/E, CIPM), or riskmanagement (e.g., CRISC). Experience with AI auditing, algorithmic impact assessments, or model governance platforms. Knowledge of legal technology tools and platforms (e.g., legal research AI, contract analytics, generative AI). Ability to lead cross-functional initiatives in a complex, multinational environment. What we More ❯
on the firm's AI products. Manage the data encryption and access control mechanisms implemented on the firm's AI products to ensure they are fit for purpose. Compliance & Governance Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC 2) and any emerging AI regulations (e.g., ISO 42001, EU AI Act, UK AI Code of Conduct, GDPR … and ethical guidelines. Standardise a control framework for any AI products produced by the firm, ensuring consistent security practices across all environments. Oversee the undertaking of any Governance, Risk, andCompliance (GRC) tasks or activities related to AI products, such as responding to queries or requests from external parties or auditors pertaining to AI products. Collaborate with legal teams to … legal sector organisations. Certifications in AI ethics, data privacy (e.g., CIPP/E, CIPM), or riskmanagement (e.g., CRISC). Experience with AI auditing, algorithmic impact assessments, or model governance platforms. Knowledge of legal technology tools and platforms (e.g., legal research AI, contract analytics, generative AI). Ability to lead cross-functional initiatives in a complex, multinational environment. What we More ❯
various tools and activities. Manage and improve Three's Security Exception process. Work effectively with Enterprise riskandcompliance functions to escalate enterprise-level Technology and Security risks. Operate GRC tools for RiskManagement to record, track, and monitor risks and controls. Support ongoing education and awareness activities related to Security policies, Riskmanagement frameworks, andgovernance across the company. More ❯
Please Note: The deadline for applying is 23.59 the day before the job posting end date. Job Title: Cyber Resilience & Metrics Manager Location: Kingston/Port Sunlight Office Work-Level: 2B Hiring Manager: Chandan Phutane Unilever is one of the More ❯
Birmingham, West Midlands, England, United Kingdom
Robert Walters
IT Compliance Analyst Salary : £30,000 to £35,000 Location : Birmingham Keywords : Governance, RiskandCompliance, ISO 27001, Cyber Essentials Plus, Security Questionnaires, Audit Support, Data Protection, Security Governance, Team Collaboration, Process Improvement An exciting opportunity has arisen for an IT Compliance Analyst to join a globally recognised business in Birmingham. You will play a pivotal role in ensuring the … organisation's compliance with key security frameworks, supporting both internal and external audits, and collaborating closely with stakeholders across the business. If you are passionate about governance, risk, andcompliance this role provides the perfect platform for your career progression. Benefit from ongoing training opportunities and exposure to industry-leading frameworks such as ISO 27001 and Cyber Essentials Plus, supporting … long-term career growth. What you'll do: As an IT Compliance Analyst, you will be at the heart of the organisation's efforts to maintain robust governance, riskmanagement, andcompliance standards. Your day-to-day activities will involve managing client audit inboxes, responding promptly to information requests, completing detailed questionnaires, and ensuring all documentation is up-to-date. More ❯
and evidential property systems Strategic Intelligence: Reporting, KPIs, and performance analytics to inform operational and executive decision-making System Optimisation: Centralising business systems and data workflows to improve efficiencies Governance & Engagement: Representing the force at local, regional, and national boards including Police Committee and IT Subcommittee Budget Oversight: Managing a significant operational budget and team across multiple functions What Youll … Bring A proven record of strategic leadership in complex public sector environments (e.g., police, NHS, local authority) Strong operational experience managing data privacy, FOI, information governance, andcompliance Expertise in performance management, analytics, and delivering service improvement through data Ability to influence, challenge, and collaborate at senior leadership level Excellent programme/project management capabilities, including risk, change, and people … UNIVERSITY LONDON London, England, United Kingdom 6 days ago Team Leader, Error Corrections SS&C Financial Services International - PA25SJPRQ3004 Basildon, England, United Kingdom 2 weeks ago Information Security Manager: Governance, RiskandCompliance (GRC) Information Security Manager: Security Operations London, England, United Kingdom 1 day ago Finance Crime ComplianceRisk Assessment Lead City Of London, England, United Kingdom 65,000.00 More ❯
Fridays, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being. Why join our team? We are the leading governance, risk, andcompliance (GRC) advisor in financial services. When you join ACA, you'll become part of a team whose unique combination of talent includes the industry's largest team … saw a need for investment advisers to receive expert guidance on existing and new regulations. Over the years, ACA has grown both organically and by acquisition to expand our GRC business and technology solutions. Our services now include GIPS standards verification, cybersecurity and technology risk, regulatory technology, ESG advisory, AML and financial crimes, financial and regulatory reporting, and Mirabella for More ❯
responsibilities Support the first line Technology & Cyber Issue, Audit and Regulatory compliance function and ensure all compliance matters are quality driven and centrally supported with standard methodology. Support the governance of technology & cyber related Self-Identified Issues as well as Internal Audit and External audit actions undertaken Perform quality reviews of all Technology and Cyber Security related Audit Observations and … regulatory evidence and responses for re-use and with reporting. Maintain a centralised repository of Customer RFI responses for re-use and with reporting. Support the work of wider GRC teams where required and in areas of interest and expertise. Work with partners to ensure conformance with Regulatory, Company and Industry standards. Supporting the production of required Metrics at committees … validation Responding to customer RFIs using standardised formats and frameworks Quality assurance on library of responses required for customer RFIs etc. Impact The development of the Audit and Regulatory Governance within Technology and Cyber Security divisions will have a significant impact on the resources of other teams in cyber. The GRC team especially need to assure the remediation activity conducted More ❯
up to 15% bonus + 10% pension + guaranteed annual salary increases Are you passionate about Cyber Security Riskand ready to play a key role in shaping a GRC function from the ground up? If so, this is a brilliant opportunity to join a business that’s right at the beginning of its cyber journey. With offices in both … auditing role. It’s hands-on, it’s strategic, and it’s a chance to truly influence how cyber risk is approached across the business. Working closely with the GRC Manager, you’ll be instrumental in embedding risk awareness into the business and ensuring technology and threat considerations are front and centre. The best part? This role has space to … and KRI metrics across IS teams, prepare regulatory submissions, and track compliance. ISMS Support: Maintain the Information Security Management System (ISMS) in line with ISO 27001/27002. Manage governance forums, minutes, and documentation. Policies & Standards: Develop GRC policies, standards, and procedures. Track exceptions, monitor risk, and report on performance and compliance. Controls Framework: Strengthen the IT controls environment. Understand More ❯
As a Senior Principal - GRC in the Technology & Telecoms sector, you will lead governance, risk, andcompliance initiatives while ensuring alignment with accounting and finance objectives. This role is ideal for a detail-oriented professional passionate about fostering robust compliance frameworks and driving organisational success. Client Details The employer is a medium-sized organisation within the Technology & Telecoms industry, specialising … in innovative solutions and services. They are recognised for their focus on ensuring operational excellence and delivering high-quality results to their stakeholders. Description Develop and implement governance, risk, andcompliance strategies in line with organisational goals. Collaborate with accounting and finance teams to ensure regulatory compliance across all operations. Monitor and assess existing GRC processes, identifying areas for improvement. … andrisk assessments. Stay up-to-date with evolving regulations within the Technology & Telecoms sector. Support training initiatives to enhance compliance awareness across departments. Profile A successful Senior Principal - GRC should have: Strong knowledge of governance, risk, andcompliance frameworks. A background in accounting or finance with relevant professional qualifications. Proven experience in the Technology & Telecoms industry or a related More ❯
Job Title: Security Governance Lead – NIST & Archer Expertise Location: London About the Role: Albany Beck is seeking a highly skilled Security Governance Lead to support a key financial services client in advancing its information security governance capabilities. This role requires deep expertise in NIST frameworks and Archer GRC, as well as strong leadership in centralising security policy management, controls, and … compliance operations. Key Responsibilities: Collaborate with the Executive Director of Security Governance to maintain and evolve the client’s information security policies, standards, and procedures in alignment with the organization’s master policy. Lead the centralisation, documentation, and continuous improvement of a unified controls inventory, including clear assignment of control ownership and alignment of roles and responsibilities. Maintain the service … on agreed security metrics, such as training completion rates and awareness initiatives. Coordinate the collection of evidence to support internal and external regulatory attestations andcompliance reviews. Drive continuous governance improvements through structured policy lifecycle managementand stakeholder engagement. Required Experience and Skills: Proven experience in a security governance or riskmanagement leadership role within the financial services or consulting More ❯
Job Title: Security Governance Lead – NIST & Archer Expertise Location: London About the Role: Albany Beck is seeking a highly skilled Security Governance Lead to support a key financial services client in advancing its information security governance capabilities. This role requires deep expertise in NIST frameworks and Archer GRC, as well as strong leadership in centralising security policy management, controls, and … compliance operations. Key Responsibilities: Collaborate with the Executive Director of Security Governance to maintain and evolve the client’s information security policies, standards, and procedures in alignment with the organization’s master policy. Lead the centralisation, documentation, and continuous improvement of a unified controls inventory, including clear assignment of control ownership and alignment of roles and responsibilities. Maintain the service … on agreed security metrics, such as training completion rates and awareness initiatives. Coordinate the collection of evidence to support internal and external regulatory attestations andcompliance reviews. Drive continuous governance improvements through structured policy lifecycle managementand stakeholder engagement. Required Experience and Skills: Proven experience in a security governance or riskmanagement leadership role within the financial services or consulting More ❯
Merseyside, England, United Kingdom Hybrid / WFH Options
Maxwell Bond
team. This opportunity offers a hybrid working model and the chance to join a forward-thinking business during a period of transformation. The role blends technical security experience with GRC responsibilities and provides visibility across key areas of the business. 🔐 Key Responsibilities Lead security risk assessments and ensure mitigations are tracked and completed. Develop, review, and maintain information security policies … awareness campaigns and contribute to a culture of security. Support internal and external audits, representing the security function as needed. Stand in for the Head of Information Security in governanceand strategy discussions. ✅ What We’re Looking For 3+ years in Information Security roles, with GRCand technical exposure. Experience working with ISO 27001, NIST, or equivalent frameworks. Understanding of More ❯