26 to 50 of 503 GRC Jobs in England

Company RCI FS Ltd UK Job Description The Cyber Governance, Risk & Compliance (GRC) Manager is responsible for establishing, maintaining and continuously improving the organisation's cyber governance, risk management and compliance capabilities. The position acts as a key bridge between business leadership, technology teams, risk functions, internal audit and regulators … compliance with legal, regulatory and contractual requirements. The role also leads the adoption of automation and data-driven security practices to enhance efficiency, reporting and risk management effectiveness. This aligns with security objectives identified within the MFS UK Cyber Strategy. Responsibilities Own and maintain the Cyber Security Governance Framework. Develop ...

take ownership of key governance activities and make a meaningful impact across a large-scale organisation. Reporting directly to the Cyber Governance, Risk & Compliance (GRC) Manager, you'll play a key role in ensuring that information assets are appropriately identified, classified, retained, protected and managed in line with internal policies … reports, management information and recommendations for senior stakeholders. Identify opportunities to improve information management processes, controls and operational efficiency. Support wider Cyber Governance, Risk and Compliance initiatives. Skills and Experience Essential Previous experience in an Information Governance, Information Management, Data Governance or related role. Strong understanding of information classification, retention ...

track remediation actions and support cyber risk management. Produce security policies, standards, assessment reports, compliance evidence and executive reporting. Support audits, control reviews, assurance and compliance assessments. Engage stakeholders, facilitate workshops and gather evidence to support security initiatives. Contribute to supplier assurance and third-party risk management. Improve security governance … public sector, regulated or enterprise environments. Knowledge of GovAssure and public sector security requirements. Familiarity with Microsoft Azure and AWS. Experience with GRC platforms and risk management tools. Understanding of Secure by Design and security architecture principles. Certifications One or more of the following would be advantageous: ISO 27001 Lead ...

facing role, working with risk, compliance and internal control teams to understand their processes, gather requirements and configure solutions that support their governance, risk and compliance objectives. The successful candidate will combine GRC expertise, consulting skills and technology implementation experience to deliver successful customer outcomes. Key Responsibilities Implementation & Consulting Lead … Risk Management Compliance Management Internal Controls and SOX Risk and Control Assessments Controls Testing Issues and Action Management Third-Party Risk Policy Management Regulatory Compliance Risk Reporting and Monitoring Three Lines Model and Integrated Assurance Professional Services Contribution Collaborate with Sales, Pre-Sales, Product Management and Customer Success teams. Support ...

facing role, working with risk, compliance and internal control teams to understand their processes, gather requirements and configure solutions that support their governance, risk and compliance objectives. The successful candidate will combine GRC expertise, consulting skills and technology implementation experience to deliver successful customer outcomes.Key ResponsibilitiesImplementation & ConsultingLead and support TeamMate … with software configuration and technology-enabled solutions.Willingness to travel as required.DesirableProfessional Services or technology consulting experience.Experience implementing enterprise GRC platforms or comparable governance, risk and compliance solutions.Experience within financial services, regulated industries or multinational organisations.Knowledge of recognised risk, control and compliance frameworks.Experience with integrations, reporting, APIs or system configuration.Familiarity with ...

Senior Cyber Security Analyst (Governance, Risk and Compliance) NATS is the UK’s leading air navigation service provider, handling over 2.4 million flights each year. We provide air traffic control services from two control centres and at airports around the UK. We also provide a wide range of commercial products … solutions internationally. Our people are at the heart of our purpose to advance aviation and keep the skies safe. Job Purpose: Our Governance Risk and Compliance Team are looking for a Senior Cyber Security Analyst to play a key role in protecting critical business services through effective cyber risk management. ...

compliance activities while helping shape the organisation's approach to cyber security and AI governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third … party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. ...

Internal Controls and Cyber Security teams to coordinate audits, evidence gathering and remediation activities. Produce meaningful risk dashboards, management information, Key Risk Indicators (KRIs) and governance reporting for senior leadership and risk forums. Collaborate with Technology, Retail Operations, Finance, Procurement, Legal and Supply Chain teams to embed effective risk management … recommend practical improvements. Excellent communication and stakeholder management skills, with the ability to engage technical and non-technical audiences. Experience working with Governance, Risk & Compliance (GRC) platforms such as OneTurst Passionate about strengthening governance, improving controls and enabling secure business growth across a complex global retail organisation. Professional certifications such ...

and legislation relevant to client company information security and assurance. Act as the client company point of contact for information security governance, risk, assurance and compliance matters. Support client company governance forums by providing clear reporting, insight and challenge on key information security risks, audit outcomes, control maturity and remediation … Support the development, review and alignment of client company information security policies, standards, procedures and guidance. Maintain a proportionate client company information security risk and compliance approach, including information security risk assessments, treatment plans, escalation, tracking and a rolling compliance schedule. Review, challenge and track client company control actions, vulnerabilities ...

team You’ll join the Security & IT team, led by the Director of Information Security and IT Operations, which owns information security, IT operations and GRC across Risk Ledger in the UK and US. Risk Ledger helps security and risk teams manage third-party and supply chain risk … Essentials Plus and have achieved SOC 2 Type 1. The team works closely with Engineering, Product, Sales, Customer Success, People and Finance, making security and compliance something that helps the business win and keep customers rather than slowing it down. This role As GRC Lead you'll own Risk Ledger ...

looking for a talented Information Security Manager to join our growing function. In this role, you'll take ownership of key governance, risk and compliance activities, drive security projects across our global business, and work closely with technology and business teams to strengthen our security posture while enabling innovation and … bring: Proven experience in Information Security, Cyber Security, Security Risk Management, or a similar security‐focused role. Strong knowledge of Governance, Risk & Compliance (GRC) frameworks and practices. Hands‐on experience of Third‐Party Risk Management (TPRM). Experience managing and responding to security incidents. Solid technical security understanding across infrastructure ...

looking for a talented Information Security Manager to join our growing function. In this role, you'll take ownership of key governance, risk and compliance activities, drive security projects across our global business, and work closely with technology and business teams to strengthen our security posture while enabling innovation and … required.What you'll bring: Proven experience in Information Security, Cyber Security, Security Risk Management, or a similar security-focused role.Strong knowledge of Governance, Risk & Compliance (GRC) frameworks and practices.Hands-on experience of Third-Party Risk Management (TPRM).Experience managing and responding to security incidents.Solid technical security understanding across infrastructure, cloud ...

Senior Cyber GRC Specialist – Technical Controls London/Hybrid Up to £120,000 Are you an experienced Cyber GRC professional with a genuinely strong understanding of cyber engineering and technical security controls? We’re working with a major global investment management organisation looking for a Senior Cyber GRC Specialist. This … following security incidents * Provide credible cybersecurity guidance to stakeholders across the business ABOUT YOU You’ll need: * Strong professional experience across cybersecurity governance, risk and compliance * A solid technical cybersecurity or cyber engineering background * Deep knowledge of cybersecurity principles and recognised frameworks, including NIST and ISO 27001 * Experience within financial ...

Ensure findings, control gaps and regulatory commitments have clear ownership and are delivered to the required standard.* Lead NewDay’s approach to AI security and governance, establishing practical controls that enable safe and responsible adoption.## What we’re looking forYou will be an established security leader who can combine strategic … FinTech.* Experience operating as a senior deputy to a CISO, or in an equivalent enterprise security leadership position.* Experience across security operations, governance, risk and compliance, architecture, engineering, third-party risk, assurance and operational resilience.* Strong practical knowledge of ISO/IEC 27001, PCI DSS, UK GDPR, the Data Protection ...

AVEVA is creating software trusted by over 90% of leading industrial companies. Job Title: IT Risk - Senior Manager. Location: London or Cambridge. Employment Type: Full-time/Hybrid (50% in office). As a software business, technology risk and cyber/security risk directly impact product availability, customer trust, and … regulatory commitments. The IT Risk Senior Manager is accountable for running a consistent, evidence-based technology risk lifecycle IT, ensuring risks are identified, assessed, treated, monitored, and reported in line with risk appetite. The IT Risk Senior Manager will be responsible for the management of all risks across IT. ...

Title - Lead Specialist, Security Engineer - Digital Risk & Governance Description Help Marketing & Communications manage technology, cybersecurity, privacy and digital risk through practical governance that enables responsible innovation. Also known in the market as: Security Engineer; Product Security Engineer; Business Information Security Officer; Technology Risk & Governance Lead. About the Role Pearson … ownership, certifications, reviews, evidence and audit readiness. Advise teams early when evaluating new technology and help them navigate required governance and approvals. Coordinate risk and compliance considerations across the technology lifecycle, from introduction and renewal through ownership change and retirement. Partner with Cybersecurity, Privacy, Legal, OCTO, Procurement, application owners and ...

Security Type: Permanent Location: Remote, UK-based Salary: £50-60K We’re seeking a GRC Analyst to strengthen pour client’s governance, risk and compliance capability. The organisation is committed to maintaining robust security standards and regulatory compliance across its operations. This is a fully remote role offering real … diverse environment. The Role As a Cyber Security GRC Analyst, you will support and enhance the organisation’s security governance framework, risk management processes, and compliance activities. Working closely with IT, security and business stakeholders, you’ll help identify and mitigate risk, maintain compliance with key regulatory requirements (including ...

good. Your impact Artificial Intelligence is transforming how organisations operate, but delivering value from AI requires more than technology alone. It requires the right governance, controls and confidence to ensure AI is deployed responsibly, safely and effectively.As a Consultant within Jacobs' newly established AI Advisory team, you'll help clients … navigate that challenge. You'll support organisations across multiple sectors as they develop the governance, risk management and responsible AI capabilities needed to adopt AI with confidence.This is a unique opportunity to join a growing team at an early stage of its development, helping shape a new capability while working ...

Requisition ID 3563 -Posted 07/16/2026 - Professional Services - Country (1) - City (1) MetricStream is the global market leader for Integrated Governance, Risk, and Compliance (GRC) solutions delivered on an intelligent integrated platform. MetricStream’s purpose-built platform is proven with over a million global users, designed … serve GRC use cases across industries and powered by deep domain expertise, embedded content, rich context, integrated data, and explainable AI. Since 2001, MetricStream has empowered organizations to intuitively harness front-line intelligence that enables all stakeholders to make real-time risk-aware business decisions. Job Description Business Analyst – MetricStream ...

GRC Manager is responsible for the overall execution of Trayport's Information Security Governance, Risk and Compliance programme under the guidance of the Head of Information Security. The role will primarily entail managing policies & standards incl. Training & Awareness deliverables, performing risk assessments, tracking of security risks of the Information Security … Office and organisation as well as maintaining and managing the ISO27001 certification and ensuring there is appropriate governance & reporting on outputs and risk posture to stakeholder groups. Primary Responsibilities Execute the UK and EU GRC Strategy, ensuring compliance with GDPR, UK Data Protection Act 2018, and other regional privacy laws. ...

work every day to make that a reality. Join us and help shape the future of home improvement. This role will lead cyber security governance and reporting, creating a clear and trusted view of security risk, compliance, control effectiveness and strategic performance. You’ll strengthen executive oversight, turn complex information … your base location being either Southampton or Paddington in the UK or Krakow in Poland. What's the job? Define and maintain the Security Governance Framework, with clear decision-making structures and appropriate executive oversight. Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee. ...

work every day to make that a reality. Join us and help shape the future of home improvement. This role will lead cyber security governance and reporting, creating a clear and trusted view of security risk, compliance, control effectiveness and strategic performance. You’ll strengthen executive oversight, turn complex information … your base location being either Southampton or Paddington in the UK or Krakow in Poland. What's the job? Define and maintain the Security Governance Framework, with clear decision-making structures and appropriate executive oversight. Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee. ...

assessments from initial scoping to final risk rating in a timely manner. [ Due Diligence & Questionnaires: Administer, review, and score security questionnaires, vendor self-assessments, and risk artifacts. Evidence & Contract Review: Inspect security documentation (e.g., SOC 2 reports, policies, technical whitepapers) and review security/data protection clauses in third-party … external stakeholders, and support risk treatment or waiver workflows. Required Skills & Qualifications Experience: 2–4+ years of experience in Information Security, GRC (Governance, Risk, and Compliance), or Third-Party Risk Management (TPRM). Framework Knowledge: Solid working knowledge of ISO 27001 (mandatory validation experience) alongside familiarity with frameworks like NIST ...

Information Security Risk and Compliance Analyst LET’S CUT STRAIGHT TO IT At Severn Trent, our people are at the heart of everything we do.We’rein the top 5% of utility companies worldwide for employee engagement, andwe’reequally proud of our strong Glassdoor score — reflecting how much our peopleloveworking here. … business, its people, and customers from these daily threats, and we have an opportunity for you to join us as anInformation Security Risk and Compliance Analyst. Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting on our information security compliance and ...

Travel (Twice a Month) | Up to £75,000 My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team. This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play … NIST CSF and IASME Governance. Conduct internal audits and provide recommendations for improvement. Support clients with information security governance, risk and compliance activities. Manage third-party risk assessments and vendor security reviews. Deliver security awareness training and engage with stakeholders at all levels. Support the sales team with scoping client ...