401 to 425 of 503 GRC Jobs in England

and hands-on technical support. You’ll work closely with internal teams and customers, helping to resolve technical issues while ensuring that security, confidentiality and compliance remain at the heart of every interaction. The role You will be responsible for: Troubleshooting hardware, software and network-related issues Identifying, triaging and … enjoys being technically hands-on but also wants exposure to cyber security, ISO 27001, compliance and incident management, rather than working in a purely GRC-focused position ...

will engage architects, AI/ML leads, and C-level executives to define Workiva’s role in their AI infrastructure, focusing on data governance, integration, and model orchestration. By positioning Workiva as the system of trust for machine-generated financial, sustainability, and risk data, you will ensure outputs are controlled … fellow Solution Consultants to elevate AI fluency across the organization. Cross-Functional Discovery & Engagement: Lead technical discovery and alignment across both business functions (Finance, GRC, Sustainability) and IT/Security teams to map customer AI programs, identify where the governed core fits, and ensure safe, compliant integration. Deliver Tailored Demonstrations ...

from the Fortune 500 to fast-growing startups, use our no-code platform to onboard, assess, and monitor their vendors, suppliers, and partners across risk, compliance, and ESG. We have processed over 10 million entities for 100,000+ users across 120+ countries, and are backed by Fin Capital, Vertex Ventures … platform solutions, own the solution design from discovery through go-live, and serve as a trusted advisor to stakeholders ranging from procurement leads and risk officers to CIOs and CPOs. It's a high-impact, client-facing role for an experienced consultant who combines deep domain expertise in TPRM, vendor ...

Maxwell Bond is partnering with a technology distribution business to recruit an Information Security Officer for GRC and compliance. The role focuses on hands-on implementation of ISMS and security controls, working with auditors, suppliers and customers to demonstrate risk managed and controls operating effectively. The role requires building security … assurance across ISO 27001, PCI-DSS, NIST/CIS, with vendor risk management and cloud security in Microsoft 365, Azure, AWS or Google Cloud. #J-18808-Ljbffr ...

building agent-native risk infrastructure: risk management and trust building, delivered by AI agents, for a world increasingly run by them. As more decisions and transactions run through agents, the volume of risk to manage and trust to establish is growing very fast. Today both functions are fragmented, split across … spend their time deciding and acting on what matters, not assembling the evidence to get there. Hundreds of billions of dollars are spent across risk management and trust building annually. These funds are going to be reallocated to agent-native solutions in the next five years, and we will capture ...

path the default path. The thread running through everything here is influence. You will spend as much time with engineers, product managers, designers, operations, and compliance colleagues as you do with code and tooling. The person who succeeds in this role is the person who can walk into any team … explain the risk in language that team actually uses, and leave them better equipped than when they arrived. What you'll work on First 90 days Understand how we actually build. Map our real delivery paths, from idea to production, across the teams that matter most. Find where security currently ...

their development. Candidates carrying a number of the below skills would be particularly relevant:- Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0 … CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

open doors, win customers and close deals. What You'll Be Selling A combination of cybersecurity software and specialist services, including: Cybersecurity assessments, risk evaluations and penetration testing. Security consultancy, compliance assessments and improvement planning. Recurring software subscriptions and assurance services. You'll help customers understand their security risks and … from initial contact and discovery through to proposals, negotiations and signed contracts. Build relationships: Engage with senior business leaders, IT directors and cybersecurity, risk and compliance professionals. Develop revenue: Win new customers, secure recurring business and identify opportunities to grow existing accounts. Deliver results: Maintain accurate CRM records, forecast effectively ...

seed-stage company is building agent-native risk infrastructure: risk management and trust building, delivered by AI agents, for a world increasingly run by them. Their agents sit on top of proprietary data and reassess continuously rather than at fixed checkpoints - so customers spend their time deciding and acting … dirty with related development. You're the first person customers call and their trusted counterpart. You sit across the table from CSOs, VPs of Risk, and heads of compliance, and you turn their messiest workflows into something that runs on the platform. Expect roughly one to two customer meetings ...

Skills: Technology Controls, GRC, Security, NIST/ISO, SC Clearance We are looking for Technology Control Frameworks Lead at Wokingham, UK - 2-3 days per week Onsite Security Clearance: Active SC Clearance is must have Technology Control Framework - Project, Resource Responsibilities: Design and develop the Technology Control Framework: Create … regulatory requirements, maintaining traceability to demonstrate coverage and identify gaps, while defining applicability across relevant technologies, services, processes and information asset types. Define control governance and assessment: Establish control ownership and accountability with Technology, Security, Risk and First Line stakeholders, alongside maturity and assessment criteria that enable consistent measurement ...

border team of security practitioners and is the operational backbone of the security function as the broader organization builds out, including future Director and GRC leadership roles. On a typical day, you'll be responsible for: Own day-to-day security tooling and operations: EDR/XDR, SIEM, data-loss … active incidents Support the annual SOC 2 Type II audit cycle – evidence collection, control walkthroughs, and auditor liaison – in partnership with the compliance/GRC function Maintain NIST CSF control documentation and contribute to ongoing risk-remediation (POA&M) efforts Support HIPAA/PHI security controls and periodic risk assessments ...

Select how often (in days) to receive an alert: Analyst, Information Security GRC Requisition ID: 50617 Business Unit: Fitch Group Category: Information Technology Location: Manchester, GB Date Posted: Sep 8, 2026 Location: Manchester, UK | Work Arrangement: Hybrid | Department: Information Security About the Role Fitch is seeking an Information Security GRC … phishing simulation activities, campaigns, reporting, and program administration. This is an excellent opportunity for someone early in their cyber security, communications, learning and development, risk management, or employee engagement career who is interested in the human side of cyber security. The successful candidate will work closely with Information Security, Employee ...

internal standards), identifying gaps and supporting Lead-driven control strategy decisions Develop regulator-ready and high-quality artifacts, including evidence mappings, control narratives, risk statements, and audit support documentation Identify, analyze, and elevate regulatory risks and audit obligations, supporting proactive planning and risk visibility at the program level Partner cross … functionally with Legal, Public Policy, R&D, Security, Product, Sales, and Risk teams, supporting the Lead in aligning regulatory interpretation with technical and business implementation Drive execution of process improvements, tooling enhancements, and automation initiatives defined by the SCRA program Operate with high ownership and accountability, executing work independently while ...

Frasers Group is seeking a Technology GRC Analyst to advance its technology risk and assurance program. You will assess cyber risks, test ITGCs, and ensure controls operate effectively across enterprise systems and retail platforms. Collaborating with Technology, Internal Audit,Cyber Security and Supply Chain teams, you will maintain risk registers … manage evidence for audits, and drive continuous GRC improvements across a global retail ecosystem. #J-18808-Ljbffr ...

owns that program, its scope, and its direction. You are the engineer who makes it work in practice: implementing and evidencing controls, keeping the GRC platform accurate, preparing what auditors and customers ask for, and chasing the details that decide whether an audit goes well. This is a compliance role … control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline. Operate our GRC platform (Vanta) day to day: configure and maintain integrations, monitor automated control checks, and resolve drift and failing controls. Collect, organize, and quality-check evidence ...

What We Need Corpay is currently looking to hire an IT Compliance Analyst on a permanent basis within our IVP line of business, within GRC and Info Sec division. This position is located in our Swindon office. The IT Compliance Analyst is responsible for supporting internal and external audits, being … track of escalations and/or risks related to IT Compliance. Thoroughly document compliance events and audit shortcomings. Supporting the IT Compliance Manager and GRC Managers on monitoring and reporting current state and trends of IT compliance, especially on PCI and SOX related engagements. Liaising with the Information Security staff ...

Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius isseekingaIT Risk & Controls Manager to act as an embedded risk partnertoour engineering and technology organizations. You will help scale and strengthen a modern IT SOX andcontrolsframework acrossNebius … auditors toidentifyrisk, design scalable controls, improve evidence quality, driveremediationand embed compliance into the way our technology organizationsoperate. The successful candidate will combine deep IT risk andcontrolsexpertisewith meaningful in-house technology experience. You must be equally comfortable discussing technical control design with engineers, explaining risk implications to businessleadersand aligning audit expectations ...

processes, including alert triage, incident response and vulnerability escalation. You’ll manage and challenge our SOC/MSSP provider, working closely with Technology, Engineering, GRC, Threat and Vulnerability colleagues to improve how we detect threats, respond to incidents and reduce risk. A key part of the role is improving … playbooks. Use methods such as MITRE ATT&CK and NIST to improve detection and incident readiness. Ensure vulnerabilities and exposures are prioritised, assigned clear risk owners and tracked through treatment and closure.Lead and develop the analysts, report clearly to the CISO and senior stakeholders, and work with Engineering, Technology, GRC ...

processes, including alert triage, incident response and vulnerability escalation. You’ll manage and challenge our SOC/MSSP provider, working closely with Technology, Engineering, GRC, Threat and Vulnerability colleagues to improve how we detect threats, respond to incidents and reduce risk. A key part of the role is improving … playbooks. Use methods such as MITRE ATT&CK and NIST to improve detection and incident readiness. Ensure vulnerabilities and exposures are prioritised, assigned clear risk owners and tracked through treatment and closure. Lead and develop the analysts, report clearly to the CISO and senior stakeholders, and work with Engineering, Technology ...

appropriate resilience is designed into their products and services. Provide subject matter expertise on continuity and resilience considerations for supplier onboarding processes, ensuring appropriate risk management throughout the supply chain. Work with product owners and critical process owners to quantify, document, and report on resilience metrics. Design scenarios and … function by identifying and implementing changes to enhance DR service quality, cost efficiency, and effectiveness. Communicate regularly with stakeholders, including system owners, Head of GRC, and senior management, providing updates on DR performance and other relevant information. Key Skills, Experience and Qualifications: Essential Requirements Experience in Business Continuity and Operational ...

Patching, Asset Management, Certificates, WebApps.* Experienced building & operating AM/VM/PC/PM programs, workflows, key metrics, best practices* Experienced in Cyber-Risk frameworks, Prioritization/Remediation + Scanning/Reporting strategies.* Breadth and depth of knowledge on the cybersecurity general threat landscape and attack techniques* Familiarity and … Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud (certified solutions architect level) #LI-REMOTE ...

design, build and operationalise the ISMS in line with ISO/IEC 27001:2022. Responsibilities include conducting enterprise-wide gap assessments, defining scope and governance, developing risk registers and SoA, and delivering a budgeted implementation roadmap with cross-functional collaboration across Technology, Security, Legal, HR and Procurement. #J-18808-Ljbffr ...

with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation. We pride ourselves on combining technical expertise with a practical, hands‐on approach, helping our clients strengthen resilience, meet … regulatory requirements, and stay ahead in an increasingly digital and risk‐driven landscape. Technical and Domain Experience Conduct cybersecurity maturity and risk assessment and for clients. Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments. Advise clients on cybersecurity strategy, metrics and reporting ...

looking for a Customer Trust Specialist to join our London office and help run the customer-facing side of our trust program. Where our GRC team keeps the compliance engine running behind the scenes, you'll be one of the people customers actually interact with, turning our security, privacy, and … governance posture into accurate answers that earn trust. You'll handle security questionnaires end to end, help operate our trust automation platform, and support customer conversations across EMEA and beyond. This is a great fit for someone with solid security-review experience who wants to grow their scope ...

Category: GRC & Compliance## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leave\"...matching, paid time off, and parental leave. Learn more about our benefit...\"Company-wide policy ·* Retirement match\"...gacy Reimbursement coverage), 401(k) matching, paid time … will involve performing security assessments and working with teams to support threat modelling on AWS services. Each change to a service represents a new risk, so this role will ensure changes are adequately assessed and any vulnerabilities addressed. If you have worked with security assurance or compliance in the past ...