126 to 150 of 288 GRC Jobs in London

and resilience capabilities. This is a highly visible role where you will work closely with senior stakeholders across technology and business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring … cloud-related risks and controls. We are looking for a confident and influential cyber security professional with a proven track record in governance, risk and compliance, information security auditing and enterprise risk management. You will possess excellent stakeholder management skills, the ability to translate technical issues into business language and ...

and resilience capabilities. This is a highly visible role where you will work closely with senior stakeholders across technology and business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring … cloud-related risks and controls. We are looking for a confident and influential cyber security professional with a proven track record in governance, risk and compliance, information security auditing and enterprise risk management. You will possess excellent stakeholder management skills, the ability to translate technical issues into business language and ...

across key business processes. Audit Program & Governance Reporting & Communication Design and oversee the internal audit plan, ensuring comprehensive coverage of key business processes, systems, and risk areas across infrastructure, operations, product, and corporate functions. Conduct or coordinate internal audits across financial, operational, compliance, and IT domains, documenting findings and recommendations … mitigation strategies, and monitoring. Establish control testing protocols and coordinate periodic control effectiveness assessments. Identify control gaps and recommend improvements to strengthen operational resilience and compliance posture. Support the design of preventive and detective controls for high-risk areas (e.g., access management, financial transactions, data security). Maintain a controls ...

access. Security at Teya is three connected teams: Security Engineering builds and runs technical controls, Security Operations runs monitoring and incident response, and Security GRC owns policy, risk and regulatory alignment. As Security GRC Manager, reporting to the CISO, you will lead a team of three that turns … and EU regulation into clear, engineer-able and increasingly automated ways of working. The function is mid-transformation. Vanta is being rolled out, the risk approach is being redefined, findings are being consolidated and third-party risk is being rebuilt with Procurement. Your job is to finish that shift, make ...

meet UK Government or contractual security obligations.The Continual Service Improvement (CSI) & Service Quality Lead is responsible for driving service excellence through the leadership and governance of continual improvement and quality management across the IT Service Management organisation. The role owns the CSI framework and Quality Management System (QMS), ensuring improvement … processes consistently meet defined quality standards, contractual commitments, security requirements and business objectives. Working closely with Process Owners, Service Delivery Managers, service providers, security and compliance teams, and senior stakeholders, the role drives a data-led approach to service improvement, quality assurance and process maturity.Key ResponsibilitiesDevelop and maintain ...

patterns and infrastructure to accelerate delivery. Your role will influence how agentic AI is adopted and governed across the firm, ensuring alignment with data governance and control standards. Job Responsibilities: Own the product strategy, vision, and multi-year roadmap for agentic AI products, aligning priorities with business objectives and firmwide … Shape the architecture of agents and supporting infrastructure, advocating for reusable components and shared platform capabilities Prioritize investment across the portfolio using business value, risk, technical feasibility, and reuse potential Collaborate with senior business stakeholders to identify and size opportunities for AI-driven efficiency, risk reduction, or revenue growth Define ...

working alongside a talented and supportive team.This is a genuine opportunity to make a borough wide impact, leading the development of a mature security and compliance function while helping to shape the future of information security across the council.About the RoleAs Information Security Compliance Lead, you will be responsible … ISMS) and drive continual improvement.Take ownership of the ISO 27001:2022 compliance journey and maintain certification standards.Develop, implement and maintain security policies, standards, procedures and governance frameworks.Coordinate internal and external audits, ensuring findings are effectively managed and remediated.Work closely with senior leaders and business stakeholders to identify, assess and mitigate ...

Methods is a leading digital transformation consultancy in the UK, focusing on governance, risk and compliance to deliver secure, resilient solutions for public and private sectors. The Principal Cyber Security Risk & Audit Consultant role offers leadership in audits, risk frameworks, and stakeholder engagement across regulated environments, with strong development ...

decisions and implications clearly.Scale the AI product portfolio responsibly: Improve product reuse and interoperability, establish scalable governance processes, and partner with risk, legal, privacy, and compliance teams to support responsible deployment.Demonstrate product impact: Define success metrics, evaluate adoption and performance, and communicate measurable business outcomes and recommendations to senior leadership.What … partner closely with developers to translate product vision into technical solutions, and help resolve delivery challenges. You will also work with risk, legal, privacy, and compliance teams to ensure AI products meet BCG's quality, security, and governance expectations.Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will ...

and implications clearly. Scale the AI product portfolio responsibly: Improve product reuse and interoperability, establish scalable governance processes, and partner with risk, legal, privacy, and compliance teams to support responsible deployment. Demonstrate product impact: Define success metrics, evaluate adoption and performance, and communicate measurable business outcomes and recommendations to senior … partner closely with developers to translate product vision into technical solutions, and help resolve delivery challenges. You will also work with risk, legal, privacy, and compliance teams to ensure AI products meet BCG's quality, security, and governance expectations. Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants ...

Intent HQ Limited in London seeks a Senior GRC Lead – Privacy, AI & Security to run the day-to-day governance, risk and compliance across information security, privacy and AI. You will operate the management systems and maintain risk registers, working with VP, DPO and cross-functional teams. The role emphasizes ...

mature its security function during a critical growth phase. This is a hands-on leadership role requiring a pragmatic security professional who can balance risk management, regulatory compliance, technology innovation, and business enablement. You will work closely with senior leadership to develop and execute a group-wide security strategy whilst … and maintain a robust security framework incorporating industry best practices and a defence-in-depth approach. Drive organisation-wide security awareness, training, and human risk management initiatives. Lead identity and access management, endpoint security, and device governance programmes. Oversee application security, secure software development practices, vulnerability management, code scanning, and ...

evidence quality, stakeholder coordination and continuous improvement, working hands-on without a supporting team. Beyond compliance, you’ll build an internal culture of security and compliance, manage security incidents, work with the business on vulnerability management, and advise senior leadership on risk. 🧩 What You’ll Be Doing: Security leadership and … culture • Build and champion and information security and compliance culture across the business. • Advise business and senior leadership on security risks, priorities, and decisions. • Run periodic information security meetings and maintain governance and reporting: the audit and compliance calendar, risk register, findings tracker, KPIs/KRIs, and regular leadership updates. ...

security documentation, policies, procedures, standards and audit evidence. Provide security input into projects, infrastructure changes and technology deployments. Review technical designs and deliver pragmatic, risk-based security recommendations. Communicate security risks, issues and remediation plans to both technical and non-technical stakeholders. Act as a key technical security contact … practical recommendations for stakeholders. Desirable Experience Security certifications such as AZ-500, SC-200, Security+, CISSP, CISM or CEH. Experience supporting security governance, risk and compliance activities. Exposure to security monitoring, threat detection and incident response processes. Experience within healthcare, financial services or other highly regulated environments. What ...

Senior Cyber GRC Specialist – Technical Controls for a London-based hybrid role with a leading global investment manager. You will bridge governance, risk and compliance with hands-on security controls across networks, OS, cloud, IAM and Secure DevOps. The role requires deep knowledge of NIST and ISO 27001, experience ...

objectives. The role will drive the delivery of transformational CRM initiatives, AI-enabled capabilities, automation programmes, and platform modernization while maintaining robust operational support and governance standards. Key Responsibilities Salesforce Platform Leadership & Ownership Own the end-to-end Salesforce platform strategy, administration, governance, and operational health. Provide technical leadership … Salesforce architecture, configuration, security, and platform optimization. Establish and maintain platform standards, best practices, operating procedures, and governance frameworks. Lead platform capacity planning, performance monitoring, data quality management, and technical debt remediation. Drive adoption of new Salesforce capabilities, including AI and automation technologies. Operational Support & Service Management Provide leadership and ...

cloud services and solutions. • Experience in identifying security issues in existing system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Deep architectural xxperience in one of the following specialisms: AI/… authorisation products and patterns.• Industry experience in Public/Commercial/Defence/Healthcare Sector(s) • End-to-end security involvement, including governance, risk and compliance, operational security, supply chain security and secure user management. • Penetration testing qualifications (e.g. OSCP, CREST, TIGER or equivalent) • Experience leading security engineers and other ...

and solutions in line with defined security strategies. Expertise in identifying security issues in existing system designs, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Experience in one of the following specialisms: AI/… products and patterns. Experience in at least on Industry Vertical Involvement across the full security lifecycle End-to-end security involvement, including governance, risk and compliance, operational security, supply chain security and secure user management. Active participation in knowledge sharing activities, both within the team and at a wider capability ...

Join our GRC Frameworks and Taxonomy Team as Vice President, Tech Risk & Controls Transformation Lead. In this senior role, you will be instrumental in defining, cultivating, and embedding “what good looks like” for technology risk and controls across the organization. You will set and uphold the big rules and standards … risk management, leveraging your extensive experience and exposure to best practices to guide the uplift and transformation of controls. This role requires deep expertise in designing frameworks, engaging diverse stakeholders, and driving continuous improvement in risk management practices. Key Responsibilities Define and Cultivate Best Practices Establish and promote a clear ...

role include:**Client Delivery & Advisory*** Define and shape enterprise AI strategies and roadmaps leveraging ServiceNowAdvise senior stakeholders on:* AI operating models* AI governance, risk, and compliance* Realisation of AI-driven business value* Translate business requirements into AI-enabled workflow solutions**Solution Design & Architecture*** Design and support implementation of:* AI Control … Tower (AI lifecycle management, governance, observability)* Agentic AI workflows enabling autonomous execution* Now Assist/GenAI use cases across workflows* Define data, integration, and workflow architectures for AI-enabled ServiceNow solutions**Conversational AI & Employee Experience*** Support adoption of Employee Works (MoveWorks) capabilities* Design use cases leveraging:* Conversational AI* Enterprise search ...

below,to ensure aligned service offerings, customer success, and continued business growth: Sales &Bid Teams Technical Servicesincluding Security Architecture, Offensive Services andOperational Technology Governance, Risk & Compliance (GRC) Managed Security Services Marketing & Alliances Commercial Responsibility Contribute to cloud practice revenue growth and profitability. Support sales forecasting, pipeline development, and service expansion … level audiences. Strong commercial awareness with experience supporting business growth initiatives. Technical Expertise Strongexpertiseacross several of the following: Microsoft Entra (Identity, Identity Protection, Identity Governance, Internet Access, Private Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud ...

cloud services and solutions. • Experience in identifying security issues in existing system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). • Deep architectural xxperience in one of the following specialisms: AI/… authorisation products and patterns. • Industry experience in Public/Commercial/Defence/Healthcare Sector(s) • End-to-end security involvement, including governance, risk and compliance, operational security, supply chain security and secure user management. • Penetration testing qualifications (e.g. OSCP, CREST, TIGER or equivalent) • Experience leading security engineers and other ...

through technical expertise and influence, working closely with engineers, technical architects and IT teams to set architectural direction and establish the policies, governance, risk and compliance frameworks needed to use AI securely and effectively. You'll advise leadership on opportunities and risks, balancing innovation with business needs, confidentiality and operational ...

through technical expertise and influence, working closely with engineers, technical architects and IT teams to set architectural direction and establish the policies, governance, risk and compliance frameworks needed to use AI securely and effectively. You'll advise leadership on opportunities and risks, balancing innovation with business needs, confidentiality and operational ...

Financial Regulatory Technology Director is accountable for setting the strategic direction and leading the delivery, operation and continued evolution of technology capabilities supporting Financial Risk and Regulatory Reporting across EMEA. The role provides senior technology leadership across both run-the-bank and change-the-bank portfolios, ensuring that regulatory obligations … practices.Knowledge, Skills and ExperienceDemonstrable leadership of complex Risk, Finance, regulatory reporting (e.g. CoRep, FinRep, CRR/Basel, MIFIDPRU, RUBA, Schema A, Anacredit...) governance, risk and compliance, or closely related technology portfolios.Strong technology focus- ideally software backgroundThis is a great role with a lot of visibility and responsibility from ...