176 to 200 of 306 GRC Jobs in London

including AI Red Teaming and penetration testing of generative and agentic systems. Lead the defense against Shadow AI by developing and deploying AI access governance tools and enforcing strict adherence to our review process for all new tools. Drive security compliance and AI governance by aligning systems with frameworks like … and Response (AIDR) workflows utilizing agentic and SIEM technologies, with a strong focus on AI-native threat modeling (e.g., MAESTRO framework). Understanding of Governance, Risk, and Compliance (GRC), specifically managing AI governance policies and enforcing the principle of least privilege for human and AI identities. Upper-Intermediate English fluency ...

sector organisations. Their Cyber Security practice is continuing to grow and is seeking an experienced Cyber Information Assurance Manager to help organisations strengthen their governance, risk and compliance capabilities while driving broader cyber security maturity. Role Overview This is an exciting opportunity to join a growing Cyber Security team delivering … governance, risk, compliance and assurance services across a diverse client base. As a Cyber Information Assurance Manager, you'll lead cyber risk assessments, security assurance reviews and compliance activities while advising stakeholders on cyber security risks and controls. Working across a range of projects, you'll help organisations strengthen their ...

sector organisations. Their Cyber Security practice is continuing to grow and is seeking an experienced Cyber Information Assurance Manager to help organisations strengthen their governance, risk and compliance capabilities while driving broader cyber security maturity. Role OverviewThis is an exciting opportunity to join a growing Cyber Security team delivering governance … everything from risk identification and control assessments through to reporting, remediation planning and ongoing security improvement initiatives.What They're Looking ForProven experience within Cyber GRC, Information Assurance, Security Risk or Cyber Security Governance. Experience conducting cyber risk assessments and developing risk treatment plans. Strong understanding of security frameworks and standards ...

and estimates.Work closely with delivery teams to validate assumptions, resource requirements, risks, and dependencies.Support commercial modelling and effort estimation activities.Ensure solutions reflect industry standards, governance requirements, and security considerations.3. Delivery Assurance & Quality GovernanceProvide independent assurance on ServiceNow programmes and projects throughout the delivery lifecycle.Review project artefacts, designs, delivery plans, and … governance processes to identify delivery risks and improvement opportunities.Ensure adherence to agreed methodologies, platform standards, and implementation best practice.Conduct health checks and assurance reviews for ongoing engagements.Support project mobilisation activities to ensure a seamless transition from sales to delivery.Provide guidance and challenge to delivery teams to drive successful outcomes.Identify lessons ...

and act as the key liaison between internal teams, outsourced Security Operations Centre (SOC), and Virtual CISO. Youll play a vital role in embedding governance, risk, and compliance (GRC) frameworks, helping mature security capabilities while enabling the business to operate securely and efficiently. Essential Skills & Experience 35 years in information … security, IT security, or compliance Strong understanding of GRC principles Experience with Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party/vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes ...

enterprise risk management processes, taxonomies, and reporting structures.Partner closely with business, technology, legal, compliance, and operational teams to maintain alignment with risk appetite and governance standards.Regulatory Risk & ComplianceMonitor evolving regulatory developments impacting digital assets and blockchain technology.Provide risk guidance on applicable regulatory requirements, industry standards, and emerging supervisory expectations.Collaborate with … asset operating models.Partner with Information Security, Technology Risk, and Infrastructure teams to evaluate controls relating to cryptographic key management, blockchain node operations, smart contract governance, and digital custody solutions.Skills & ExperienceBachelor's or Master's degree in Finance, Risk Management, Computer Science, Information Technology, or a related discipline.Typically 7-10+ ...

heart of Global Procurement’s transformation. The role is critical in enabling consistent, compliant, and scalable GP operations by strengthening governance, audit readiness, and sustainable change adoption across Global Procurement, business stakeholders, member firms, and suppliers.The Process Manager owns the end to end lifecycle of Global Procurement processes, ensuring processes … systems, and operational requirements. A core focus of the role is leading GP’s audit and compliance activities, including coordination with internal audit teams, governance of the Non Budgeted Items Policy, and ensuring robust controls, timely submissions, and sustained policy adherence.Reporting to the Change Management & Process Senior Manager, the Process ...

house, using new data sources, machine learning and AI to make machines do the heavy liftingAbout the RoleWe are looking for a proactive Security GRC Analyst to join our Information Security team. You will play a pivotal role in scaling our security posture in a fast-paced, AI driven, cloud … voice will be heard, and your ability to take ownership and drive initiative will directly shape our security culture and operational resilience.Your approach to GRC starts with the risk, not the checklist. Rather than chasing compliance for its own sake, you will identify and assess the risks first, then collaborate ...

senior leadership role for someone who can combine deep technical architecture capability with the ability to work across IT, Product, Cloud, Data, Legal, and Governance stakeholders. You will shape the company’s target-state architecture for Zero Trust, IAM, reverse proxy, segmentation, AI/ML trust boundaries, and secure integration … pipelines Establish and maintain AI/ML trust-boundary models Support architecture and product teams on secure AI adoption Shape standards for: data governance and access design ML pipeline trust boundaries model and data protection patterns secure use of AI assistants and AI-enabled workflows Architecture governance and design assuranceLead ...

Dinamica is seeking a GRC Consultant to help clients design, run and improve governance, risk and compliance programmes. You will work across privacy, security, AI and operational risk with a broad GRC lens and deliver integrated solutions for a global client base. You will join a London-based team with ...

working with a global organisation undergoing a major transformation in how they deliver Governance, Risk & Compliance. They’re looking for a Senior Information Security (GRC) Specialist to help their security governance strategy, uplift capability, and drive meaningful change across the business. This role offers genuine progression, visibility, and the opportunity … influence how GRC operates at scale. The right person will be: A broad senior GRC specialistwho can turn their hand to most areas of governance, risk and compliance. Strong in cyber risk management, including identifying, tracking, prioritising and remediating risks. Experienced applying NIST and IT control frameworks, with the ability ...

STRIDE/attack-tree threat models for sensitive flows including authentication, payment, custody, reconciliation and sign off on security architecture for critical designs.Product Security Governance & Standards: Translate technical risks and regulatory demands into clear security policies. You will own the creation and upkeep of our Application Security Standards, reference architectures … deploying AI-assisted security tooling, leveraging LLMs for automated software patch generation, or evaluating vulnerability detection agents within enterprise developer pipelines.Prior experience operating alongside GRC frameworks, authoring developer-facing security policies from scratch, and building automated policy-as-code gateway integrations.Public track record of CVEs, security research, or open-source ...

Architect/professionalto join a very high-profile transformation programme with one of our London based clients. Key Responsibilities: Lead the architecture, design and governance of the ServiceNow platform. Define platform strategy, roadmap and technical standards. Design and implement solutions across ITSM and additional ServiceNow modules including ITOM, ITAM, HRSD … GRC and SecOps. Drive integrations using REST, SOAP APIs and MID Servers. Ensure platform scalability, security and performance. Lead architecture workshops and mentor junior technical teams. Essential Skills: Extensive ServiceNow architecture experience. Strong ITSM knowledge plus at least two additional ServiceNow modules. CMDB and Discovery implementation experience. Strong JavaScript, Glide ...

and optimising commercial constructs through financial modelling, scenario analysis, and strategic deal planning.Demonstrated success leading strategic opportunities from inception through to successful close, navigating governance, compliance, and stakeholder alignment.Experience influencing senior executives and C-suite stakeholders through compelling commercial recommendations and business-focused storytelling.Proven ability to drive alignment across Sales … concepts, using data-driven analysis and scenario planning to inform decision-making and shape deal outcomes. Strong understanding of the commercial deal lifecycle, including governance, risk management, compliance, and stakeholder management. Ability to build credibility and engage confidently with senior decision-makers, articulating commercial trade-offs and strategic recommendations. Highly ...

code principles. Establish and promote engineering standards, reusable integration patterns, and reference implementations to improve consistency, scalability, and delivery velocity. Partner with data, architecture, governance, platform, operations, application, and business teams to deliver strategic data capabilities, provide technical leadership, and ensure alignment with enterprise standards and objectives. All staff: Ensure … risk management processes, as required. Competencies, Skills and Experience Skills and Experience: Essential: Experience working within regulated environments and a strong understanding of associated governance, risk, compliance, and audit requirements. Extensive experience designing and implementing resilient data ingestion, orchestration, and provisioning capabilities for enterprise-scale workloads. Strong hands-on experience ...

agentic workflows, RAG, tool‐calling and orchestration, that with the help of GenAI developers. You will raise quality and drive adoption with enterprise‐grade governance from day one, while collecting requirements, and managing technical delivery for agents across Azure and AWS, M365 Copilot/Copilot Studio, , leveraging leading OpenAI and … manage GenAI from ideation through PoC, pilot, and production using agile delivery, dependency tracking, and iterative user feedback loops. Experience navigating technology delivery governance, risk, compliance, data privacy, and approval forums while coordinating across business, technology, data privacy, and legal stakeholders in financial domain. Capability to drive user adoption through ...

LONDON, United Kingdom; BRIGHTON, EAST SUSSEX, United KingdomJob Function: Risk ManagementSchedule: Full timeShift: DayWorkplace: HybridCareer Area: Analytics & Risk ManagementCompany: American ExpressDescriptionThe Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding … risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.The UK Chief Risk Officer (CRO) organization within Global Risk and Compliance (GRC) is responsible for identifying and managing risk across all processes at American Express in the UK. ...

and-spoke model, working with embedded Business Control Officers across the group.The team defines first-line standards, drives consistency, consolidates MI, supports governance, provides targeted control advisory support, and helps move the control environment from reactive issue management to proactive risk identification, control effectiveness and automation-enabled monitoring. … control priorities including ISAE 3402 support, operational resilience reporting, third-party risk management, operational due diligence, Finance transformation control uplift and CFO/COO governance reporting.The roleReporting to the Group Head of Controls, the Senior Manager will be a senior delivery lead responsible for developing, embedding and operationalising first-line ...

London, 1 day a week in officeHelp shape the future of AI governance at a tech enterprise listed on the NY Stock Exchange.This is an opportunity to join setup and lead an AI Governance function focused on enabling the responsible adoption of AI across a global business. Working alongside senior … leaders across Privacy, Technology, Security, Legal and Risk, you’ll help turn governance frameworks into practical, scalable processes that support innovation while managing risk.This isn’t a role for someone who wants to sit on the sidelines. You’ll be hands-on, visible across the organisation and given the opportunity ...

looking for an experienced GRC Manager to join a growing Information Security function within a PE-backed international organisation undergoing significant growth and transformation. Reporting directly to the Director of Information Security, you'll take ownership of Governance, Risk and Compliance activities across the business, with an immediate focus … organisation through ISO 27001 certification. This is an opportunity to have genuine ownership. We're not looking for someone who has simply contributed to GRC within a large team; we need someone who understands how to take frameworks, controls and best practice and implement them effectively within a lean, fast ...

looking for an experienced GRC Manager to join a growing Information Security function within a PE-backed international organisation undergoing significant growth and transformation. Reporting directly to the Director of Information Security, you'll take ownership of Governance, Risk and Compliance activities across the business, with an immediate focus … organisation through ISO 27001 certification. This is an opportunity to have genuine ownership. We're not looking for someone who has simply contributed to GRC within a large team; we need someone who understands how to take frameworks, controls and best practice and implement them effectively within a lean, fast ...

Work closely with a variety of teams across Bridewell, such as Sales & Bid Teams, Technical Services (including Security Architecture, Offensive Services and Operational Technology Governance, Risk & Compliance (GRC) Managed Security Services, Marketing & Alliances, Commercial Responsibility. Commercial Responsibility Contribute to cloud practice revenue growth and profitability. Support sales forecasting, pipeline development … executive stakeholders and board-level audiences. Strong commercial awareness with experience supporting business growth initiatives. Technical expertise across Microsoft Entra (Identity, Identity Protection, Identity Governance, Internet Access, Private Access), Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps), Microsoft Defender for Cloud ...

EMEA business. This is an exciting opportunity to shape how risk is managed across multiple countries while leading the rollout of a new Enterprise Governance, Risk & Compliance (GRC) platform - a major strategic initiative for the region.Reporting to the EMEA Head of Risk & Compliance, you'll partner with leaders across Finance … business decisions.What You'll Be DoingLead the continued development and embedding of the EMEA Risk Management Framework.Drive the implementation and adoption of our Enterprise GRC system across the region.Facilitate risk workshops, training sessions and stakeholder engagement activities.Identify, assess and report key risks, incidents and emerging threats.Deliver meaningful risk insights and ...

organisation. Key Responsibilities Design and evolve secure AI architecture roadmaps , ensuring alignment with broader technology and security strategies Lead the secure design, implementation, and governance of AI, LLM, and Agentic systems Develop and embed AI security standards, policies, and best practices across the organisation Conduct and maintain threat models and … Subject Matter Expert (SME) for AI Security , supporting architecture boards, risk committees, and senior stakeholders Provide guidance on secure AI adoption , including threat mitigation, governance, and compliance Collaborate cross-functionally with engineering, security, and business teams to ensure secure, scalable delivery Evaluate and implement emerging AI security technologies to reduce ...

Chief Technology & Transformation Officer, with a dotted line to the Board and Audit Committee, this is a pivotal executive leadership role responsible for security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations … customers, supporting business growth, and embedding security across the organisation. What you’ll do Define and lead the Group’s security strategy, policies, and governance framework Provide Board-level reporting on security posture, risks, and compliance activities Oversee security operations, including threat detection, incident response, and remediation ...