City of London, London, United Kingdom Hybrid / WFH Options
FIND | Creating Futures
Ability to teach and explain key cyber domains, and at least one of the below: Network and infrastructure security Security operations and incident response Threat intelligence and threat modelling Governance, risk & compliance (GRC) Cloud security Penetration testing and vulnerability management Excellent communication & presentation skills. Desirable: Certifications such as CISSP, CISM, CEH, CPENT, Security+, CySA+, OSCP, AWS, GCP or Azure Security More ❯
Ability to teach and explain key cyber domains, and at least one of the below: Network and infrastructure security Security operations and incident response Threat intelligence and threat modelling Governance, risk & compliance (GRC) Cloud security Penetration testing and vulnerability management Excellent communication & presentation skills. Desirable: Certifications such as CISSP, CISM, CEH, CPENT, Security+, CySA+, OSCP, AWS, GCP or Azure Security More ❯
better place. A safer place. A more ethical place. A place where anyone, anywhere can have a voice. That's a serious impact. NAVEX is a global leader in GRC solutions and helps organisations strengthen their riskandcompliance programs with a 360-degree view of enterprise, third party and ecosystem risk for enhanced regulatory complianceand proactive risk management. More ❯
in security across our entire organisation What you'll have: A passion for security, a drive to make things better by harnessing technology Experience in, or knowledge of, automating GRCand other security processes to reduce manual work Strong analytical and problem-solving skills, with the ability to identify and mitigate security risks A good understanding of information security principles More ❯
priority risk areas, including operational resilience, technology risk, and third-party exposure. Lead development and monitoring of risk appetite statements and thresholds; escalate risk breaches and emerging trends to governance committees. Lead the critical review and challenge of regional Riskand Control Matrices (RACMs) to ensure compliance with regulatory requirements including DORA, PRA, and other applicable frameworks. Collaborate extensively with … the preparation and delivery of Board materials, committee presentations, and ERM reports with clear articulation of risk trends, metrics, and control posture. Drive the design, development, and enhancement of GRC reporting and dashboards, leveraging platforms such as Archer, PowerBI, and Tableau. Champion data quality and consistency in Archer GRC to support enterprise-wide riskgovernanceand regulatory compliance. Lead cross … regional collaboration with ERM colleagues in New York and Singapore to drive consistency in risk program execution andgovernance alignment. Qualifications and Experience: Minimum 12 years of experience in enterprise or operational riskmanagement within a regulated financial institution or FinTech firm. Strong understanding of 2LoD risk oversight responsibilities andgovernance practices, including the challenge function. Expertise in regulatory frameworks More ❯
Job Title: OneTrust GRC Consultant Location: Hybrid (London-based) or Remote (UK-based) Job Type: Full-time or Part-time At Lex Dinamica , we’re more than a consultancy — we’re a mission-driven team helping organisations build trust through ethical, effective data practices. As a leading data privacy andgovernance firm, we empower clients to navigate regulatory complexity. We … are now looking for a OneTrust GRC Expert to join our growing team. This is a fantastic opportunity for someone who’s passionate about privacy, risk, andcompliance technology — and who wants their work to have real-world impact. What You'll Do As a OneTrust GRC Consultant, you will: Lead the implementation, configuration, and optimisation of OneTrust GRC modules … e.g., RiskManagement, Policy & Compliance, Audit, and Third-Party Risk). Guide clients through their governance journeys, from discovery to go-live, ensuring alignment with best practices and regulatory expectations (GDPR, ISO 27001, NIST, etc.). Translate complex riskandcompliance needs into scalable, tech-enabled solutions using the OneTrust platform. Collaborate with cross-functional teams — from legal and privacy More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Lex Dinamica
Job Title: OneTrust GRC Consultant Location: Hybrid (London-based) or Remote (UK-based) Job Type: Full-time or Part-time At Lex Dinamica , we’re more than a consultancy — we’re a mission-driven team helping organisations build trust through ethical, effective data practices. As a leading data privacy andgovernance firm, we empower clients to navigate regulatory complexity. We … are now looking for a OneTrust GRC Expert to join our growing team. This is a fantastic opportunity for someone who’s passionate about privacy, risk, andcompliance technology — and who wants their work to have real-world impact. What You'll Do As a OneTrust GRC Consultant, you will: Lead the implementation, configuration, and optimisation of OneTrust GRC modules … e.g., RiskManagement, Policy & Compliance, Audit, and Third-Party Risk). Guide clients through their governance journeys, from discovery to go-live, ensuring alignment with best practices and regulatory expectations (GDPR, ISO 27001, NIST, etc.). Translate complex riskandcompliance needs into scalable, tech-enabled solutions using the OneTrust platform. Collaborate with cross-functional teams — from legal and privacy More ❯
could impact Ops/Back Office functions. Develop and maintain dashboards and reporting tools to provide real-time risk information to senior management. Prepare and present risk reports for governance forums, such as risk committees, highlighting critical issues and potential impact on business continuity. Design and implement key risk controls in partnership with operational teams to manage identified risks within … . Strong understanding of operational processes, risk frameworks, and regulatory requirements. Excellent analytical skills, with experience in data analysis and reporting. Proficiency in riskmanagement software and tools (e.g., GRC platforms). Exceptional communication and interpersonal skills, with the ability to influence and engage stakeholders at all levels. Experience in managing regulatory exams and relationships with examiners and auditors. Ability More ❯
a professional services advisory capacity, coupled with strong technical knowledge of risk frameworks and terminology Proven ability in standing up business unit riskmanagement processes (e.g. designing and embedding governance, reporting and monitoring mechanisms, controls design and implementation, issue and incident management) and uplifting overall business-unit risk capability via training, guidance and leadership on risk/compliancemanagement Previous … Kingdom 2 months ago London, England, United Kingdom 2 months ago Global Head of Consumer Complianceand Market Conduct Risk London, England, United Kingdom 2 weeks ago Head of GovernanceRisk & Compliance Services Greater London, England, United Kingdom 2 weeks ago Senior Director of Governance, Risk, Compliance & Privacy London, England, United Kingdom 2 days ago London, England, United Kingdom More ❯
GRC Analyst/Outside IR35/550 pd/6 Month/Remote I'm looking to speak to experienced GCR Analysts with consistent experience and well-versed in Consultancy environments. Recent hands-on experience with complex regulatory frameworks, while driving innovation and efficiency across GRC programs is a must. During the contract you will: Manage initiatives such as ISO … contact with me directly (Ben Sheppard) if this role is a good fit. Please email an updated copy of your CV to (url removed) or click the apply button. GRC Analyst/Outside IR35/550 pd/6 Month/Remote More ❯
driving the ERM agenda; Support product, outsourcing and commercial risks assessments; and root cause analysis resulting from operational incidents; Support the maintenance of the firm's risk registers andGovernance, RiskandCompliance (GRC) system; Submission of reports to Regulators (for example the Financial Conduct Authority, the Central Bank of Ireland, ACPR, the Financial Investigation Unit of Argentina, etc.); Point More ❯
guidance, control validation and overall security assurance. This could also involve sitting on major project steering committees. Support and encourage the ethos and methodology of security by design. Aid GRC to build, implement and facilitate a mechanism to aid BU’s to assess and measure their security compliance to policies. Drive the development of BU/Divisional security roadmaps. Giving … in an information security risk leadership role within a large organisation. Confident in presenting, discussing and championing ideas and concepts with senior stakeholders. Experience of running information security riskgovernance processes and structures Familiarity with relevant industry standards for information security (e.g. ISO27001, NIST CSF) Experience of creating, implementing and assessing against information security policies and standards Creativity Able to More ❯
guidance, control validation and overall security assurance. This could also involve sitting on major project steering committees. Support and encourage the ethos and methodology of security by design. Aid GRC to build, implement and facilitate a mechanism to aid BU’s to assess and measure their security compliance to policies. Drive the development of BU/Divisional security roadmaps. Giving … in an information security risk leadership role within a large organisation. Confident in presenting, discussing and championing ideas and concepts with senior stakeholders. Experience of running information security riskgovernance processes and structures Familiarity with relevant industry standards for information security (e.g. ISO27001, NIST CSF) Experience of creating, implementing and assessing against information security policies and standards Creativity Able to More ❯
our communities, and each other. Job Description We are seeking a Technical Portfolio Manager to lead and support the European Technology Portfolio, with a focus on product development, delivery governance, riskandcompliance, and strategic stakeholder engagement. This is a high-impact role that will work closely with senior leaders across Technology, Product, Risk, and Operations to ensure the successful … the European technology portfolio, ensuring alignment with strategic goals and regulatory requirements. Delivery Oversight: Monitor and support the execution of complex software development initiatives across multiple teams and geographies. Governance & Reporting: Represent the portfolio in forums such as ITGS, ORC, and European Portfolio Reviews. Provide clear, data-driven updates to senior stakeholders. Risk & Compliance: Ensure all initiatives meet internal andMore ❯
years of experience in Customer Success (CSM), successfully managing complex customer relationships in a B2B SaaS environment . Proven experience in audit (internal or external), riskmanagement, compliance, or GRC frameworks or tools, with a strong focus on addressing enterprise-level challenges and delivering meaningful customer outcomes (preferred) 1+ years of hands-on experience with AuditBoard modules, data load processes More ❯
We now have an exciting opportunity for a Director to join our Digital Risks (Cyber Security) team in London. This is a senior role to support the growth of Digital Risks in EMEA, specifically to lead on cyber security andMore ❯
this privacy notice. Similar Jobs (2) Senior Manager, Penetration Testing locations 2 Locations time type Full time posted on Posted 30+ Days Ago Senior Analyst, Technology and Cyber Security GRC locations London, United Kingdom time type Full time posted on Posted 30+ Days Ago More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Verdantix
research reports. Understanding of priorities of the chief risk officer including enterprise riskmanagement, integrated riskmanagement, third-party riskmanagement, ESG riskand reputational risk. Deep understanding of Governance, Risk, andCompliance (GRC) software and other risk focused technologies. Additional benefits we offer... Competitive salary (with annual review) Performance-driven quarterly bonus scheme Pension with enhanced employer contribution Generous More ❯
research reports. Understanding of priorities of the chief risk officer including enterprise riskmanagement, integrated riskmanagement, third-party riskmanagement, ESG riskand reputational risk. Deep understanding of Governance, Risk, andCompliance (GRC) software and other risk focused technologies. Additional benefits we offer... Competitive salary (with annual review) Performance-driven quarterly bonus scheme Pension with enhanced employer contribution Generous More ❯
at KPMG; a diverse business requires diverse personalities, characters, and perspectives. There really is a place for you here. Why Join KPMG as a Manager - IGH GRCS? KPMG's Governance, RiskandCompliance Services (GRCS) practice within IGH is an area of the firm with tremendous growth potential. GRCS is an integral part of our Enterprise Risk advisory practice. We … provide services relating to internal audit, internal control, corporate governance, riskmanagementand related assurance projects. Clients are based in the public sector and our services deliver added value to clients using modern control assessment, riskmanagementand audit techniques focusing on strategic, managementand operational issues as well as financial managementand reporting controls. We also work closely with … and co-sourced contractual basis • Managing and directly delivering individual and/or a programme of internal audit projects which includes planning, review, quality assurance and reporting • Riskmanagement, governanceand internal audit advisory services • Risk identification workshops and control reviews • Delivering control andrisk training • Managing and reviewing internal control questionnaires • Compliance internal audits • Working with members of other More ❯
City of London, London, United Kingdom Hybrid / WFH Options
KPMG UK
at KPMG; a diverse business requires diverse personalities, characters, and perspectives. There really is a place for you here. Why Join KPMG as a Manager - IGH GRCS? KPMG's Governance, RiskandCompliance Services (GRCS) practice within IGH is an area of the firm with tremendous growth potential. GRCS is an integral part of our Enterprise Risk advisory practice. We … provide services relating to internal audit, internal control, corporate governance, riskmanagementand related assurance projects. Clients are based in the public sector and our services deliver added value to clients using modern control assessment, riskmanagementand audit techniques focusing on strategic, managementand operational issues as well as financial managementand reporting controls. We also work closely with … and co-sourced contractual basis • Managing and directly delivering individual and/or a programme of internal audit projects which includes planning, review, quality assurance and reporting • Riskmanagement, governanceand internal audit advisory services • Risk identification workshops and control reviews • Delivering control andrisk training • Managing and reviewing internal control questionnaires • Compliance internal audits • Working with members of other More ❯
current operational technology and applications. This role will suit a sysadmin, or someone with equivalent practical experience in technology service and operations, who is looking to transition to a GRC career path; after a fruitful time at the coal face you are now ready for opportunities to stretch into a higher level business facing role - we will support, provide guidance … technology risk. Principal Accountabilities: - Risk Identification: Develop strategies, conduct horizon scanning, and collaborate across teams to identify and assess technology risks, including regulatory changes. - Risk Assessment: Ensure compliance with governance policies, conduct assessments and testing, monitor risk events, and support vendor risk evaluations. - Risk Controls Management: Implement riskand control management strategies, maintain governance frameworks, manage IT controls, and oversee … GRC platform services. - RiskGovernance & Compliance: Administer governance procedures, optimise processes, ensure record-keeping, and support audits and certifications. - Reporting & Documentation: Prepare risk reports, maintain governance documentation, and develop innovative visualisations to communicate insights. - Management & Development: Foster learning across teams, promote compliance awareness, and advance personal expertise and team development. Required skills & experience: - Experience in technology operations and administration, ITSM More ❯
The Digital & Data Lead role is responsible for overseeing the strategy and development of the Bank’s digital products and processes and design and implementation of Bank wide data governance framework. Playing an important role within the Bank’s Digital Transformation programme, the role holder will: Work with multi-disciplinary teams responsible for researching, designing, building and/or procuring … continual optimisation of the digital products and processes to support the realisation of a seamless, flexible customer and colleague experience. Responsible for design and implementation of bank wide data governance framework and ensure businesses and support functions are held accountable for ownership and maintenance of accurate data within the bank’s ecosystem. Responsible for governance, riskmanagementand regulatory compliance … management or aligned disciplines. Understanding of development processes and business case development. Role requirements: Actively Builds Relationships Embraces Change and Technology Creates Business Value Role Specific Regulations RiskManagement, Governanceand Controls Consumer Duty This is a hybrid role ?" at least 3 days in the office in Central London. The salary will be circa £100K - £140K plus benefits ?" dependent on More ❯
Enterprise RiskManagement Framework e.g. Risk appetite, Riskand Control Self-Assessment, Risk Event Management, Risk Acceptances etc. Work closely with Company Secretariat to coordinate the Risk reporting andGovernance requirements across the Group. Enhance Risk Reporting to deliver accurate and timely reporting to governance forums and key stakeholders at Executive and Board level. Analyses MI in relation to Risk … Management to develop and report insights. Support and champion the adoption of the newly implemented GRC (Resolver) riskmanagement platform, optimising its risk reporting functionality. Maintain, develop and enhance the Group and Local risk policy framework. Support the Group CRO and Head of Enterprise Risk in colleague engagement activities and communications. What we're looking for: Good knowledge of ClearBank … s strategy, operating model andrisk profile. Good understanding of RiskManagementgovernance principles, policies and procedures. Good understanding and experience of participating in riskgovernance bodies and/or initiating conversations with senior management on risk management. Excellent communication and interpersonal skills, which includes an ability to explain riskmanagementandgovernance to stakeholders across the business Self-starter More ❯
our ideal customers use are are familiar with the procurement and billing/AP space You have experience with demoing, implementing or administering key applications such as ERPs, CLMs, GRC, procurement and/or AP automation platforms. You're an effective communicator, simplifying technical concepts for both technical and non-technical audiences. You're a proactive problem solver , with strong More ❯