176 to 200 of 375 GRC Jobs in the UK

Role: Senior AI Governance Consultant Location: Edinburgh Salary:£70,000£95,000 An experienced consulting professional to design and operationalise AI governance at scale across regulated and complex organisations. Large multidisciplinary consulting firm operating across defence, government, financial services, life sciences and transport; global delivery footprint and multi-discipline project … teams. Key responsibilities: - Lead design and implementation of AI governance frameworks, policies, controls and operating models across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance ...

Role: Senior AI Governance Consultant Location: London Salary:£70,000£95,000 An experienced consulting professional to design and operationalise AI governance at scale across regulated and complex organisations. Large multidisciplinary consulting firm operating across defence, government, financial services, life sciences and transport; global delivery footprint and multi-discipline project … teams. Key responsibilities: - Lead design and implementation of AI governance frameworks, policies, controls and operating models across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance ...

Role: Senior AI Governance Consultant Location: Bristol Salary:£70,000£95,000 An experienced consulting professional to design and operationalise AI governance at scale across regulated and complex organisations. Large multidisciplinary consulting firm operating across defence, government, financial services, life sciences and transport; global delivery footprint and multi-discipline project … teams. Key responsibilities: - Lead design and implementation of AI governance frameworks, policies, controls and operating models across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance ...

Role: Senior AI Governance Consultant Location: Manchester Salary:£70,000£95,000 An experienced consulting professional to design and operationalise AI governance at scale across regulated and complex organisations. Large multidisciplinary consulting firm operating across defence, government, financial services, life sciences and transport; global delivery footprint and multi-discipline project … teams. Key responsibilities: - Lead design and implementation of AI governance frameworks, policies, controls and operating models across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance ...

best practices. Own and manage the implementation of risk management tools and automation of processes using industry-leading platforms, including those that support AI governance when relevant. Lead or contribute to digital risk maturity assessments and process improvement initiatives. Develop and maintain documentation, reports, and dashboards for risk tracking and … interpret regulatory requirements and translate them into actionable business strategies for IT risks and opportunities. Proficiency in risk management tools and platforms (e.g. GRC platforms), ideally with experience in implementing and/or optimizing these solutions. Experience in leading risk assessments and developing and implementing risk mitigation strategies. Strong analytical ...

ensuring clear understanding of decisions and required corrective actions. Recommend issuance, continuation, suspension, or withdrawal of certificates in line with BSI certification processes and governance requirements. Build strong, trusted relationships with client stakeholders, including CISOs, Data Protection Officers, IT leadership teams, and operational management. Support clients in understanding how security … governance, risk, and compliance improvements strengthen business resilience and performance. Identify opportunities to enhance client satisfaction and support business development initiatives through value‐added insights. Requirements Demonstrable third‐party audit or assurance experience. Minimum two years of industry experience in Information Security, IT governance, risk management, data protection, cybersecurity ...

days onsite per week) Salary: Up to £140,000 + Package We are seeking a Senior Security & Compliance Architect to lead the design, governance, and assurance of secure cloud and SaaS platforms across large-scale enterprise transformation programmes. The successful candidate will help define and enforce security-by-design and … and due diligence Support incident response, resilience, backup, and disaster recovery architecture patterns and standards Collaborate with Legal, Procurement, and Commercial teams to ensure governance and contractual controls are embedded Act as a trusted advisor to senior stakeholders, leading security architecture reviews and risk-based decision making Required Experience Experience ...

investment banks. For more information, please visit www.cmgx.io The Role We are hiring a Senior Security Engineer to lead our security risk management and governance work. This is a senior individual‐contributor role for someone who thrives on owning large, ambiguous initiatives end‐to‐end and turning them into shipped … core of the role is hands‐on security risk management, threat modeling, security risk assessments, and security design and architecture reviews, paired with the governance and process work that scales the program. You will partner on customer due‐diligence and SOC 2 evidence and turn security controls into repeatable workflows ...

security professional who wants to shape compliance practices within a fast-growing technology environment. In this role, you will lead security compliance initiatives, strengthen governance processes, and help organizations achieve and maintain key industry certifications. You will combine technical expertise, strategic thinking, and customer-facing skills to improve compliance solutions … quality, and continuous improvement initiatives. Requirements Fluent English proficiency (C1 or C2 level) is essential. 7+ years of hands-on experience in information security, governance, risk, and compliance (GRC), ideally within B2B SaaS environments. Proven experience leading at least five successful ISO 27001 certification projects as an implementer, auditor ...

Information Security GRC Analyst Location : London Salary : £38,000-£48,000 Working Pattern: Hybrid About the Role A London-based law firm is looking for a Information Security GRC Analyst to join its Risk and Information Security team. This is a strong opportunity for someone at the early stages … their GRC career to build practical experience within a professional services environment, with exposure to ISO 27001, information security risk, compliance and assurance. Key Responsibilities Support the administration and continual improvement of the Information Security Management System (ISMS). Assist with ISO 27001 certification, surveillance and internal audit activities. Coordinate ...

Information Security Analyst (GRC) Looking to build your career in Information Security with one of London's most respected professional services firms? We're recruiting for a Junior Information Security Analyst to join a growing Information Security and Risk team within a highly regarded organisation based in Central London. This … excellent opportunity for someone with 1 to 2 years' Information Security or GRC experience who is looking to develop their expertise across ISO 27001, governance, risk management, supplier assurance and compliance. Salary & Benefits £38,000 to £48,000 Hybrid working, 3 days per week in the Central London office Excellent ...

enterprise-scale SAP Identity & Access Management? This is an opportunity for an experienced SAP IAG IAM Consultant who enjoys solving complex security and governance challenges whilst working across modern SAP environments. You'll play a key role in designing, implementing and enhancing Identity & Access Governance solutions, ensuring secure, compliant and … efficient access management across large SAP landscapes. This is a genuinely hands-on consulting position where you'll influence security standards, improve governance processes and help organisations strengthen their SAP security posture. The Opportunity: Join a highly skilled SAP security team delivering enterprise Identity & Access Management solutions across both ...

transformation lifecycle. Working across a complex global environment, you will bring together multiple security disciplines including SAP Security, Identity & Access Management (IAM), Identity Governance & Administration (IGA), Cybersecurity, Governance Risk & Compliance (GRC), Resilience and Data Protection. You will provide leadership, governance and coordination across multiple workstreams, ensuring the future SAP landscape … Acting as the Security, Resilience and Compliance representative within the Phoenix SAP S/4HANA transformation programme. Championing security requirements and objectives across programme governance forums, design authorities, workshops and delivery activities. Serving as the primary point of contact between the programme and Security, Resilience and Compliance teams. Building strong ...

closely with delivery teams to validate assumptions, resource requirements, risks, and dependencies. Support commercial modelling and effort estimation activities. Ensure solutions reflect industry standards, governance requirements, and security considerations. 3. Delivery Assurance & Quality Governance Provide independent assurance on ServiceNow programmes and projects throughout the delivery lifecycle. Review project artefacts, designs … delivery plans, and governance processes to identify delivery risks and improvement opportunities. Ensure adherence to agreed methodologies, platform standards, and implementation best practice. Conduct health checks and assurance reviews for ongoing engagements. Support project mobilisation activities to ensure a seamless transition from sales to delivery. Provide guidance and challenge ...

zero, and you won’t be handed someone else’s plan. Serious groundwork is already in place: an independent security maturity baseline, a live GRC platform, EDR and identity programmes in deployment, and security investment with real backing from the exec team. The strategy and roadmap from here are yours … incident is, or might become, a security event. Direct security across a cloud-native AWS estate: platform, payment flows, APIs, player data. 4. Own governance, risk and compliance Own the GRC programme: risk register, policies, control framework, audit readiness (ISO 27001 path, Cyber Essentials, GDPR) and the compliance-automation platform ...

including AI Red Teaming and penetration testing of generative and agentic systems. Lead the defense against Shadow AI by developing and deploying AI access governance tools and enforcing strict adherence to our review process for all new tools. Drive security compliance and AI governance by aligning systems with frameworks like … and Response (AIDR) workflows utilizing agentic and SIEM technologies, with a strong focus on AI-native threat modeling (e.g., MAESTRO framework). Understanding of Governance, Risk, and Compliance (GRC), specifically managing AI governance policies and enforcing the principle of least privilege for human and AI identities. Upper-Intermediate English fluency ...

and Operations Support Systems (OSS/BSS) needs. They define platform roadmaps, lead implementations across multiple modules, and ensure scalable integrations while maintaining enterprise governance and security Key Responsibilities Telecommunications Specifics: OSS/BSS Integration: Architect seamless integrations between ServiceNow and complex telecom billing, provisioning, and inventory systems (e.g. … Define and drive the overall platform strategy, roadmap, and governance. Lead the design and implementation of ServiceNow modules, including ITSM, ITOM, ITAM, HRSD, CSM, GRC, SecOps , and custom applications. Ensure platform scalability, security, performance, and integrations with other enterprise systems. Provide technical leadership in solution design workshops, architecture reviews, and ...

sector organisations. Their Cyber Security practice is continuing to grow and is seeking an experienced Cyber Information Assurance Manager to help organisations strengthen their governance, risk and compliance capabilities while driving broader cyber security maturity. Role Overview This is an exciting opportunity to join a growing Cyber Security team delivering … governance, risk, compliance and assurance services across a diverse client base. As a Cyber Information Assurance Manager, you'll lead cyber risk assessments, security assurance reviews and compliance activities while advising stakeholders on cyber security risks and controls. Working across a range of projects, you'll help organisations strengthen their ...

corporate services enabling functions that underpin our success . This role combines strategic enterprise leadership with Chief Financial Officer accountability, overseeing the resources, systems, governance and people that allow the Met Office to deliver its mission. World changing work From science to technology, from meteorology to management, and from planning … diverse portfolio of professional functions that support the effective, secure and compliant operation of the Met Office, including: Commercial People&Culture Communicationsand Engagement Governance and Legal Internal Audit Health, Safety and Wellbeing Security and Cyber Security Corporate IT Reporting directly to the CEO and serving as a member ...

practice across the organisation. Reporting to the Head of Technical Delivery, you will be the go-to expert for all aspects of cyber security, governance, risk, and compliance. This is a standalone role offering significant ownership and influence, making it ideal for someone who enjoys autonomy and genuinely shaping … frameworks. Coordinate with technical and business teams to embed compliance requirements into day-to-day operations. Provide compliance reporting and updates to senior stakeholders. Governance, Risk & Compliance: Support wider compliance initiatives including ISO 27001, Cyber Essentials, and GDPR. Maintain security policies, standards, and procedures. Conduct risk assessments and manage ...

and act as the key liaison between internal teams, outsourced Security Operations Centre (SOC), and Virtual CISO. Youll play a vital role in embedding governance, risk, and compliance (GRC) frameworks, helping mature security capabilities while enabling the business to operate securely and efficiently. Essential Skills & Experience 35 years in information … security, IT security, or compliance Strong understanding of GRC principles Experience with Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party/vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes ...

experienced Senior Business Analyst with a proven track record of delivering large-scale Third Party Risk Management (TPRM) , Supplier Risk, Procurement, or Governance, Risk and Compliance (GRC) transformation programmes. This role would suit an individual who can quickly establish credibility with stakeholders, work effectively across multiple markets, and drive delivery … Business stakeholder sign-off Build and maintain strong working relationships across business, technology and supplier teams to ensure programme momentum and successful delivery. Support governance activities, requirement traceability, process documentation and change management where required. Essential Skills and Experience Proven experience as a Business Analyst on large-scale: Third Party ...

strong track record of managing cyber security projects within large-scale telco environments. You will be responsible for leading multiple workstreams simultaneously, ensuring effective governance, stakeholder engagement, reporting, and successful project outcomes. Key Responsibilities Lead the delivery of multiple cyber security projects and workstreams Drive project planning, execution, governance, and … Project Manager within a telecommunications environment Strong cyber resilience and cyber security programme delivery experience Experience managing multiple concurrent projects and workstreams Excellent project governance, reporting, and communication skills Track record of delivering complex cyber security initiatives from inception through to completion Experience engaging and influencing senior stakeholders Desirable Skills ...

stakeholder engagement, and the ability to translate complex regulatory requirements into actionable business guidance are essential. This role will work alongside the information security GRC function as well as risk owners across the business. You'll be responsible for: Own and maintain the Enterprise Risk Universe and enterprise risk register. … Data Protection frameworks. Ensure compliance with UK, EU, and global privacy, security, and regulatory requirements. Provide expert guidance on risk, compliance, regulatory change, AI governance, and third-party risk. Oversee customer audits and drive continuous improvement of controls and governance. Identify, assess, and monitor strategic and operational risks across ...

validated prior to deployment. Working closely with Project Leadership, Business Process Owners, Solution Architects, System Integrators and Deployment Teams, the Test Manager will provide governance, leadership and assurance across all phases of testing. This role requires a strong leader capable of managing large business testing communities, coordinating multiple suppliers and … come from a functional SAP background, therefore able to undertake code reviews, config validations and triage defects. Core Functional Requirements & Experience: Testing Strategy & Governance Define and implement the overall Project testing strategy and testing governance framework. Establish testing standards, tools, processes and quality controls. Define test entry and exit criteria ...