26 to 50 of 598 GRC Jobs in the UK

annual bonus + excellent benefits Contract: Permanent Help protect critical services through effective cyber security governance Are you passionate about cyber security, data governance and compliance? Do you enjoy translating complex security requirements into practical controls that make a real difference? We're looking for an experienced Cyber Security GRC … growing Cyber Security team. In this role, you'll play a key part in strengthening our cyber security posture through governance, risk management and compliance activities, while helping to ensure our information assets remain protected. A significant focus of the role will be the administration and continual improvement of Microsoft ...

DORA and EBA guidance. Familiarity with risk and control frameworks such as NIST, ISO 27001, and COBIT. Proven ability to produce executive management information and risk reporting. Exceptional communication, stakeholder management, and organisational skills. An evidence-led approach, with the ability to influence without direct authority. ### Why Join This … robust governance while enhancing their career in a rapidly evolving sector. If you are a strategic thinker with a passion for Cyber Governance, Risk, and Compliance, this is the opportunity for you! Interested candidates are encouraged to apply now and take the next step in their professional journey with ...

DORA and EBA guidance. Familiarity with risk and control frameworks such as NIST, ISO 27001, and COBIT. Proven ability to produce executive management information and risk reporting. Exceptional communication, stakeholder management, and organisational skills. An evidence-led approach, with the ability to influence without direct authority. ### Why Join This … robust governance while enhancing their career in a rapidly evolving sector. If you are a strategic thinker with a passion for Cyber Governance, Risk, and Compliance, this is the opportunity for you! Interested candidates are encouraged to apply now and take the next step in their professional journey with ...

need to thrive – in our offices or yours. Job Summary This role represents a unique opportunity to enhance and mature SHI’s enterprise risk and compliance framework within a fast-growing, global technology solutions business. As part of SHI’s Global Compliance program, the Director of Risk Management will help … needed to embed integrity, accountability, and transparency across the business. Reporting into Business Assurance (GRC) this leader will shape and execute the enterprise risk and compliance agenda, translating risk into clear, decision-ready insights and helping the organization move from fragmented practices to a cohesive, scalable, and practical function. ...

Global GRC team and Digital Compliance leadership team you will have responsibility for leading bp's global GRC engineering teams and compliance management services portfolio. You will own the Global GRC technology, AI and data strategies, lead operational teams and oversee delivery squads to drive bp's GRC capabilities. … Digital Governance Risk and Compliance organization fosters a culture of transparency, accountability, and trust by promoting good governance, effective risk management, and regulatory compliance. These capabilities help bp balance security with usability, optimize technology investments, and enable bp's business to meet its compliance obligations in all jurisdictions in which ...

Governance, Risk and Assurance Consultant Job Info Job Identification 22223 Posting Date 11/03/2026, 05:11 PM Job Role Risk and Compliance-Finance Risk & Audit Experience (In Years) 6-9 Job Description EXL (NASDAQ: EXLS) is a global data and artificial intelligence ("AI") company that offers services … headquartered in New York and have more than 60,000 employees spanning six continents. For more information, visit www.exlservice.com . Role Title: AI Governance, Risk & Assurance Consultant Location: London, United Kingdom (Hybrid working 4 days a week in the office) Employment Type: Permanent Summary of the role: EXL's FRAC ...

Company RCI FS Ltd UK Job Description The Cyber Governance, Risk & Compliance (GRC) Manager is responsible for establishing, maintaining and continuously improving the organisation's cyber governance, risk management and compliance capabilities. The position acts as a key bridge between business leadership, technology teams, risk functions, internal audit and regulators … compliance with legal, regulatory and contractual requirements. The role also leads the adoption of automation and data-driven security practices to enhance efficiency, reporting and risk management effectiveness. This aligns with security objectives identified within the MFS UK Cyber Strategy. Responsibilities Own and maintain the Cyber Security Governance Framework. Develop ...

take ownership of key governance activities and make a meaningful impact across a large-scale organisation. Reporting directly to the Cyber Governance, Risk & Compliance (GRC) Manager, you'll play a key role in ensuring that information assets are appropriately identified, classified, retained, protected and managed in line with internal policies … reports, management information and recommendations for senior stakeholders. Identify opportunities to improve information management processes, controls and operational efficiency. Support wider Cyber Governance, Risk and Compliance initiatives. Skills and Experience Essential Previous experience in an Information Governance, Information Management, Data Governance or related role. Strong understanding of information classification, retention ...

track remediation actions and support cyber risk management. Produce security policies, standards, assessment reports, compliance evidence and executive reporting. Support audits, control reviews, assurance and compliance assessments. Engage stakeholders, facilitate workshops and gather evidence to support security initiatives. Contribute to supplier assurance and third-party risk management. Improve security governance … public sector, regulated or enterprise environments. Knowledge of GovAssure and public sector security requirements. Familiarity with Microsoft Azure and AWS. Experience with GRC platforms and risk management tools. Understanding of Secure by Design and security architecture principles. Certifications One or more of the following would be advantageous: ISO 27001 Lead ...

GRC framework, ensuring compliance with global regulations and industry standards, and maturing the organization's overall cybersecurity posture. Key Job Accountabilities: IT Governance, Risk, and Compliance Program Leadership: Develop and maintain the Cybersecurity GRC framework, policies, standards, and procedures in alignment with regulatory requirements (e.g., ISO 27001, NIST CSF, Cyber … Program roadmap, tracking and reporting on key performance indicators (KPIs) and key risk indicators (KRIs) to executive leadership. Drive continuous improvement in security controls and GRC processes by implementing best practices and automating controls where feasible. Talent Management and Core Values: Responsible to exemplify and hold their team accountable ...

facing role, working with risk, compliance and internal control teams to understand their processes, gather requirements and configure solutions that support their governance, risk and compliance objectives. The successful candidate will combine GRC expertise, consulting skills and technology implementation experience to deliver successful customer outcomes. Key Responsibilities Implementation & Consulting Lead … Risk Management Compliance Management Internal Controls and SOX Risk and Control Assessments Controls Testing Issues and Action Management Third-Party Risk Policy Management Regulatory Compliance Risk Reporting and Monitoring Three Lines Model and Integrated Assurance Professional Services Contribution Collaborate with Sales, Pre-Sales, Product Management and Customer Success teams. Support ...

facing role, working with risk, compliance and internal control teams to understand their processes, gather requirements and configure solutions that support their governance, risk and compliance objectives. The successful candidate will combine GRC expertise, consulting skills and technology implementation experience to deliver successful customer outcomes.Key ResponsibilitiesImplementation & ConsultingLead and support TeamMate … with software configuration and technology-enabled solutions.Willingness to travel as required.DesirableProfessional Services or technology consulting experience.Experience implementing enterprise GRC platforms or comparable governance, risk and compliance solutions.Experience within financial services, regulated industries or multinational organisations.Knowledge of recognised risk, control and compliance frameworks.Experience with integrations, reporting, APIs or system configuration.Familiarity with ...

forward-deployed engineering, we deliver business results for regulated and mission-critical industries where governance, sovereignty and uptime are non-negotiable. The Security Risk and Compliance Management Specialist (Level 5) acts as an advocate in development of overall information security program globally. You will create and perform global IT Risk … and Compliance assessments, and assist in the development and execution of information security, compliance, and risk best practices globally through audits, assessments, and policy-making. We will depend on you to develop systems to control and monitor assets in terms of operational risk, and evaluate alternative means of reducing ...

About the Role Are you early in your IT or cybersecurity career and looking to step into the fast-growing field of Governance, Risk, and Compliance (GRC)? You don’t need prior Governance, Risk and Compliance (GRC) experience to thrive in this role, just a solid grasp of fundamental … team. In this role, you will act as a key liaison between technical and business teams, helping build, maintain, and monitor our IT policies, risk management frameworks, and security compliance standards. Whether your background is in IT Support 1st/2nd line, you hold a relevant degree, or an entry ...

Senior Cyber Security Analyst (Governance, Risk and Compliance) NATS is the UK’s leading air navigation service provider, handling over 2.4 million flights each year. We provide air traffic control services from two control centres and at airports around the UK. We also provide a wide range of commercial products … solutions internationally. Our people are at the heart of our purpose to advance aviation and keep the skies safe. Job Purpose: Our Governance Risk and Compliance Team are looking for a Senior Cyber Security Analyst to play a key role in protecting critical business services through effective cyber risk management. ...

compliance activities while helping shape the organisation's approach to cyber security and AI governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third … party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. ...

Internal Controls and Cyber Security teams to coordinate audits, evidence gathering and remediation activities. Produce meaningful risk dashboards, management information, Key Risk Indicators (KRIs) and governance reporting for senior leadership and risk forums. Collaborate with Technology, Retail Operations, Finance, Procurement, Legal and Supply Chain teams to embed effective risk management … recommend practical improvements. Excellent communication and stakeholder management skills, with the ability to engage technical and non-technical audiences. Experience working with Governance, Risk & Compliance (GRC) platforms such as OneTurst Passionate about strengthening governance, improving controls and enabling secure business growth across a complex global retail organisation. Professional certifications such ...

and legislation relevant to client company information security and assurance. Act as the client company point of contact for information security governance, risk, assurance and compliance matters. Support client company governance forums by providing clear reporting, insight and challenge on key information security risks, audit outcomes, control maturity and remediation … Support the development, review and alignment of client company information security policies, standards, procedures and guidance. Maintain a proportionate client company information security risk and compliance approach, including information security risk assessments, treatment plans, escalation, tracking and a rolling compliance schedule. Review, challenge and track client company control actions, vulnerabilities ...

Premises) ISO 27001 PCI DSS GDPR GovAssure Framework NCSC Cyber Assessment Framework (CAF) Secure by Design Governance, Risk and Compliance (GRC) Risk Assessment and Risk Management Identity and Access Management (IAM) Authentication and Authorisation Cryptography Network Security Security Protocols Security Controls Design Cyber Security Compliance Information Security Strong understanding … Governance, Risk and Compliance (GRC). Comprehensive knowledge of the Confidentiality, Integrity, and Availability (CIA) triad. Ability to design secure enterprise solutions across cloud and hybrid environments. Excellent analytical, problem-solving, and decision-making skills. Strong communication skills with the ability to explain technical concepts to both technical and ...

team You’ll join the Security & IT team, led by the Director of Information Security and IT Operations, which owns information security, IT operations and GRC across Risk Ledger in the UK and US. Risk Ledger helps security and risk teams manage third-party and supply chain risk … Essentials Plus and have achieved SOC 2 Type 1. The team works closely with Engineering, Product, Sales, Customer Success, People and Finance, making security and compliance something that helps the business win and keep customers rather than slowing it down. This role As GRC Lead you'll own Risk Ledger ...

looking for a talented Information Security Manager to join our growing function. In this role, you'll take ownership of key governance, risk and compliance activities, drive security projects across our global business, and work closely with technology and business teams to strengthen our security posture while enabling innovation and … bring: Proven experience in Information Security, Cyber Security, Security Risk Management, or a similar security‐focused role. Strong knowledge of Governance, Risk & Compliance (GRC) frameworks and practices. Hands‐on experience of Third‐Party Risk Management (TPRM). Experience managing and responding to security incidents. Solid technical security understanding across infrastructure ...

looking for a talented Information Security Manager to join our growing function. In this role, you'll take ownership of key governance, risk and compliance activities, drive security projects across our global business, and work closely with technology and business teams to strengthen our security posture while enabling innovation and … required.What you'll bring: Proven experience in Information Security, Cyber Security, Security Risk Management, or a similar security-focused role.Strong knowledge of Governance, Risk & Compliance (GRC) frameworks and practices.Hands-on experience of Third-Party Risk Management (TPRM).Experience managing and responding to security incidents.Solid technical security understanding across infrastructure, cloud ...

Senior Cyber GRC Specialist – Technical Controls London/Hybrid Up to £120,000 Are you an experienced Cyber GRC professional with a genuinely strong understanding of cyber engineering and technical security controls? We’re working with a major global investment management organisation looking for a Senior Cyber GRC Specialist. This … following security incidents * Provide credible cybersecurity guidance to stakeholders across the business ABOUT YOU You’ll need: * Strong professional experience across cybersecurity governance, risk and compliance * A solid technical cybersecurity or cyber engineering background * Deep knowledge of cybersecurity principles and recognised frameworks, including NIST and ISO 27001 * Experience within financial ...

Ensure findings, control gaps and regulatory commitments have clear ownership and are delivered to the required standard.* Lead NewDay’s approach to AI security and governance, establishing practical controls that enable safe and responsible adoption.## What we’re looking forYou will be an established security leader who can combine strategic … FinTech.* Experience operating as a senior deputy to a CISO, or in an equivalent enterprise security leadership position.* Experience across security operations, governance, risk and compliance, architecture, engineering, third-party risk, assurance and operational resilience.* Strong practical knowledge of ISO/IEC 27001, PCI DSS, UK GDPR, the Data Protection ...

AVEVA is creating software trusted by over 90% of leading industrial companies. Job Title: IT Risk - Senior Manager. Location: London or Cambridge. Employment Type: Full-time/Hybrid (50% in office). As a software business, technology risk and cyber/security risk directly impact product availability, customer trust, and … regulatory commitments. The IT Risk Senior Manager is accountable for running a consistent, evidence-based technology risk lifecycle IT, ensuring risks are identified, assessed, treated, monitored, and reported in line with risk appetite. The IT Risk Senior Manager will be responsible for the management of all risks across IT. ...