251 to 275 of 375 GRC Jobs in the UK

critical role in ensuring Drax meets its technology and security compliance obligations across a complex and evolving regulatory landscape. Working within our Information Security, Governance, Risk & Compliance function, you'll help shape a robust compliance culture, influence senior stakeholders, and support the delivery of our security strategy. This role represents … energy future for all, and working hard to decarbonise the planet for generations to come. About the role: Reporting to the Head of InfoSec Governance, Risk and Compliance, you’ll act as the central point of contact for Information Systems and Security (IS&S) compliance across the Group. Key accountabilities ...

critical role in ensuring Drax meets its technology and security compliance obligations across a complex and evolving regulatory landscape. Working within our Information Security, Governance, Risk & Compliance function, you'll help shape a robust compliance culture, influence senior stakeholders, and support the delivery of our security strategy. This role represents … energy future for all, and working hard to decarbonise the planet for generations to come. About the role: Reporting to the Head of InfoSec Governance, Risk and Compliance, you’ll act as the central point of contact for Information Systems and Security (IS&S) compliance across the Group. Key accountabilities ...

critical role in ensuring Drax meets its technology and security compliance obligations across a complex and evolving regulatory landscape. Working within our Information Security, Governance, Risk & Compliance function, you'll help shape a robust compliance culture, influence senior stakeholders, and support the delivery of our security strategy. This role represents … energy future for all, and working hard to decarbonise the planet for generations to come. About the role: Reporting to the Head of InfoSec Governance, Risk and Compliance, you’ll act as the central point of contact for Information Systems and Security (IS&S) compliance across the Group. Key accountabilities ...

critical role in ensuring Drax meets its technology and security compliance obligations across a complex and evolving regulatory landscape. Working within our Information Security, Governance, Risk & Compliance function, you'll help shape a robust compliance culture, influence senior stakeholders, and support the delivery of our security strategy. This role represents … energy future for all, and working hard to decarbonise the planet for generations to come. About the role: Reporting to the Head of InfoSec Governance, Risk and Compliance, you’ll act as the central point of contact for Information Systems and Security (IS&S) compliance across the Group. Key accountabilities ...

critical role in ensuring Drax meets its technology and security compliance obligations across a complex and evolving regulatory landscape. Working within our Information Security, Governance, Risk & Compliance function, you'll help shape a robust compliance culture, influence senior stakeholders, and support the delivery of our security strategy. This role represents … energy future for all, and working hard to decarbonise the planet for generations to come. About the role: Reporting to the Head of InfoSec Governance, Risk and Compliance, you’ll act as the central point of contact for Information Systems and Security (IS&S) compliance across the Group. Key accountabilities ...

critical role in ensuring Drax meets its technology and security compliance obligations across a complex and evolving regulatory landscape. Working within our Information Security, Governance, Risk & Compliance function, you'll help shape a robust compliance culture, influence senior stakeholders, and support the delivery of our security strategy. This role represents … energy future for all, and working hard to decarbonise the planet for generations to come. About the role: Reporting to the Head of InfoSec Governance, Risk and Compliance, you’ll act as the central point of contact for Information Systems and Security (IS&S) compliance across the Group. Key accountabilities ...

critical role in ensuring Drax meets its technology and security compliance obligations across a complex and evolving regulatory landscape. Working within our Information Security, Governance, Risk & Compliance function, you'll help shape a robust compliance culture, influence senior stakeholders, and support the delivery of our security strategy. This role represents … energy future for all, and working hard to decarbonise the planet for generations to come. About the role: Reporting to the Head of InfoSec Governance, Risk and Compliance, you’ll act as the central point of contact for Information Systems and Security (IS&S) compliance across the Group. Key accountabilities ...

Overview Lead cyber governance, risk and compliance engagements Engage with clients to understand their wider threat landscape and business context Design, review and advise on the implementation and adoption of information security policies Lead cyber and third-party risk assessments Identify control gaps, document findings, and track remediation activities Produce … compliance reports for executive and C-suite stakeholders Contribute to thought leadership and continuous improvement Requirements Extensive experience of designing, leading and delivering cyber governance, risk and assurance outcomes Strong knowledge of recognised cyber security frameworks and standards Experience in applying UK Government security and assurance frameworks Confident communicator able ...

intelligent analytics solution that provides a simple and engaging experience for customers and delivers valuable insights across the Riskonnect platform. The Senior Product Manager, GRC Analytics is primarily responsible for designing requirements and outputs — datasets, reports, and dashboards — for Riskonnect’s GRC solutions, built on our Power BI and Microsoft … and Microsoft Fabric environment. Identify opportunities to apply AI and machine learning — such as natural language querying, automated insights, or predictive analytics — within the GRC analytics experience. Assist in the upskilling of the Custom Reporting team in requirements design and data visualization best practice. Contribute to mapping relationships between ...

based cyber threats. We're looking for an engineering-first security leader who still enjoys getting into the technical detail. This isn't a governance, compliance or traditional security management position. Instead, you'll work directly alongside the CTO, helping shape Product Security across the organisation whilst remaining technically credible … cloud-native product experience. Modern DevSecOps, cloud security and security automation experience. This Role Probably Isn't For You If... Your background is primarily Governance, Risk & Compliance (GRC), audit or ISO27001. You've moved away from hands-on technical work. Your experience is predominantly SOC, Detection Engineering or Vulnerability Management. ...

based cyber threats. We're looking for an engineering-first security leader who still enjoys getting into the technical detail. This isn't a governance, compliance or traditional security management position. Instead, you'll work directly alongside the CTO, helping shape Product Security across the organisation whilst remaining technically credible … cloud-native product experience. Modern DevSecOps, cloud security and security automation experience. This Role Probably Isn't For You If... Your background is primarily Governance, Risk & Compliance (GRC), audit or ISO27001. You've moved away from hands-on technical work. Your experience is predominantly SOC, Detection Engineering or Vulnerability Management. ...

clients through compliance and certification programmes Conduct readiness assessments and identify gaps in controls, policies and documentation Review risk registers, Statements of Applicability and governance documentation Support clients through audit preparation, certification and ongoing compliance activities Coordinate activities with external audit partners and manage audit-related communications Develop guidance materials … enhance platform functionality and framework alignment Keep up to date with evolving standards, regulations and industry best practices The Person With experience within Compliance, GRC, Audit, Risk or Information Security, you will be comfortable working with a range of stakeholders and possess: Experience working with frameworks such ...

Chief Technology & Transformation Officer, with a dotted line to the Board and Audit Committee, this is a pivotal executive leadership role responsible for security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI‐DSS obligations … customers, supporting business growth, and embedding security across the organisation. What you'll do Define and lead the Group's security strategy, policies, and governance framework Provide Board-level reporting on security posture, risks, and compliance activities Oversee security operations, including threat detection, incident response, and remediation ...

testing programs, promoting more efficient, data‐driven, and automated testing approaches Evaluate control effectiveness using quantitative insights, trend data, and scenario‐based analysis Ensure governance, risk, and control (GRC) data is accurate, current, and optimized for analytics and AI use cases Align risk and control processes into … responsibilities to mitigate, monitor, and elevate risks appropriately, including the timely resolution of incidents. Governance, Training & Digital Enablement Deliver risk and control training with a focus on data literacy, digital tools, and AI‐enabled risk management practices Partner with enterprise GRC and transformation programs to advance technology-enabled risk capabilities ...

suited to someone from an engineering, cloud security or AI security background who understands how AI solutions are built, deployed and secured in practice. Governance knowledge is useful, but this is not a GRC or audit-focused position. Key Requirements Strong AI Security, Cloud Security or Security Architecture background. Hands ...

owns that program, its scope, and its direction. You are the engineer who makes it work in practice: implementing and evidencing controls, keeping the GRC platform accurate, preparing what auditors and customers ask for, and chasing the details that decide whether an audit goes well. This is a compliance role … control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline. Operate our GRC platform (Vanta) day to day: configure and maintain integrations, monitor automated control checks, and resolve drift and failing controls. Collect, organize, and quality-check evidence ...

working approximately 20 hours per week, supporting a Europe-wide programme. The successful candidate will have a strong background in ISO implementation, information security, GRC, technology risk or cyber security, with practical experience advising organisations on ISO requirements and supporting them through certification or audit readiness. The role will combine … documentation. Provide practical advice and guidance to stakeholders on ISO requirements and best practice. Track programme actions, risks, issues, dependencies and key milestones. Support governance, reporting and stakeholder communications across the programme. Help ensure the organisation is appropriately prepared for upcoming certification and audit activity. Experience: Strong commercial experience within ...

working approximately 20 hours per week, supporting a Europe-wide programme. The successful candidate will have a strong background in ISO implementation, information security, GRC, technology risk or cyber security, with practical experience advising organisations on ISO requirements and supporting them through certification or audit readiness. The role will combine … documentation. Provide practical advice and guidance to stakeholders on ISO requirements and best practice. Track programme actions, risks, issues, dependencies and key milestones. Support governance, reporting and stakeholder communications across the programme. Help ensure the organisation is appropriately prepared for upcoming certification and audit activity. Experience: Strong commercial experience within ...

principles across projects and programmes Tracking and reporting on security delivery metrics, risks, and maturity to senior stakeholders Collaborating with Security Architecture, Engineering, and GRC teams to ensure alignment and cohesion across all security disciplines Supporting governance processes, including risk management, exception handling, and assurance activities What We’re Looking ...

sided marketplace of consumers, merchants, Dashers, and partners. Security, privacy, and compliance are foundational to earning and maintaining trust as we expand globally. The Governance, Risk, and Compliance team partners across Security, Engineering, Legal, Privacy, Product, IT, Procurement, Internal Audit, and business teams to help DoorDash understand its compliance obligations … control mapping and harmonisation across frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS, GDPR, UK GDPR, NIS2, DORA, and emerging AI governance requirements. Promote a risk-based, pragmatic compliance culture that enables DoorDash teams to move quickly while protecting customers, partners, employees and the business. Requirements ...

Business Support Manager in our Business Support Team to provide operational leadership to Bromley Y, ensuring the organisation has effective systems, processes, resources and governance arrangements to deliver safe, compliant and high-quality services for children and young people. Main duties of the job To lead and develop the Business … finance and budgeting, recruitment and onboarding, executive/Board administration, internal communications, and the coordination of meetings, rooms and events. Ensuring strong governance, risk management and compliance arrangements, including Data Protection Officer responsibilities (UK GDPR), oversight of DBS processes, supplier and contract management, administration of core systems and technology and ...

stakeholders Cybersecurity project and product teams, application owners, engineering and delivery teams, Control Owners, Cyber Management teams, central control functions, audit partners, and wider governance, risk and compliance stakeholders. Accountabilities Define and embed good practice: define what \"good compliance\" looks like for SDLC and DEPL Controls; coach teams on best … assurance activities. Risk identification and escalation: Assess, document and communicate control weaknesses, compliance issues and delivery risks to Cyber Management, Control Owners and central governance/control teams, ensuring appropriate escalation, tracking and mitigation actions are maintained. Data analysis and control reporting: Extract, transform, analyse and report compliance and operational ...

observability capabilities that provide meaningful visibility across systems, infrastructure and applications Developing automated control monitoring, evidence collection and continuous testing solutions that strengthen security governance Partnering with engineering, data and technology teams to embed effective security controls into products and platforms Driving improvements in security event monitoring, exposure management and … reporting that support informed decision-making Supporting the evolution of security policies, standards and technical guardrails through automation and measurable outcomes Contributing to access governance and security control assurance activities across both human and non-human identities Acting as a technical leader and trusted security advisor, helping raise standards across ...

highly strategic, customer-facing role. The focus is on helping large enterprise customers modernise their application security programmes , secure software delivery pipelines, and strengthen governance, risk, and compliance across complex software environments. This is an excellent opportunity for a senior security architecture specialist with a background across areas such … . The successful candidate will operate as a trusted advisor to both technical and executive stakeholders, bridging the gap between software development, security operations, governance, and enterprise risk management . Key Requirements You will be a senior Application Security, DevSecOps, or Software Supply Chain Security specialist with strong experience working ...

Recruitment is seeking a Senior GRC Analyst to evolve governance, risk and compliance from periodic assessment to continuous assurance influencing business and technology decisions. You will assess risk across technology estates, translate findings into actionable risk positions for leadership, and work across CIS Controls, ISO 27001 and SOC 2 with ...