451 to 475 of 598 GRC Jobs in the UK

London office 3 days a week (Tuesday, Wednesday and Thursday)• Have 5+ years of customer-facing, technical experience as a solutions engineer, sales engineer, GRC consultant, or equivalent customer-facing role, including previous B2B SaaS experienceJob Type: Full-timeWork Mode: RemoteApply directly on the Vanta careers page using the Apply ...

What the Role Entails The position sits within the GRC team. Its core objective is to bring in an expert with mature GaaS product experience to provide systematic methodologies and project enablement in long-term live product content planning, economy systems, monetization strategy, and lifecycle management. Responsibilities Market Research & GaaS ...

and oversight across the SecEng team, platforms, internal and external partners, ensuring high quality operations while driving continuous maturity aligned to the firm’s risk posture, business needs and evolving threat landscape. This includes: Security architecture and engineering Define and maintain the enterprise security architecture and reference designs Lead secure … cloud environments Partner with development teams to embed security in the software and automation delivery lifecycle (DevSecOps: integrating security into development and deployment pipelines) Governance alignment Map technical controls to the firm’s information security management system (ISMS) and relevant frameworks such as ISO 27001 [ Provide engineering evidence for audits ...

Access Request Management (ARM) Emergency Access Management (EAM/Firefighter) Business Role Management (BRM) Maintain SoD rule sets , mitigating controls, and workflows Support audit and compliance requirements (SOX, GDPR, internal audits) Coordinate with auditors and compliance teams Configure GRC for SuccessFactors and ARIBA systems SAP BTP Security Configure BTP security … cloud IAM Strong knowledge of authorization objects, roles, profiles Familiarity with SAP Basis and integration concepts Functional & Compliance Knowledge Understanding of SoD, audit controls, and compliance frameworks Experience working with internal/external auditors Ability to translate business requirements into secure role designs Experience in SAP BDC, Datasphere, SAP Analytics ...

/4 HANA projects. Key responsibilities Will be responsible for creating business blueprint and design documents in consultation with business for Security and GRC activities Coordinating with various teams and leading the smooth implementation of Security and GRC tasks and should have foresight to predict dependency on other teams. Should … methodology (i.e. developments progressed gradually often without functional specification). Experience of assisting clients in the implementation, configuration, and support of SAP S&A & GRC Functionality. Experience in User and Role administration in SAP NetWeaver, BW, BPC & EWM. Ability to multitask and manage multiple deliverables and projects at the same ...

Jobsoid Inc. is seeking an Information Security & Governance Lead to establish and maintain the organisation's security framework and governance capabilities in the London area. This hands-on role requires translating security requirements into practical controls and evidence, with close collaboration with internal teams and external providers. The successful candidate … will drive risk assessments, oversee vulnerability management, and coordinate audits to ensure FCA, UK GDPR and Consumer Duty #J-18808-Ljbffr ...

security tooling and platform using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore — automating security workflows and increasing coverage at scale. Compliance & Governance – Perform compliance analysis against regulations such as GDPR, GLI and PCI DS, identify security requirements, and implement controls aligned to regulatory standards on client projects. … Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps to executive stakeholders, effectively managing expectations and aligning risk mitigation strategies with business priorities. Internal Security & Best Practices – Contribute to the enhancement of security best practices throughout Createfuture, actively engaging via the Security Council to drive internal security standards and ...

security tooling and platform using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore — automating security workflows and increasing coverage at scale. Compliance & Governance – Perform compliance analysis against regulations such as GDPR, GLI and PCI DS, identify security requirements, and implement controls aligned to regulatory standards on client projects. … Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps to executive stakeholders, effectively managing expectations and aligning risk mitigation strategies with business priorities. Internal Security & Best Practices – Contribute to the enhancement of security best practices throughout Createfuture, actively engaging via the Security Council to drive internal security standards and ...

security tooling and platform using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore — automating security workflows and increasing coverage at scale. Compliance & Governance – Perform compliance analysis against regulations such as GDPR, GLI and PCI DS, identify security requirements, and implement controls aligned to regulatory standards on client projects. … Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps to executive stakeholders, effectively managing expectations and aligning risk mitigation strategies with business priorities. Internal Security & Best Practices – Contribute to the enhancement of security best practices throughout Createfuture, actively engaging via the Security Council to drive internal security standards and ...

security tooling and platform using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore — automating security workflows and increasing coverage at scale. Compliance & Governance – Perform compliance analysis against regulations such as GDPR, GLI and PCI DS, identify security requirements, and implement controls aligned to regulatory standards on client projects. … Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps to executive stakeholders, effectively managing expectations and aligning risk mitigation strategies with business priorities. Internal Security & Best Practices – Contribute to the enhancement of security best practices throughout Createfuture, actively engaging via the Security Council to drive internal security standards and ...

impact on Nominet’s critical services. You will own day-to-day vulnerability triage and exposure tracking, working closely with Security Operations, Technology, Engineering, GRC, suppliers and managed security partners to turn complex technical data into clear action, evidence and reporting. You will need to challenge unclear or incomplete evidence … simplify complexity, and keep remediation moving, ensuring attention stays focused on exposures that create genuine risk to resilience, customer trust and business outcomes. What You'll Be Doing:Own vulnerability triage and exposure tracking, ensuring material weaknesses are assessed, prioritised and driven through to closure. Monitor vulnerability data, threat intelligence ...

and continuously evolve a structured portfolio of identity services — including identity strategy and maturity assessments, IAM architecture and design, Privileged Access Management (PAM), Identity Governance and Administration (IGA), and Zero Trust identity architectures — tailored to the needs of CNI and regulated sectors. Ensure services are built to withstand the scrutiny … practice to build a bench of credentialed identity talent. Client & Business Development Act as a trusted advisor to CNI clients on identity strategy, risk, and roadmap, building long‐term relationships at senior stakeholder level. Support pre‐sales activity, including scoping, proposal writing, and bid support, translating client challenges into compelling ...

within a collaborative security team, you will play a key role in strengthening security controls across Azure, endpoint, identity and network environments , reducing cyber risk through effective protection, monitoring, remediation and automation. This is an excellent opportunity for a security professional looking to work across modern cloud technologies, security tooling … Zero Trust principles. Key Responsibilities Design, implement and maintain security controls across Microsoft Azure environments. Manage cloud security posture, identifying and remediating vulnerabilities, misconfigurations and compliance issues. Strengthen identity security through Conditional Access, MFA, Privileged Access Management and least-privilege principles . Administer and optimise Microsoft Defender, Defender for Cloud ...

within a collaborative security team, you will play a key role in strengthening security controls across Azure, endpoint, identity and network environments , reducing cyber risk through effective protection, monitoring, remediation and automation. This is an excellent opportunity for a security professional looking to work across modern cloud technologies, security tooling … Zero Trust principles. Key Responsibilities Design, implement and maintain security controls across Microsoft Azure environments. Manage cloud security posture, identifying and remediating vulnerabilities, misconfigurations and compliance issues. Strengthen identity security through Conditional Access, MFA, Privileged Access Management and least-privilege principles . Administer and optimise Microsoft Defender, Defender for Cloud ...

world's money. For everyone, everywhere. More about our mission and what we offer . Job Description In this role as a Risk Manager in Wise’s second line Risk Management Team, you will be a key player in managing the day-to-day operations of Wise's GRC tool. … focused, detail-oriented, and skilled in handling large datasets while working under pressure, this role is an exciting opportunity. What you’ll be doing: GRC Product Owner: You will oversee the daily operations of a module within Wise’s GRC tool, ensuring it is fit for purpose, optimised and streamlined ...

seeking a GRC engineering lead to drive the global GRC technology strategy, architecture, and delivery. You will lead delivery squads across engineering and compliance, advancing AI-driven risk and control capabilities while upholding bp's standards and regulatory obligations. The role requires building and guiding a high-performing team, fostering … continuous improvement, and partnering with regional stakeholders to ensure effective governance across jurisdictions as bp moves some #J-18808-Ljbffr ...

millions of users. Key Responsibilities Compliance Leadership: Lead annual SOC 2 and HIPAA certifications, managing interfaces with external auditors and professional services. Policy & Risk: Define and maintain security policies; embed risk assessment activities within engineering processes and vendor management. Operational Excellence: Partner with control owners to automate evidence gathering and … Core Skills: Deep expertise in SOC 2 and HIPAA frameworks within a Cloud-based SaaS environment. Technical Knowledge: Familiarity with PHI handling, GRC platforms, and compliance automation. Soft Skills: Strong ability to translate complex compliance requirements into clear actions for engineering teams. Preferred: CISA/CISSP certifications; experience with NIST ...

closely with delivery teams to validate assumptions, resource requirements, risks, and dependencies. Support commercial modelling and effort estimation activities. Ensure solutions reflect industry standards, governance requirements, and security considerations. 3. Delivery Assurance & Quality Governance Provide independent assurance on ServiceNow programmes and projects throughout the delivery lifecycle. Review project artefacts, designs … delivery plans, and governance processes to identify delivery risks and improvement opportunities. Ensure adherence to agreed methodologies, platform standards, and implementation best practice. Conduct health checks and assurance reviews for ongoing engagements. Support project mobilisation activities to ensure a seamless transition from sales to delivery. Provide guidance and challenge ...

encryption technologies, network security, Zero Trust, secure interconnection patterns and cyber security principles. Experience within Security Operations, Incident Response, Security Assurance, or GRC functions. Experience managing or overseeing MSSP, SOC activities, third party management. Strong understanding of: ISO 27001, SOC2, NIST Cyber Security Framework, Incident Response methodologies, Cyber Security Governance … Incident Response Lead is responsible for strengthening and maintaining Telehouse's cyber security posture through effective security assurance, incident response coordination, vulnerability management, security governance, and operational security support. Whilst primarily focused on security assurance, governance, and incident response leadership, the successful candidate will possess sufficient technical capability to support ...

Security Officer to lead security controls across the group, with a focus on external stakeholders and compliance. You will work in architecture, IAM, and governance, supported by a security operations and engineering team. The role involves security assessments, risk stewardship, and implementing best practices such as SSO. Candidates with CISSP ...

suite, building trust-based relationships and ensuring seamless execution Conduct cybersecurity strategy assessments, maturity and readiness evaluations, and discovery workshops using industry frameworks and compliance mandates Identify and articulate risks at project, business, and technical levels, delivering proportionate and cost-effective mitigation strategies Design and implement robust cybersecurity solutions tailored … client environments and risk profiles Create high-quality deliverables including threat and risk assessments, security policies, procedures, incorporating industry best practices Stay current on emerging threats, AI-driven security solutions, and regulatory developments, contributing insights to shape client strategies Drive business development by identifying and qualifying new opportunities within existing ...

with a world class leading consulting group in their latest phase of cyber security growth. We are interested in connecting with senior cyber security & risk consultant candidates based in London. Oliver James is partnered with a world class leading consulting group in their latest phase of cyber security growth. … interested in connecting with senior cyber security & risk consultant candidates based in London. This grade pays up to £60,000 basic salary plus bonuses, pension, broad benefits, professional membership costs, training & development and more. In addition, our client offers a clear and defined path career progression where employees have complete ...

wider health system to be cyber resilient, supporting Transformation Directorate's purpose of delivering the best care and outcomes for the NHS. The GRC team, within the CISO Function, plays a critical role by establishing strong governance frameworks, maintaining clear and usable security policies and standards, delivering robust cyber risk … activities. The team ensures decision makers have clear, evidence based views of security posture and maturity. As a Cyber Security Advisor in our Security GRC team, you'll play a key role in protecting what matters most, enabling the organisation to operate securely, confidently, and compliantly in an increasingly complex ...

eventually throw at us)Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirementsDeploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelinesCollaborate with cross-functional teams to integrate security … optimizationKnowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plusExperience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflowsStrong interpersonal skills, as this position will require communication with peers, stakeholders, auditors ...

Manager and other security team members, this role will touch on IAM, SIEM, EDR and vulnerability management tool tweaking, integrating security into project lifecycles, GRC certifications, 3rd party risk and assurance and more. I'm looking for candidates with a self-driven, go-getter personality who are keen to progress … SDLC security Performing vulnerability scanning and remediation Working with the organisation's managed service provider and helping to manage alerts coming through Working with governance colleagues on the Cyber Essentials certification Helping the organisation with 3rd party risk management and assurance What I'm looking for: Experience in a cybersecurity ...