51 to 75 of 598 GRC Jobs in the UK

Title - Lead Specialist, Security Engineer - Digital Risk & Governance Description Help Marketing & Communications manage technology, cybersecurity, privacy and digital risk through practical governance that enables responsible innovation. Also known in the market as: Security Engineer; Product Security Engineer; Business Information Security Officer; Technology Risk & Governance Lead. About the Role Pearson … ownership, certifications, reviews, evidence and audit readiness. Advise teams early when evaluating new technology and help them navigate required governance and approvals. Coordinate risk and compliance considerations across the technology lifecycle, from introduction and renewal through ownership change and retirement. Partner with Cybersecurity, Privacy, Legal, OCTO, Procurement, application owners and ...

Security Type: Permanent Location: Remote, UK-based Salary: £50-60K We’re seeking a GRC Analyst to strengthen pour client’s governance, risk and compliance capability. The organisation is committed to maintaining robust security standards and regulatory compliance across its operations. This is a fully remote role offering real … diverse environment. The Role As a Cyber Security GRC Analyst, you will support and enhance the organisation’s security governance framework, risk management processes, and compliance activities. Working closely with IT, security and business stakeholders, you’ll help identify and mitigate risk, maintain compliance with key regulatory requirements (including ...

established global technology company with a strong base in Edinburgh. This is a senior role within the Information Security team, focused on governance, risk and compliance, with responsibility for helping shape and continually improve the organisation’s security framework across a global environment. You’ll take ownership of key GRC … addressed. There is an evolving focus on AI governance too. As the business continues to adopt AI technologies, you’ll help establish the security and risk framework around their use, including acceptable‐use guidance, risk assessments and appropriate controls for new AI tools and services. You’ll also have ...

good. Your impact Artificial Intelligence is transforming how organisations operate, but delivering value from AI requires more than technology alone. It requires the right governance, controls and confidence to ensure AI is deployed responsibly, safely and effectively.As a Consultant within Jacobs' newly established AI Advisory team, you'll help clients … navigate that challenge. You'll support organisations across multiple sectors as they develop the governance, risk management and responsible AI capabilities needed to adopt AI with confidence.This is a unique opportunity to join a growing team at an early stage of its development, helping shape a new capability while working ...

Requisition ID 3563 -Posted 07/16/2026 - Professional Services - Country (1) - City (1) MetricStream is the global market leader for Integrated Governance, Risk, and Compliance (GRC) solutions delivered on an intelligent integrated platform. MetricStream’s purpose-built platform is proven with over a million global users, designed … serve GRC use cases across industries and powered by deep domain expertise, embedded content, rich context, integrated data, and explainable AI. Since 2001, MetricStream has empowered organizations to intuitively harness front-line intelligence that enables all stakeholders to make real-time risk-aware business decisions. Job Description Business Analyst – MetricStream ...

GRC Manager is responsible for the overall execution of Trayport's Information Security Governance, Risk and Compliance programme under the guidance of the Head of Information Security. The role will primarily entail managing policies & standards incl. Training & Awareness deliverables, performing risk assessments, tracking of security risks of the Information Security … Office and organisation as well as maintaining and managing the ISO27001 certification and ensuring there is appropriate governance & reporting on outputs and risk posture to stakeholder groups. Primary Responsibilities Execute the UK and EU GRC Strategy, ensuring compliance with GDPR, UK Data Protection Act 2018, and other regional privacy laws. ...

work every day to make that a reality. Join us and help shape the future of home improvement. This role will lead cyber security governance and reporting, creating a clear and trusted view of security risk, compliance, control effectiveness and strategic performance. You’ll strengthen executive oversight, turn complex information … your base location being either Southampton or Paddington in the UK or Krakow in Poland. What's the job? Define and maintain the Security Governance Framework, with clear decision-making structures and appropriate executive oversight. Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee. ...

work every day to make that a reality. Join us and help shape the future of home improvement. This role will lead cyber security governance and reporting, creating a clear and trusted view of security risk, compliance, control effectiveness and strategic performance. You’ll strengthen executive oversight, turn complex information … your base location being either Southampton or Paddington in the UK or Krakow in Poland. What's the job? Define and maintain the Security Governance Framework, with clear decision-making structures and appropriate executive oversight. Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee. ...

assessments from initial scoping to final risk rating in a timely manner. [ Due Diligence & Questionnaires: Administer, review, and score security questionnaires, vendor self-assessments, and risk artifacts. Evidence & Contract Review: Inspect security documentation (e.g., SOC 2 reports, policies, technical whitepapers) and review security/data protection clauses in third-party … external stakeholders, and support risk treatment or waiver workflows. Required Skills & Qualifications Experience: 2 4+ years of experience in Information Security, GRC (Governance, Risk, and Compliance), or Third-Party Risk Management (TPRM). Framework Knowledge: Solid working knowledge of ISO 27001 (mandatory validation experience) alongside familiarity with frameworks like NIST ...

assessments from initial scoping to final risk rating in a timely manner. [ Due Diligence & Questionnaires: Administer, review, and score security questionnaires, vendor self-assessments, and risk artifacts. Evidence & Contract Review: Inspect security documentation (e.g., SOC 2 reports, policies, technical whitepapers) and review security/data protection clauses in third-party … external stakeholders, and support risk treatment or waiver workflows. Required Skills & Qualifications Experience: 2–4+ years of experience in Information Security, GRC (Governance, Risk, and Compliance), or Third-Party Risk Management (TPRM). Framework Knowledge: Solid working knowledge of ISO 27001 (mandatory validation experience) alongside familiarity with frameworks like NIST ...

Information Security Risk and Compliance Analyst LET’S CUT STRAIGHT TO IT At Severn Trent, our people are at the heart of everything we do.We’rein the top 5% of utility companies worldwide for employee engagement, andwe’reequally proud of our strong Glassdoor score — reflecting how much our peopleloveworking here. … business, its people, and customers from these daily threats, and we have an opportunity for you to join us as anInformation Security Risk and Compliance Analyst. Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting on our information security compliance and ...

data governance, and energy sector regulations Lead and support internal and external audit activities, including evidence collection and remediation tracking Maintain enterprise risk registers and compliance reporting Continuously monitor global cyber and data regulatory changes Assess impact of regulatory developments and update internal policies, standards, and procedures accordingly Ensure compliance … operational (OT) environments Measure effectiveness and drive continuous improvement in user behaviour Governance & Advisory Act as subject matter expert and advisor on security, governance, and compliance matters Administer and support third-party/vendor risk management programme Provide reporting and insights to leadership on security posture, regulatory changes, and risk ...

Travel (Twice a Month) | Up to £75,000 My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team. This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play … NIST CSF and IASME Governance. Conduct internal audits and provide recommendations for improvement. Support clients with information security governance, risk and compliance activities. Manage third-party risk assessments and vendor security reviews. Deliver security awareness training and engage with stakeholders at all levels. Support the sales team with scoping client ...

sharing Establishing and maintaining enterprise security governance structures, roles, and accountability Serving as a trusted advisor to business and technology stakeholders on governance, risk, and compliance matters Driving identification, escalation, and resolution of cybersecurity GRC risks and issues Supporting and maintain cybersecurity compliance certifications and initiatives (e.g., ISO, PCI, HIPAA … measuring phishing simulations and campaigns, using results to drive targeted follow-up training and reduce human risk Qualifications Extensive experience in cybersecurity governance, risk, and compliance programs Proven experience developing and managing security policies, standards, processes, and controls Experience building or maturing enterprise data governance and data protection programs Working ...

architecture decisions for AICT implementations, ensuring alignment with customer platform strategy and existing investments Manage technical stakeholder relationships including platform owners, ServiceNow administrators, GRC and compliance leads, and Office of the CSO/CDO to ensure successful AICT adoption Partner with AI Strategists and AI&P colleagues to deliver integrated … obtaining ServiceNow platform certifications (e.g. CSA, CAD) within first year Preferred: Hands-on experience implementing ServiceNow AI Control Tower, GRC, or related governance and risk applications Familiarity with enterprise AI/ML platforms, such as Azure AI, AWS, or Google Cloud, and how organizations deploy AI at scale Experience supporting ...

seeking a senior, enterprise-level technology leader to partner with the Legal and Compliance leadership teams and lead AI and technology-driven transformation of how AstraZeneca protects, governs and advises the business at global scale and in a highly regulated environment. This role sits at the intersection of legal and … Chief Compliance Officer organisation, shaping how AI, agents, data and modern platforms transform legal operations, contract and matter management, e‐discovery, governance, risk and compliance, and ethics and assurance. This is not a traditional IT delivery role. It is a business‐embedded, outcome‐led leadership position for someone ...

seeking a Cyber Governance, Risk and Compliance Manager to lead the organisation's cyber governance, risk management and regulatory compliance efforts. The role bridges business leadership, technology, risk, internal audit and regulators, driving automation and data-driven security practices aligned with the MFS UK Cyber Strategy. You will deliver governance … policy controls and risk reporting across committees. #J-18808-Ljbffr ...

and time-critical projects across multiple sectors, including Aerospace, Defence, Critical National Infrastructure (CNI). Due to continued growth, we have opportunities in our Governance, Risk & Compliance (GRC), Security Architecture, Threat & Vulnerability, and Operational Technology (OT) teams. Our role as a trusted adviser allows us to offer rewarding careers … Provide strategic leadership and oversight for multiple complex OT cyber security projects. Ensure that each engagement aligns with the client’s business objectives and risk appetite, while delivering solutions that protect mission-critical systems and maximise operational resilience. Act as the engagement lead, managing client relationships and guiding internal teams ...

consulting team. This role is suited to someone with relevant early-career experience who is looking to develop their career in cyber security advisory, governance, risk and assurance within a supportive professional services environment. You will work alongside experienced cyber security specialists to help clients understand their cyber risks, assess … professional client-facing materials. Qualifications And Understanding 1-2 years of relevant experience in cyber security, information security, technology risk, IT audit, governance, risk and compliance, or a related advisory or assurance role. Awareness of recognised cyber security and information security frameworks, such as NIST CSF, ISO 27001, Cyber Essentials ...

effectiveness of cyber security controls, identifying areas of non-compliance, monitoring risk exposure and providing clear, evidence-based assurance reporting to senior leadership and governance committees. Working closely with first-line Cyber Security, IT, OT, Risk and Compliance teams, the postholder will provide independent scrutiny of cyber security arrangements, ensuring … control weaknesses, assurance gaps, emerging threats and areas of heightened cyber risk. Review and challenge first-line risk assessments, control self-assessments, remediation plans and risk acceptance decisions. Maintain oversight of cyber risk exposure, ensuring material issues are appropriately escalated through established governance channels. Cyber Assurance Reporting & Governance - Own and ...

Renault Group seeks a Cyber Governance, Risk & Compliance Manager to establish and continuously improve the organisation's cyber governance, risk, and compliance capabilities. You will bridge business leadership, technology, risk, and regulators, ensuring security supports objectives and regulatory requirements. Lead adoption of automation, data-driven security, and reporting to strengthen … risk management; contribute to the UK and corporate governance programs and strategy. #J-18808-Ljbffr ...

and verbal communication, and executive presence. Ability tooperateautonomously, prioritize effectively, and influence cross-functional stakeholders in a fast-paced environment. Preferred Experience Experience in GRC, governance, risk, compliance, legal technology, cybersecurity, or enterprise SaaS . Experience with product-led growth (PLG) , self-service, digital acquisition, or usage/adoption-driven … automation, analytics, or other emerging technologies. Experience with pricing, packaging, monetization, and product-market fit initiatives. About Us Diligent is the AI leader in governance, risk and compliance (GRC) SaaS solutions, helping more than 1 million users and 700,000 board members to clarify risk and elevate governance. The Diligent ...

requirements where these are necessary to meet UK Government or contractual security obligations. DXC Technology is expanding its Security Programme to further embed cyber compliance, risk management, resilience and regulatory readiness into business operations. We are seeking a Senior Manager to serve as a Business Information Security Officer (BISO), aligned … access management, incident response, security architecture and operational resilience. Strong understanding of cyber risk governance, regulatory expectations, audit engagement, issue management, and governance, risk and compliance tools and platforms. Demonstrated experience with security programme maturity models, control frameworks including NIST, ISO 27001 and CIS Controls, and metrics-driven security management. ...

sets. Alongside these responsibilities, the Information Assurance Analysts will help to: Advise and drives technical security best practises through routine and ad-hoc audit and governance activities. Identify areas of noncompliance and risk, ultimately supporting the development of appropriate remediation plans and activities. Drive security improvements and uplift across … continually improving its information security and assurance posture. Working as part of the wider Cyber Security team, the role will provide security assurance, risk and compliance support across technology services, systems, applications and business processes. Plan, coordinate and conduct security assessments and assurance reviews across the organisation's infrastructure, applications ...

venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. Security Engineer, Governance, Risk & Compliance (EMEA) The role: GRC work is at its best when it makes security clearer, more consistent, and easier to operate. As a Security … Engineer focused on Governance, Risk & Compliance, you’ll help maintain and improve Chainguard’s compliance and risk programs while building the experience and judgment to take on broader ownership over time. You’ll work closely with experienced security and GRC partners to support SOC 2 Type II and ...