501 to 525 of 598 GRC Jobs in the UK

protection and identity and access management. Monitoring security alerts, investigating potential threats and coordinating vulnerability remediation. Conducting vulnerability assessments, security configuration reviews and technical risk assessments. Supporting cloud security, network protection, privileged access management and infrastructure hardening. Working with Engineering to embed security into infrastructure, deployment processes and technical operations. … technical troubleshooting. Maintaining technical documentation, IT asset records and security evidence. Supporting backup, recovery, business continuity and disaster recovery activities. Supporting the CISO and GRC team to support technical compliance, security audits and assurance activities, including WebTrust, ETSI and Cyber Essentials Plus. Essential Skills & Experience Demonstrable experience in Security Engineering ...

appropriate resilience is designed into their products and services. Provide subject matter expertise on continuity and resilience considerations for supplier onboarding processes, ensuring appropriate risk management throughout the supply chain. Work with product owners and critical process owners to quantify, document, and report on resilience metrics. Design scenarios and … function by identifying and implementing changes to enhance DR service quality, cost efficiency, and effectiveness. Communicate regularly with stakeholders, including system owners, Head of GRC, and senior management, providing updates on DR performance and other relevant information. Key Skills, Experience and Qualifications: Essential Requirements Experience in Business Continuity and Operational ...

Patching, Asset Management, Certificates, WebApps.* Experienced building & operating AM/VM/PC/PM programs, workflows, key metrics, best practices* Experienced in Cyber-Risk frameworks, Prioritization/Remediation + Scanning/Reporting strategies.* Breadth and depth of knowledge on the cybersecurity general threat landscape and attack techniques* Familiarity and … Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud (certified solutions architect level) #LI-REMOTE ...

design, build and operationalise the ISMS in line with ISO/IEC 27001:2022. Responsibilities include conducting enterprise-wide gap assessments, defining scope and governance, developing risk registers and SoA, and delivering a budgeted implementation roadmap with cross-functional collaboration across Technology, Security, Legal, HR and Procurement. #J-18808-Ljbffr ...

with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation. We pride ourselves on combining technical expertise with a practical, hands‐on approach, helping our clients strengthen resilience, meet … regulatory requirements, and stay ahead in an increasingly digital and risk‐driven landscape. Technical and Domain Experience Conduct cybersecurity maturity and risk assessment and for clients. Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments. Advise clients on cybersecurity strategy, metrics and reporting ...

Plexus Corp. is seeking an entry-level GRC enthusiast in Livingston, UK to kickstart your IT/cybersecurity career. You will help build and monitor IT policies, risk management frameworks and security compliance standards in a fast-growing GRC environment. You’ll work as a liaison between technical and business … teams, gaining hands-on experience across enterprise IT, data governance and manufacturing tech environments. #J-18808-Ljbffr ...

looking for a Customer Trust Specialist to join our London office and help run the customer-facing side of our trust program. Where our GRC team keeps the compliance engine running behind the scenes, you'll be one of the people customers actually interact with, turning our security, privacy, and … governance posture into accurate answers that earn trust. You'll handle security questionnaires end to end, help operate our trust automation platform, and support customer conversations across EMEA and beyond. This is a great fit for someone with solid security-review experience who wants to grow their scope ...

Category: GRC & Compliance## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leave\"...matching, paid time off, and parental leave. Learn more about our benefit...\"Company-wide policy ·* Retirement match\"...gacy Reimbursement coverage), 401(k) matching, paid time … will involve performing security assessments and working with teams to support threat modelling on AWS services. Each change to a service represents a new risk, so this role will ensure changes are adequately assessed and any vulnerabilities addressed. If you have worked with security assurance or compliance in the past ...

leading organisation as they embark on a significant ServiceNow transformation and are looking for an experienced ServiceNow Architect to lead solution design, architecture governance, and platform best practice across multiple workstreams. This is a hands-on architecture role requiring strong technical expertise, stakeholder engagement skills, and a proven track record … operating as a ServiceNow Architect or Lead Developer with proven hands-on ServiceNow experience Experience delivering multiple ServiceNow modules including ITSM, ITOM, HRSD, SecOps, GRC/IRM and SPM . Strong expertise across: ServiceNow scripting (Client & Server-side) Flow Designer IntegrationHub Service Portal/Employee Center Automated Test Framework ...

leading organisation as they embark on a significant ServiceNow transformation and are looking for an experienced ServiceNow Architect to lead solution design, architecture governance, and platform best practice across multiple workstreams. This is a hands-on architecture role requiring strong technical expertise, stakeholder engagement skills, and a proven track record … operating as a ServiceNow Architect or Lead Developer with proven hands-on ServiceNow experience Experience delivering multiple ServiceNow modules including ITSM, ITOM, HRSD, SecOps, GRC/IRM and SPM . Strong expertise across: ServiceNow scripting (Client & Server-side) Flow Designer IntegrationHub Service Portal/Employee Center Automated Test Framework ...

which supports secure developer workflows. Application Security is part of our wider Financial Scale organization, which means you will work closely with Security Operations, GRC, Product Security, Front End Platform, IT Infrastructure teams. We're looking for individuals with a strong background and interest in penetration testing. You should have … teams to build AI capabilities that our customers can trust with their critical financial operations. Responsibilities Identifying vulnerabilities, demonstrating business impact, and articulating the risk of specific vulnerabilities to drive prioritization efforts Perform penetration testing and design reviews, looking for vulnerabilities and insecure designs, work with engineering and product ...

capabilities , including prompt-based, agentic and RAG solutions that deliver reliable, repeatable business value. Establish AI standards and guardrails , embedding Responsible AI, governance, security and compliance principles into AI products,promptsand interaction patterns. Drive AI product quality and performance , defining success measures and overseeing the evaluation of accuracy, bias, explainability … and operational readiness. Collaborate across Product, Data, Engineering, Legal and Governance teams to translate business needs into innovative AI-enabled solutions and ensure successful deployment at scale. BuildorganisationalAI capability and thought leadership , creating reusable frameworks, sharing bestpracticesand helping teamsmaximisethe value of human-AI collaboration Skills and Experience Required Experience delivering ...

Westcoast in Theale (Reading area) seeks a Principal Information Security Officer to lead architecture, governance, IAM and GRC activities within the Westcoast Security Model. You will partner with stakeholders, tech teams and third parties to drive secure development lifecycle processes and regulatory compliance. As an experienced security lead you will ...

Westcoast in Theale (Reading area) seeks a Principal Information Security Officer to lead architecture, governance, IAM and GRC activities within the Westcoast Security Model. You will partner with stakeholders, tech teams and third parties to drive secure development lifecycle processes and regulatory compliance. As an experienced security lead you will ...

Westcoast in Theale (Reading area) seeks a Principal Information Security Officer to lead architecture, governance, IAM and GRC activities within the Westcoast Security Model. You will partner with stakeholders, tech teams and third parties to drive secure development lifecycle processes and regulatory compliance. As an experienced security lead you will ...

security capability from the ground up. This is a foundational role within a well-established Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments. You'll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture … security technologies and services Lead implementation, integration and ongoing management of selected security solutions Develop OT/IoT security policies, standards, procedures and governance processes Establish security monitoring use cases, alerting requirements and detection coverageTune security controls to improve detection while reducing false positives Define secure configuration, network segmentation, access ...

realisation in security tooling investment, security controls are usable, effective, consistent across the estate and aligned with business and technology needs, maximising adoption and risk reduction. Key Accountabilities and Responsibilities Own the end-to-end lifecycle of security products and services (e.g., IAM, EDR, SIEM, cloud security). Define and … maintain the product vision, roadmap, and backlog Ensure delivery of measurable outcomes, including risk reduction, control coverage and user adoption. Balance competing priorities across risk, usability, cost, and technical feasibility. Define, refine, and prioritise product backlog items, ensuring alignment to objectives. Work with engineering and delivery teams to ensure timely ...

realisation in security tooling investment, security controls are usable, effective, consistent across the estate and aligned with business and technology needs, maximising adoption and risk reduction. Key Accountabilities and Responsibilities Own the end-to-end lifecycle of security products and services (e.g., IAM, EDR, SIEM, cloud security). Define and … maintain the product vision, roadmap, and backlog Ensure delivery of measurable outcomes, including risk reduction, control coverage and user adoption. Balance competing priorities across risk, usability, cost, and technical feasibility. Define, refine, and prioritise product backlog items, ensuring alignment to objectives. Work with engineering and delivery teams to ensure timely ...

and Point Nine, and we're growing fast. There's never been a better time to join. The role in one line Being a GRC Engineer at incident.io means turning compliance from spreadsheets and screenshots into something that just runs, so “can you prove it?” gets answered before anyone asks. … What that looks like day to day As a GRC Engineer at incident.io, you own how we prove we’re doing the right thing: our compliance programme, our customer security questionnaires, and the evidence behind both. One day you’re building an AI workflow that drafts questionnaire answers, the next ...

Intact Insurance is seeking a recognised authority to lead AI governance and strategic initiatives across the organisation. You will define discipline standards, methodologies and technical direction, and act as the final escalation point for complex or high‐risk AI issues. You will influence senior leaders, oversee risk assessments, and build ...

Having surpassed $300M ARR and continuing to grow, Optro helps enterprises transform risk into opportunity through its AI-powered GRC Intelligence Platform. More than 50% of the Fortune 500, including 7 of the Fortune 10, leverage our award-winning technology to move their businesses forward with greater clarity and agility. … company and our surrounding communities. We are all about assisting each other and breaking through barriers to create the most loved audit, risk, ESG, and InfoSec platform by our customers. This is how we have become one of the 500 fastest-growing tech companies in North America for the seventh ...

broad, hands-on role spanning cloud and application security, vulnerability management, identity and access management, incident response, secure software delivery, SOC 2, risk management, and customer security assurance. You'll be the internal owner for security: maintaining a clear view of our security posture, identifying where we need to improve … from security tooling, audits, penetration tests, and engineering reviews into clear actions with owners and deadlines, and follow them through to remediation or explicit risk acceptance. You’ll also own our day-to-day SOC 2 programme and audit readiness. That means making sure our controls reflect how Lantern actually ...

Legal & General is seeking an Information Security GRC Analyst in the United Kingdom to strengthen information and cyber security across Retirement Retail and Investment areas. You will work with technology teams and stakeholders to manage security risks and controls, drawing on ISO 27001 and NIST frameworks. This role suits someone ...

Keeping our incident response and breach notification process ready, and testing it each year Requirements You really need to have: 5+ years in security compliance, GRC or data protection, ideally at a SaaS or developer tools company Experience at an early-stage startup as the first or only compliance hire … than just your day job Our code is public, so anyone can see how we build and run our platform. We want our security and compliance to be just as open. We publish our security reports and trust portal, so customers can check our work instead of taking our word ...

Teya, a regulated payments fintech serving local businesses across Europe, is hiring a Security GRC Manager in London. You will lead the Security GRC team, align policies with PCI DSS, SWIFT CSP, and ISO 27001, and drive regulatory compliance with UK authorities. The role focuses on transforming governance into scalable … automated processes. Reporting to the CISO, you’ll partner with security engineering and procurement to improve evidence collection and audit readiness while shaping risk #J-18808-Ljbffr ...