176 to 200 of 235 GRC Jobs in the UK excluding London

real-time analytics, and GenAI pipelines. You will partner with C-suite executives, manage multi-million-pound initiatives, lead distributed teams of 100+, ensure governance, risk, and regulatory compliance, and deliver measurable business value through intelligent engineering. #J-18808-Ljbffr ...

sits at client site in Snodland, Kent, with hybrid flexibility and 1-2 days office attendance weekly. You will coordinate IT/OT convergence, governance, risk mitigation, and regulatory compliance, delivering multi-million pound programmes while protecting critical water infrastructure. #J-18808-Ljbffr ...

GRC Analyst - Payments/PCI-DSS/ISO Manchester - office based 4 days a week, remote 1 day a week £55-60k pa A successful payment technology company are seeking a GRC Analyst to join their growing Security team and be responsible for risk management, compliance monitoring and governance … support as well as 3rd party vendor risk management. As a GRC Analyst you will ensure compliance with all relevant regulations including PCI-DSS, GDPR, ISO 27001, NIS Regulations and the Data Protection Act 2018. Any experience with Attestation of Compliance (AoC) is beneficial. This role will require excellent GRC ...

Information Security Lead/ISO27001/SOC/GRC/Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. We're currently recruiting for an Information Security Lead to own and drive our compliance programmes (ISO 27001, SOC 1 Type 2, SOC 2 Type … Type 2, and SOC 2 Type 2 programmes, including evidence collection, control testing, policy maintenance, and auditor liaison Maintain our GRC platform - keeping controls, evidence, and risk registers current and audit-ready at all times Drive continuous improvement of policies, procedures, and controls across the business Serve as the primary ...

purpose by strengthening how identities and access are managed across our business. Working closely with our Chief Information Security Officer, Senior Information Security Manager, GRC, and teams across Technology and the wider business, you’ll lead the governance and ongoing improvement of Identity and Access Management (IAM), covering identity lifecycle … Provide day-to-day leadership for IAM activities, coordinating priorities and delivery across security, technology and business stakeholders, and preparing clear KPI, KRI and risk reports for senior management and governance forums. Monitor emerging identity-related threats, access risks and IAM good practice, advising relevant stakeholders on proportionate improvements ...

engagements. During dedicated periods, create and contribute to internal R&D projects such as report automation and testing toolsets. Liaise with the SOC and Governance Risk & Compliance teams to help maximise overall effectiveness of Penetration Testing activities. Travel to client sites to conduct onsite testing as required. Person specification Minimum ...

Access Request Management (ARM) Emergency Access Management (EAM/Firefighter) Business Role Management (BRM) Maintain SoD rule sets , mitigating controls, and workflows Support audit and compliance requirements (SOX, GDPR, internal audits) Coordinate with auditors and compliance teams Configure GRC for SuccessFactors and ARIBA systems SAP BTP Security Configure BTP security … cloud IAM Strong knowledge of authorization objects, roles, profiles Familiarity with SAP Basis and integration concepts Functional & Compliance Knowledge Understanding of SoD, audit controls, and compliance frameworks Experience working with internal/external auditors Ability to translate business requirements into secure role designs Experience in SAP BDC, Datasphere, SAP Analytics ...

security tooling and platform using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore — automating security workflows and increasing coverage at scale. Compliance & Governance – Perform compliance analysis against regulations such as GDPR, GLI and PCI DS, identify security requirements, and implement controls aligned to regulatory standards on client projects. … Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps to executive stakeholders, effectively managing expectations and aligning risk mitigation strategies with business priorities. Internal Security & Best Practices – Contribute to the enhancement of security best practices throughout Createfuture, actively engaging via the Security Council to drive internal security standards and ...

security tooling and platform using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore — automating security workflows and increasing coverage at scale. Compliance & Governance – Perform compliance analysis against regulations such as GDPR, GLI and PCI DS, identify security requirements, and implement controls aligned to regulatory standards on client projects. … Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps to executive stakeholders, effectively managing expectations and aligning risk mitigation strategies with business priorities. Internal Security & Best Practices – Contribute to the enhancement of security best practices throughout Createfuture, actively engaging via the Security Council to drive internal security standards and ...

security tooling and platform using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore — automating security workflows and increasing coverage at scale. Compliance & Governance – Perform compliance analysis against regulations such as GDPR, GLI and PCI DS, identify security requirements, and implement controls aligned to regulatory standards on client projects. … Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps to executive stakeholders, effectively managing expectations and aligning risk mitigation strategies with business priorities. Internal Security & Best Practices – Contribute to the enhancement of security best practices throughout Createfuture, actively engaging via the Security Council to drive internal security standards and ...

within a collaborative security team, you will play a key role in strengthening security controls across Azure, endpoint, identity and network environments , reducing cyber risk through effective protection, monitoring, remediation and automation. This is an excellent opportunity for a security professional looking to work across modern cloud technologies, security tooling … Zero Trust principles. Key Responsibilities Design, implement and maintain security controls across Microsoft Azure environments. Manage cloud security posture, identifying and remediating vulnerabilities, misconfigurations and compliance issues. Strengthen identity security through Conditional Access, MFA, Privileged Access Management and least-privilege principles . Administer and optimise Microsoft Defender, Defender for Cloud ...

within a collaborative security team, you will play a key role in strengthening security controls across Azure, endpoint, identity and network environments , reducing cyber risk through effective protection, monitoring, remediation and automation. This is an excellent opportunity for a security professional looking to work across modern cloud technologies, security tooling … Zero Trust principles. Key Responsibilities Design, implement and maintain security controls across Microsoft Azure environments. Manage cloud security posture, identifying and remediating vulnerabilities, misconfigurations and compliance issues. Strengthen identity security through Conditional Access, MFA, Privileged Access Management and least-privilege principles . Administer and optimise Microsoft Defender, Defender for Cloud ...

seeking a GRC engineering lead to drive the global GRC technology strategy, architecture, and delivery. You will lead delivery squads across engineering and compliance, advancing AI-driven risk and control capabilities while upholding bp's standards and regulatory obligations. The role requires building and guiding a high-performing team, fostering … continuous improvement, and partnering with regional stakeholders to ensure effective governance across jurisdictions as bp moves some #J-18808-Ljbffr ...

Security Officer to lead security controls across the group, with a focus on external stakeholders and compliance. You will work in architecture, IAM, and governance, supported by a security operations and engineering team. The role involves security assessments, risk stewardship, and implementing best practices such as SSO. Candidates with CISSP ...

with a world class leading consulting group in their latest phase of cyber security growth. We are interested in connecting with senior cyber security & risk consultant candidates based in London. Oliver James is partnered with a world class leading consulting group in their latest phase of cyber security growth. … interested in connecting with senior cyber security & risk consultant candidates based in London. This grade pays up to £60,000 basic salary plus bonuses, pension, broad benefits, professional membership costs, training & development and more. In addition, our client offers a clear and defined path career progression where employees have complete ...

wider health system to be cyber resilient, supporting Transformation Directorate's purpose of delivering the best care and outcomes for the NHS. The GRC team, within the CISO Function, plays a critical role by establishing strong governance frameworks, maintaining clear and usable security policies and standards, delivering robust cyber risk … activities. The team ensures decision makers have clear, evidence based views of security posture and maturity. As a Cyber Security Advisor in our Security GRC team, you'll play a key role in protecting what matters most, enabling the organisation to operate securely, confidently, and compliantly in an increasingly complex ...

Manager and other security team members, this role will touch on IAM, SIEM, EDR and vulnerability management tool tweaking, integrating security into project lifecycles, GRC certifications, 3rd party risk and assurance and more. I'm looking for candidates with a self-driven, go-getter personality who are keen to progress … SDLC security Performing vulnerability scanning and remediation Working with the organisation's managed service provider and helping to manage alerts coming through Working with governance colleagues on the Cyber Essentials certification Helping the organisation with 3rd party risk management and assurance What I'm looking for: Experience in a cybersecurity ...

Manager and other security team members, this role will touch on IAM, SIEM, EDR and vulnerability management tool tweaking, integrating security into project lifecycles, GRC certifications, 3rd party risk and assurance and more. I'm looking for candidates with a self-driven, go-getter personality who are keen to progress … SDLC security Performing vulnerability scanning and remediation Working with the organisation's managed service provider and helping to manage alerts coming through Working with governance colleagues on the Cyber Essentials certification Helping the organisation with 3rd party risk management and assurance What I'm looking for: Experience in a cybersecurity ...

their development. Candidates carrying a number of the below skills would be particularly relevant:- Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0 … CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

and hands-on technical support. You’ll work closely with internal teams and customers, helping to resolve technical issues while ensuring that security, confidentiality and compliance remain at the heart of every interaction. The role You will be responsible for: Troubleshooting hardware, software and network-related issues Identifying, triaging and … enjoys being technically hands-on but also wants exposure to cyber security, ISO 27001, compliance and incident management, rather than working in a purely GRC-focused position ...

Maxwell Bond is partnering with a technology distribution business to recruit an Information Security Officer for GRC and compliance. The role focuses on hands-on implementation of ISMS and security controls, working with auditors, suppliers and customers to demonstrate risk managed and controls operating effectively. The role requires building security … assurance across ISO 27001, PCI-DSS, NIST/CIS, with vendor risk management and cloud security in Microsoft 365, Azure, AWS or Google Cloud. #J-18808-Ljbffr ...

risks relating to information security and the delivery of services. Support internal and external auditors throughout audit activities. Maintain the Information Asset Inventory and Risk Register, supporting Information Asset and Risk Owners with periodic reviews. Maintain and regularly review Information Security policies and procedures. Attend and actively participate in team … Computer Science, Information Security, or a related field. A minimum of 5 years’ experience administering an ISMS, or experience in a similar Information Security, risk, compliance, or corporate governance role. Good knowledge and practical experience of security within IT systems. Strong written and verbal communication skills, with the ability ...

their development. Candidates carrying a number of the below skills would be particularly relevant:- Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0 … CISA or an MSc in cyber security or a related discipline. Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills including concisely communicating status ...

open doors, win customers and close deals. What You'll Be Selling A combination of cybersecurity software and specialist services, including: Cybersecurity assessments, risk evaluations and penetration testing. Security consultancy, compliance assessments and improvement planning. Recurring software subscriptions and assurance services. You'll help customers understand their security risks and … from initial contact and discovery through to proposals, negotiations and signed contracts. Build relationships: Engage with senior business leaders, IT directors and cybersecurity, risk and compliance professionals. Develop revenue: Win new customers, secure recurring business and identify opportunities to grow existing accounts. Deliver results: Maintain accurate CRM records, forecast effectively ...

Skills: Technology Controls, GRC, Security, NIST/ISO, SC Clearance We are looking for Technology Control Frameworks Lead at Wokingham, UK - 2-3 days per week Onsite Security Clearance: Active SC Clearance is must have Technology Control Framework - Project, Resource Responsibilities: Design and develop the Technology Control Framework: Create … regulatory requirements, maintaining traceability to demonstrate coverage and identify gaps, while defining applicability across relevant technologies, services, processes and information asset types. Define control governance and assessment: Establish control ownership and accountability with Technology, Security, Risk and First Line stakeholders, alongside maturity and assessment criteria that enable consistent measurement ...