201 to 225 of 235 GRC Jobs in the UK excluding London

border team of security practitioners and is the operational backbone of the security function as the broader organization builds out, including future Director and GRC leadership roles. On a typical day, you'll be responsible for: Own day-to-day security tooling and operations: EDR/XDR, SIEM, data-loss … active incidents Support the annual SOC 2 Type II audit cycle – evidence collection, control walkthroughs, and auditor liaison – in partnership with the compliance/GRC function Maintain NIST CSF control documentation and contribute to ongoing risk-remediation (POA&M) efforts Support HIPAA/PHI security controls and periodic risk assessments ...

Select how often (in days) to receive an alert: Analyst, Information Security GRC Requisition ID: 50617 Business Unit: Fitch Group Category: Information Technology Location: Manchester, GB Date Posted: Sep 8, 2026 Location: Manchester, UK | Work Arrangement: Hybrid | Department: Information Security About the Role Fitch is seeking an Information Security GRC … phishing simulation activities, campaigns, reporting, and program administration. This is an excellent opportunity for someone early in their cyber security, communications, learning and development, risk management, or employee engagement career who is interested in the human side of cyber security. The successful candidate will work closely with Information Security, Employee ...

Frasers Group is seeking a Technology GRC Analyst to advance its technology risk and assurance program. You will assess cyber risks, test ITGCs, and ensure controls operate effectively across enterprise systems and retail platforms. Collaborating with Technology, Internal Audit,Cyber Security and Supply Chain teams, you will maintain risk registers … manage evidence for audits, and drive continuous GRC improvements across a global retail ecosystem. #J-18808-Ljbffr ...

What We Need Corpay is currently looking to hire an IT Compliance Analyst on a permanent basis within our IVP line of business, within GRC and Info Sec division. This position is located in our Swindon office. The IT Compliance Analyst is responsible for supporting internal and external audits, being … track of escalations and/or risks related to IT Compliance. Thoroughly document compliance events and audit shortcomings. Supporting the IT Compliance Manager and GRC Managers on monitoring and reporting current state and trends of IT compliance, especially on PCI and SOX related engagements. Liaising with the Information Security staff ...

processes, including alert triage, incident response and vulnerability escalation. You’ll manage and challenge our SOC/MSSP provider, working closely with Technology, Engineering, GRC, Threat and Vulnerability colleagues to improve how we detect threats, respond to incidents and reduce risk. A key part of the role is improving … playbooks. Use methods such as MITRE ATT&CK and NIST to improve detection and incident readiness. Ensure vulnerabilities and exposures are prioritised, assigned clear risk owners and tracked through treatment and closure. Lead and develop the analysts, report clearly to the CISO and senior stakeholders, and work with Engineering, Technology ...

protection and identity and access management. Monitoring security alerts, investigating potential threats and coordinating vulnerability remediation. Conducting vulnerability assessments, security configuration reviews and technical risk assessments. Supporting cloud security, network protection, privileged access management and infrastructure hardening. Working with Engineering to embed security into infrastructure, deployment processes and technical operations. … technical troubleshooting. Maintaining technical documentation, IT asset records and security evidence. Supporting backup, recovery, business continuity and disaster recovery activities. Supporting the CISO and GRC team to support technical compliance, security audits and assurance activities, including WebTrust, ETSI and Cyber Essentials Plus. Essential Skills & Experience Demonstrable experience in Security Engineering ...

appropriate resilience is designed into their products and services. Provide subject matter expertise on continuity and resilience considerations for supplier onboarding processes, ensuring appropriate risk management throughout the supply chain. Work with product owners and critical process owners to quantify, document, and report on resilience metrics. Design scenarios and … function by identifying and implementing changes to enhance DR service quality, cost efficiency, and effectiveness. Communicate regularly with stakeholders, including system owners, Head of GRC, and senior management, providing updates on DR performance and other relevant information. Key Skills, Experience and Qualifications: Essential Requirements Experience in Business Continuity and Operational ...

Patching, Asset Management, Certificates, WebApps.* Experienced building & operating AM/VM/PC/PM programs, workflows, key metrics, best practices* Experienced in Cyber-Risk frameworks, Prioritization/Remediation + Scanning/Reporting strategies.* Breadth and depth of knowledge on the cybersecurity general threat landscape and attack techniques* Familiarity and … Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud (certified solutions architect level) #LI-REMOTE ...

Plexus Corp. is seeking an entry-level GRC enthusiast in Livingston, UK to kickstart your IT/cybersecurity career. You will help build and monitor IT policies, risk management frameworks and security compliance standards in a fast-growing GRC environment. You’ll work as a liaison between technical and business … teams, gaining hands-on experience across enterprise IT, data governance and manufacturing tech environments. #J-18808-Ljbffr ...

leading organisation as they embark on a significant ServiceNow transformation and are looking for an experienced ServiceNow Architect to lead solution design, architecture governance, and platform best practice across multiple workstreams. This is a hands-on architecture role requiring strong technical expertise, stakeholder engagement skills, and a proven track record … operating as a ServiceNow Architect or Lead Developer with proven hands-on ServiceNow experience Experience delivering multiple ServiceNow modules including ITSM, ITOM, HRSD, SecOps, GRC/IRM and SPM . Strong expertise across: ServiceNow scripting (Client & Server-side) Flow Designer IntegrationHub Service Portal/Employee Center Automated Test Framework ...

Westcoast in Theale (Reading area) seeks a Principal Information Security Officer to lead architecture, governance, IAM and GRC activities within the Westcoast Security Model. You will partner with stakeholders, tech teams and third parties to drive secure development lifecycle processes and regulatory compliance. As an experienced security lead you will ...

Westcoast in Theale (Reading area) seeks a Principal Information Security Officer to lead architecture, governance, IAM and GRC activities within the Westcoast Security Model. You will partner with stakeholders, tech teams and third parties to drive secure development lifecycle processes and regulatory compliance. As an experienced security lead you will ...

security capability from the ground up. This is a foundational role within a well-established Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments. You'll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture … security technologies and services Lead implementation, integration and ongoing management of selected security solutions Develop OT/IoT security policies, standards, procedures and governance processes Establish security monitoring use cases, alerting requirements and detection coverageTune security controls to improve detection while reducing false positives Define secure configuration, network segmentation, access ...

realisation in security tooling investment, security controls are usable, effective, consistent across the estate and aligned with business and technology needs, maximising adoption and risk reduction. Key Accountabilities and Responsibilities Own the end-to-end lifecycle of security products and services (e.g., IAM, EDR, SIEM, cloud security). Define and … maintain the product vision, roadmap, and backlog Ensure delivery of measurable outcomes, including risk reduction, control coverage and user adoption. Balance competing priorities across risk, usability, cost, and technical feasibility. Define, refine, and prioritise product backlog items, ensuring alignment to objectives. Work with engineering and delivery teams to ensure timely ...

realisation in security tooling investment, security controls are usable, effective, consistent across the estate and aligned with business and technology needs, maximising adoption and risk reduction. Key Accountabilities and Responsibilities Own the end-to-end lifecycle of security products and services (e.g., IAM, EDR, SIEM, cloud security). Define and … maintain the product vision, roadmap, and backlog Ensure delivery of measurable outcomes, including risk reduction, control coverage and user adoption. Balance competing priorities across risk, usability, cost, and technical feasibility. Define, refine, and prioritise product backlog items, ensuring alignment to objectives. Work with engineering and delivery teams to ensure timely ...

Intact Insurance is seeking a recognised authority to lead AI governance and strategic initiatives across the organisation. You will define discipline standards, methodologies and technical direction, and act as the final escalation point for complex or high‐risk AI issues. You will influence senior leaders, oversee risk assessments, and build ...

Resourcing Ltd is recruiting a GRC Analyst for a payments technology company in Manchester. This hybrid role (4 days in the office, 1 day remote) focuses on risk management, compliance monitoring and governance support within the security team. You will ensure compliance with PCI-DSS, GDPR, ISO 27001, NIS Regulations ...

working with a global financial organisation who are looking to add to their existing Information Security team with an Information Security Analyst within their GRC team. KEY SKILLS Experience in a number of the following areas: Undertaking and supporting on Internal and External Audits Working with Third Parties/Vendors … understand their Risk profile Knowledge of Information Security controls Knowledge of the likes of ISO27001 and NIST The role would be hybrid and based out of either their Bristol or Edinburgh offices 3 days per week. If you hold the likes of CRISC, ISO Lead Implementor/Lead Auditor ...

secure infrastructure Proven experience applying secure-by-design principles Experience with Digital Engineering, secure architectural controls, and pattern-based design Strong understanding of security risk management and GRC-aligned assurance Defence experience strongly preferred DV clearance essential Desired, but not essential Experience working on PKI - Public Key Infrastructure Engagement Model ...

seeking a Security & Compliance Manager (GRC) to own and drive information security, data protection and regulatory compliance across the business. This remote UK-based role offers strategic influence and cross-functional collaboration to scale our security program as we enter new markets. You will lead ISO 27001 certification, govern GDPR …/CCPA compliance, manage third-party risk and partner with commercial teams to streamline security requirements in negotiations. #J-18808-Ljbffr ...

understanding of Systems Engineering methodologies, digital engineering tools and the wider engineering lifecycle. This is not a traditional IT Cybersecurity, Information Assurance or GRC role. The focus is on engineering security into complex products and systems, and developing the digital workflows, models and integrations that support Product Security activities. … Responsibilities Translate Product Security engineering requirements into effective digital engineering solutions and workflows. Define digital processes supporting security requirements, threat and risk assessments, and security assurance. Establish traceability between security risks, requirements, system architectures and verification evidence. Support the integration of Product Security activities with Model-Based Systems Engineering (MBSE ...

Kingfisher is seeking a Security Governance lead to shape risk, compliance and assurance across the organisation. You will define and run governance frameworks, provide clear executive reporting, and drive improvements in security posture through data-driven insights. The role supports a hybrid working model with a base location either ...

ServiceNow Architect with strong Telecommunications Service Operations Management (TSOM) experience. Leading the design + implementation of ServiceNow modules including: ITSM, ITOM, ITAM, HRSD, CSM, GRC, SecOps, CMDB, discovery + custom applications. Proven expertise in ServiceNow integrations (REST, SOAP, APIs, MID Servers), ServiceNow scripting (JavaScript, Glide, Flow Designer) + ServiceNow data … models. Acting as the technical authority on ServiceNow architecture, strategy, roadmaps, design, implementation, governance + best practice. Ensuring ServiceNow platform scalability, security, performance + integration with other enterprise systems. Providing technical leadership in solution design workshops, architecture reviews + governance boards. Qualifications: ServiceNow Certified System Administrator (CSA), ServiceNow Certified Implementation ...

Cognisys Group is seeking a Senior Information Security Consultant to join our GRC Consulting team in the UK. You will deliver advisory engagements, assess security programmes and help clients improve risk posture across industries. This predominantly remote role includes occasional local travel to client sites. You will lead client workshops ...

build and lead the organization's OT/IoT security capability from the ground up. You will define strategy, roadmap, and operating model, owning governance, tooling and incident response for OT/IoT environments. You will work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture ...