51 to 75 of 84 GRC Jobs in the UK excluding London

As a Senior Principal - GRC in the Technology & Telecoms sector, you will lead governance, risk, and compliance initiatives while ensuring alignment with accounting and finance objectives. This role is ideal for a detail-oriented professional passionate about fostering robust compliance frameworks and driving organisational success. Client Details The employer is a medium-sized organisation within the Technology & Telecoms industry, specialising … in innovative solutions and services. They are recognised for their focus on ensuring operational excellence and delivering high-quality results to their stakeholders. Description Develop and implement governance, risk, and compliance strategies in line with organisational goals. Collaborate with accounting and finance teams to ensure regulatory compliance across all operations. Monitor and assess existing GRC processes, identifying areas for improvement. … and risk assessments. Stay up-to-date with evolving regulations within the Technology & Telecoms sector. Support training initiatives to enhance compliance awareness across departments. Profile A successful Senior Principal - GRC should have: Strong knowledge of governance, risk, and compliance frameworks. A background in accounting or finance with relevant professional qualifications. Proven experience in the Technology & Telecoms industry or a related More ❯

IT Governance Consultant - SAP FICO | 6-Month Contract | Inside IR35 | London (Hybrid) Our client, a leading pharmaceutical organisation, is seeking an experienced IT Governance Consultant to join their team on a 6 month contract . This role is inside IR35 and offers flexible hybrid working from their London offices. As the Subject Matter Expert (SME) for IT Governance within SAP … Fully qualified Chartered Accountant (ACA, ACCA, or CIMA). Proven expertise in SAP FICO, including configuration and end-to-end process knowledge. Minimum of 5 years' experience in IT Governance roles. Background in regulated environments, ideally within the pharmaceutical sector. Strong knowledge of SOX compliance, financial controls, and Computer System Validation (CSV). Excellent communication, documentation, and stakeholder engagement skills. More ❯

to receive an alert: Service Asset & Configuration Manager Department: IT Location: GB INTRODUCTION JOB PURPOSE The IT Service Asset & Configuration Manager is accountable for establishing, managing, and improving the governance and control of IT assets and Configuration Items (CIs) across the organisation. Working closely with regional teams and third-party vendors, the post-holder will ensure that the Configuration Management … RESPONSIBILITIES Define and implement processes, standards, and policies for end-to-end IT asset lifecycle management in alignment with ITIL best practice. Own the Configuration Management Database (CMDB), providing governance, oversight and ensuring that it remains accurate, complete, and fit for purpose. Oversee the population and ongoing maintenance of the CMDB, including managing data inputs from regional teams, suppliers, projects … and discovery tools. Establish and lead CMDB governance practices, ensuring alignment with service management and risk control requirements. Collaborate closely with service owners and solution architects to define and maintain accurate service models and relationship mappings between assets, applications, infrastructure and services. Develop a configuration management strategy aligned to the organisation's move towards a SIAM model, including service-to More ❯

audiences of various technical abilities (e.g. senior stakeholders, development teams). DESIRABLE Experience of Identity management and authentication/authorisation products and patterns. End-to-end security involvement, including governance, risk and compliance, operational security, supply chain security and secure user management. Penetration testing qualifications (e.g. OSCP, CREST, TIGER or equivalent) Experience leading security engineers and other junior members of More ❯

aligned with business goals, ensuring effective integration of controls across networks, applications, cloud environments, and enterprise systems. Reporting to the Cyber Resilience Manager, you'll work across technical and governance functions to ensure ongoing protection against an evolving threat landscape, while supporting incident response, architecture design, compliance, and risk management. Key Responsibilities Design and maintain enterprise-wide security architectures aligned … to business objectives and compliance requirements Implement security controls across infrastructure, applications, and cloud platforms Conduct risk assessments and collaborate with GRC teams to manage identified risks Integrate security measures into the software development lifecycle (SDLC) and broader IT processes Engage with architects, IT teams, and external suppliers to embed security into system design Develop and maintain technical incident response More ❯

aligned with business goals, ensuring effective integration of controls across networks, applications, cloud environments, and enterprise systems. Reporting to the Cyber Resilience Manager, you'll work across technical and governance functions to ensure ongoing protection against an evolving threat landscape, while supporting incident response, architecture design, compliance, and risk management. Key Responsibilities Design and maintain enterprise-wide security architectures aligned … to business objectives and compliance requirements Implement security controls across infrastructure, applications, and cloud platforms Conduct risk assessments and collaborate with GRC teams to manage identified risks Integrate security measures into the software development lifecycle (SDLC) and broader IT processes Engage with architects, IT teams, and external suppliers to embed security into system design Develop and maintain technical incident response More ❯

and support of the Security and Authorisations for Babcock ERP applications (SAP, Success Factors, Business Technology Platform, SAP IdM, SAP Service Cloud, SAP Field Services, Solution Manager, Security Weaver GRC products and other non-SAP Cloud Products). Provide technical and configuration support in designing and build of SAP and Non-SAP authorizations and roles for all SAP (Neptune) supported More ❯

Governance, Risk and Compliance (GRC) Officer The Opportunity: Are you a specialist in corporate governance, risk and compliance? Are you a GRC Officer or Manager looking for an interesting role with huge future potential within the beautiful county of Somerset? If so, then please do read on, please do send us an enquiry so that we can talk to you … sense of responsibility and a desire to drive efficiency and compliance. Job Responsibilities: The primary function of this role is to support the Managing Director in all administrative and governance-related matters, ensuring smooth operations across various corporate functions. This role is responsible for a broad range of administrative, legal, and governance tasks, as well as contributing to strategic projects … years all within a busy engineering environment. Assist in the preparation and submission of confirmation statements and other statutory filings, including those to Companies House. Ensure compliance with corporate governance requirements and best practices. Assist with legal documentation, including reviewing and maintaining contracts and corporate policies. Project-Based Responsibilities may include: GDPR Implementation, Business Continuity Planning, IT Policy Development, Corporate More ❯

Role: Principal GRC Analyst (Cyber Security) Salary: Up to £66,500 + excellent pension and benefits Location: Leeds (Hybrid) I am currently recruiting a fantastic role for an organisation that play a crucial role in the UK healthcare industry, an organisation that make a positive impact on society. The role will play a key role in the organisation's GRC … team, leading a team of 2 and taking the lead on key GRC activities. The organistion offer supportive environment and they truly value work/life balance. Key Responsibilities Own the Information Security Assurance framework and programme. Design and perform reviews to provide assurance of information security controls effectiveness. Be responsible for establishing and implementing the information security and technology … requirements. Liaise with other bodies to contribute to the maturing of cyber security practices across the Health and Social care industry. Required Skills/Experience Proven experience in a GRC Analyst role Experience of mentoring or managing team members Strong knowledge of Security controls across Microsoft based technologies, Endpoints, IdAM, Networks, Applications, Email and Cloud. Experience of authoring governance documentation More ❯

client's team as a vCISO, where you'll work closely with mid-enterprise businesses to assess, strategize, and implement robust security frameworks. You will lead Gap Analysis and GRC assessments, playing a pivotal role in helping organizations align with industry standards like ISO27001, Cyber Essentials, and NCSC CAF. This role requires immediate impact, with a start date of November. … Responsibilities: Act as a vCISO for multiple mid-enterprise businesses, providing expert guidance on cybersecurity strategies. Conduct comprehensive Gap Analysis and GRC assessments to identify and mitigate risks. Implement and oversee security strategies, ensuring alignment with ISO27001, Cyber Essentials, and NCSC CAF. Collaborate with clients to enhance their overall security posture and compliance with industry regulations. Skills/Must have … Proven experience in Governance, Risk, and Compliance (GRC). Strong background in conducting Gap Analysis and risk assessments. In-depth knowledge of ISO27001, Cyber Essentials, and NCSC CAF frameworks. Ability to start by November. Nice to Haves: Experience working with mid-enterprise businesses. Benefits: Flexibility to be based anywhere in the UK, with office access in Leeds. Salary More ❯

projects and managing complex, multi-stream programmes. Strong background in risk, issue, and escalation management. Solid experience using Jira for project planning and tracking. Familiarity with EDR, email security, GRC, and cloud security controls across multiple cloud platforms. Experience integrating security in M&A activities, including OT risk and compliance. Preferred certifications: PMP, Agile/Scrum Master, CompTIA Security+, CISSP. More ❯

Company Overview Once For All is a high-growth, cloud-based, SaaS subscription business. Our technology helps our customers to manage their supply chain governance, risk management and compliance. We work across public and private sector and have over 60k customers across the UK across 20 different sectors including construction, transport, retail, hospitality education, facility and property management, manufacturing, local More ❯

experts, to ensure our business commitments are delivered with quality and to expectation Assessing new technology solutions Ensuring our non-functional requirements are met regarding performance, scalability, resilience, and GRC requirements (Information security, risk, industry regulation compliance) Helping to encourage collaboration and product ownership across developers and testers Ensuring continual shift of secure, quality and tested code activity left Working More ❯

experts, to ensure our business commitments are delivered with quality and to expectation Assessing new technology solutions Ensuring our non-functional requirements are met regarding performance, scalability, resilience, and GRC requirements (Information security, risk, industry regulation compliance) Helping to encourage collaboration and product ownership across developers and testers Ensuring continual shift of secure, quality and tested code activity left Working More ❯

supports both public and private sector clients across a range of industries, helping them understand their security risks and maintain compliance with evolving regulations. Their services include security consultancy, GRC support, and accreditation for information systems. As part of a close-knit and collaborative commercial team, the successful candidate will take ownership of the technical components of proposals and contribute … in writing technical content for bids, particularly in cyber security Understanding of UK public sector procurement and frameworks (e.g. MOD, government clients) Prior experience in cyber security, ideally with GRC knowledge Excellent written and verbal communication skills, able to translate complex concepts for different audiences Strong attention to detail and ability to manage multiple bids simultaneously Comfortable using Microsoft Office More ❯

day. As Head of Technical Risk and Delivery Assurance, reporting to the CIO, you will set up a new function to bridge the gap between software development, legal and GRC compliance teams, ensuring smooth delivery of new products that meet industry guidelines. You'll collaborate as part of the senior management team to influence cultural change, bringing the teams together … three days. About you: You're tech savvy with a good knowledge of modern software engineering best practices, cloud based systems and microservices You have a strong knowledge of GRC compliance You're collaborative and pragmatic, with excellent communication skills and the ability to build relationships and influence others to impact cultural change You have experience in fast paced, technology More ❯

I'm currently working with a global organisation that's looking to add a Junior GRC Analyst to their well-established team. This is a fantastic opportunity for someone new to the compliance space to get into a dedicated InfoSec GRC role This position offers broad exposure across the full spectrum of Governance, Risk, and Compliance, making it ideal for … someone with a genuine passion for learning and a desire to grow within a supportive culture. What They're Looking For: Demonstrable experience of information governance, data protection, or information security and compliance. Experience in audits or working with compliance frameworks like ISO27001 or Cyber Essentials Plus. Familiarity with policy documentation and data protection principles. A curious mindset with a More ❯

Provide 1st and 2nd level support for SAP access-related incidents and service requests via ticketing systems (e.g., ServiceNow). Troubleshoot user access issues in SAP and contribute to GRC compliance. Support user provisioning, de-provisioning, and access modifications in collaboration with business teams, internal controls, and IT access management. Assist end-users and business collaborators with access-related questions … ensuring a positive customer experience. Support role assignments, approvals, and risk analysis in SAP GRC Access Control. Perform routine checks and monitoring of SAP access controls and segregation of duties. Document SOPs and knowledge articles for recurring issues and workflows. Escalate complex issues to senior specialists or the CoE Lead for resolution. Collaborate with other IT and security teams on More ❯

discounts EVolve Car Scheme Employee Assistance Plan Mental health first aiders ShareBuy MORE Choices flexible benefits Enhanced parental leave schemes Job Purpose We have a great opportunity for a GRC Administrator to join the Technology Governance team. Our team provides access control governance for IT applications such as SAP and Salesforce. This role involves providing access to a number of … and have appropriate business approval. With the aim that all users have the access needed to carry out their job from the day they start. You will conduct monthly governance activities such as the removal of leavers and managing contractor expiry dates. The role also involves carrying out the access control procedures for the applications we manage in accordance with … UU policies and procedures. Undertaking GRC team reporting, record keeping and data cleanses. Accountabilities & Responsibilities Ensure that access requests, covering new access, amendments and deletions to IT applications are resolved in a timely manner Provision of data extracts and reports Interact with business process and functional teams to resolve access exceptions and escalations Carry out governance activities to ensure compliance More ❯

at KPMG; a diverse business requires diverse personalities, characters, and perspectives. There really is a place for you here. Why Join KPMG as a Manager - IGH GRCS? KPMG's Governance, Risk and Compliance Services (GRCS) practice within IGH is an area of the firm with tremendous growth potential. GRCS is an integral part of our Enterprise Risk advisory practice. We … provide services relating to internal audit, internal control, corporate governance, risk management and related assurance projects. Clients are based in the public sector and our services deliver added value to clients using modern control assessment, risk management and audit techniques focusing on strategic, management and operational issues as well as financial management and reporting controls. We also work closely with … and co-sourced contractual basis • Managing and directly delivering individual and/or a programme of internal audit projects which includes planning, review, quality assurance and reporting • Risk management, governance and internal audit advisory services • Risk identification workshops and control reviews • Delivering control and risk training • Managing and reviewing internal control questionnaires • Compliance internal audits • Working with members of other More ❯

facing context, with exposure to the deployment of technology in support of at least some of the following solution areas: cloud management solutions, orchestration solutions, discovery solutions, security operations, governance/risk/compliance, HR, Customer Service Management, IT Operations, reporting & analytics, project & portfolio management, configuration management, asset management, financial management, vendor management, SIAM, integrations Track record of carrying out More ❯

across critical business systems Lead user groups and represent the organisation at regional and national collaboration meetings Drive system performance, functionality improvements, and service integration across departments Own change governance, risk escalation, and compliance processes Liaise with suppliers, delivery teams, and governance functions to align with operational and national strategies Oversee SLAs, KPIs, and continuous improvement across the core digital … support training, user adoption, and cultural alignment What You'll Bring: Proven experience managing large-scale ICT systems or services in a complex environment Strong stakeholder engagement and service governance capability Excellent understanding of management systems like RMS (Niche), Pronto, or similar Familiarity with service management frameworks (e.g., ITIL), GDPR/data protection, and cyber security Project management exposure (Agile More ❯

Once For All is a high-growth, cloud-based, SaaS subscription business. Our technology helps our customers to manage their supply chain governance, risk management and compliance. We work across public and private sector and have over 250k customers across the UK across 20 different sectors including construction, transport, retail, hospitality education, facility and property management, manufacturing, local and central More ❯

cross-functional teams including Solutions Development, Systems Management, and Database Administration. Collaborate with internal stakeholders and external partners to maximise the value of IT investments. Ensure robust governance, risk management, and compliance across all systems change initiatives. Lead system implementation and support, ensuring smooth transitions from project to live service. Ensure systems are patched and maintained in line with cybersecurity More ❯

site(s) function(s) at the optimum performance and reliability; actively managing along the lines of the four pillars of our Operations Strategy: Service Excellence, Infrastructure Excellence, Sustainability and Governance, risk and compliance. The Manager Data Center (MDC) is accountable for all local maintenance, repairs, upgrades and expansion activities and customer services activities within the sites. The Manager Data Center … do Health & Safety Oversight: Ensure adherence to the Quality Management, Environmental and Health & Safety Responsibilities Matrix Accountable for all activities on the sites in terms of Health & Safety and governance compliance, including site induction, supplier permits, and adherence to relevant guidelines (e.g. SOC and ISO). Accountable for ensuring the sites and all assets are in good condition, Operational Efficiency More ❯