london, south east england, united kingdom Hybrid/Remote Options
bb6d1a5a-24fa-4856-bddc-57d1b22e1992
a significant role in producing pragmatic and provocative research which Gartner clients consume and apply to propel their business toward key objectives. The Director Analyst of InternalAudit is a trusted source of advice for clients, discussing complex client challenges and offering appropriate recommendations. You will reinforce Gartner's value daily by engaging clients via … virtual meeting, sales support visits and our practice's conferences. This role includes both writing and speaking about best practices in Audit Planning and Risk. The Director Analyst of InternalAudit will also lead internal research discussions among fellow analysts and collaborate with analysts across Gartner's Assurance Practice. Who You are: You have … and communicating with both executive and business stakeholders. We are looking for an entrepreneurial, self-motivated, and ideas-driven individual to help serve clients who lead internalaudit programs. You are a dynamic individual with a passion for learning and an insatiable curiosity across a broad range of topics. You excel at distilling large volumes of data More ❯
Winchester, Hampshire, United Kingdom Hybrid/Remote Options
Arqiva
management process across the organisation. Maintain and assess the effectiveness of the security controls catalogue; recommend improvements. Own the Information Security Management System (ISMS) to ensure compliance with internal and external requirements. Provide assurance that security controls are operating effectively and aligned with defined frameworks. Maintain company risk portfolio and actively review and risk finding Conduct internal … assurance, and risk management practices across the organisation. Information Security & Compliance - Strategic leadership in the application and assurance of security and compliance frameworks (e.g., ISO 27001, GDPR, NIS2), ensuring audit readiness and regulatory alignment. Knowledge & Experience Deep understanding of enterprise risk management (ERM), governance, and control frameworks In-depth knowledge of security, information assurance, and compliance frameworks (e.g., ISO … NIST CSF, COBIT). Familiarity with legal and regulatory requirements across cyber and operational domains (e.g., GDPR, NIS2, TSA, CSR). Awareness of internalaudit methodology, assurance planning, and reporting mechanisms. Understanding of board-level reporting, risk appetite, and strategic alignment of risk functions. Knowledge of business continuity, resilience planning, and risk treatment strategies. We are the More ❯
Aberdeen, Aberdeenshire, United Kingdom Hybrid/Remote Options
Orion Group
CIO-ready reporting on issues and residual risk. Coordinate with the Business and 1st Line risk owners, as well as with the Assurance parties such as InternalAudit (LOD3) and the major IT and SOC managed service providers to close control gaps, and feed lessons learnt into standards and patterns. Role Dimensions Organisation-wide information security remit … plans, acting as a trusted advisor. Mix of advisory, oversight and hands-on walkthroughs; pragmatic, proportionate risk approach. Role Requirements 7+ years in information risk, security assurance or IT audit within regulated, safety-critical or industrial environments (energy/oil & gas preferred). Strong knowledge of NIST CSF, ISO 27001, UK GDPR and supplier assurance practices; familiarity with the … clear, concise, business-outcome focused). Tooling familiarity: GRC/IRM platforms (e.g., ServiceNow), and common cloud services (M365/Azure) for workflows and evidence capture. Advantageous Certifications: Governance & Audit: ISO 27001 Lead Auditor, CISM Architecture & Design: SABSA, CISSP OT/ICS: SANS GICSP, ISA/IEC 62443 Our role in supporting diversity and inclusion As an international workforce More ❯
Aberdeen, City of Aberdeen, United Kingdom Hybrid/Remote Options
Orion Group
CIO-ready reporting on issues and residual risk. Coordinate with the Business and 1st Line risk owners, as well as with the Assurance parties such as InternalAudit (LOD3) and the major IT and SOC managed service providers to close control gaps, and feed lessons learnt into standards and patterns. Role Dimensions Organisation-wide information security remit … plans, acting as a trusted advisor. Mix of advisory, oversight and hands-on walkthroughs; pragmatic, proportionate risk approach. Role Requirements 7+ years in information risk, security assurance or IT audit within regulated, safety-critical or industrial environments (energy/oil & gas preferred). Strong knowledge of NIST CSF, ISO 27001, UK GDPR and supplier assurance practices; familiarity with the … clear, concise, business-outcome focused). Tooling familiarity: GRC/IRM platforms (e.g., ServiceNow), and common cloud services (M365/Azure) for workflows and evidence capture. Advantageous Certifications: Governance & Audit: ISO 27001 Lead Auditor, CISM Architecture & Design: SABSA, CISSP OT/ICS: SANS GICSP, ISA/IEC 62443 Our role in supporting diversity and inclusion As an international workforce More ❯
Maidenhead, England, United Kingdom Hybrid/Remote Options
Audit & Risk Recruitment
Audit & Risk Recruitment are working on a fantastic Technology Risk and Assurance opportunity for a large Technology business. This role focuses on managing and enhancing the IT and Information Security risk landscape. Reporting directly to the Head of Risk and Assurance, you will play a key role in embedding effective risk management practices across the company's technology and … risk management practices into operational processes and strategic initiatives. Owning and maintaining IT Risk and Control Matrices (RCMs) , ensuring they remain current, comprehensive, and aligned with industry standards and audit expectations. Reviewing effectiveness of first line functions in testing and validation of key IT controls (e.g., access management, change control, incident response, vulnerability management), ensuring effectiveness and consistency. Leading … ISO22301, etc.), acting as the primary point of contact. We'd love you to have Minimum 5 years of experience in second-line risk management or internalaudit, with a strong focus on IT or Information Security. Experience in consultancy or professional services, with a proven ability to support complex transformation or change programmes is preferred. Demonstrated More ❯
Oxford, Oxfordshire, South East, United Kingdom Hybrid/Remote Options
EFCI Group Ltd
Collaborate with Oracle Support and internal teams for essential patch management and environment maintenance. Conduct release readiness reviews, ensuring compliance with ITIL, SOX , and internalaudit requirements. 3. Quality Leadership Establish and monitor KPIs for testing and release quality, driving continuous improvement in test automation and deployment processes. Lead and mentor internal and More ❯
Hereford, Herefordshire, England, United Kingdom Hybrid/Remote Options
IMT Resourcing Solutions
strong understanding of security standards who enjoys embedding best practice across the business. What you’ll do Support and maintain compliance with ISO 27001 standards Conduct and coordinate internal audits, risk assessments, and remediation activities Develop and update security policies, procedures, and documentation Work closely with technical teams to ensure security controls are implemented effectively Monitor and report More ❯
Doncaster, South Yorkshire, England, United Kingdom Hybrid/Remote Options
Uniting Ambition
Key Responsibilities Implement and maintain ISMS Develop and maintain operational documentation, workflows, and service delivery metrics. Lead the organization’s ISO27001 compliance program, including policy development, risk assessments, internal audits, and remediation planning. Act as the primary liaison for external auditors and regulatory bodies. Champion a culture of security and compliance across the business. Triage support tickets, answer More ❯
Sheffield, England, United Kingdom Hybrid/Remote Options
Vanloq - Workforce Solutions
the design of key control indicators (KCIs). Identify and mitigate risks related to data quality, usage, access, and retention. Work closely with Risk, Compliance, and InternalAudit functions to ensure consistent regulatory alignment. Translate governance policies and standards into operational data control processes across business units. Lead cross-functional teams to embed sustainable data management and … initiatives. Knowledge of recognised frameworks like DAMA DMBOK, DCAM, or CDMC. Exposure to data control automation, dashboarding, or issue management workflows. Professional certifications in data governance, risk management, or audit disciplines. Why This Role? This is an excellent opportunity to join a consultancy that’s driving transformation in data governance and risk management across financial services. You’ll have More ❯
Bristol, Avon, South West, United Kingdom Hybrid/Remote Options
Hargreaves Lansdown
and seeks risk owner approval. Reporting of risks and control statuses through appropriate governance. Provides control expertise and guidance to control owners. Supporting Digital/Technology teams on Internal Audits or Second Line Risk reviews, and tracking associated issue actions to a successful conclusion and closure. Owner of the HL Technology risk and control updates in MetricStream. About More ❯
Employment Type: Permanent, Part Time, Work From Home
Edinburgh, Midlothian, United Kingdom Hybrid/Remote Options
Smart PA
Leadership: Lead, mentor, and manage the service delivery team, fostering a culture of high performance, accountability, and alignment with company and brand standards. Continuous Improvement (CI): Utilize feedback (internal audits, QA reports, and client surveys) as actionable intelligence to identify service gaps and drive a formal, continuous improvement agenda. Quality & Brand Governance: Ensure every client interaction and deliverable More ❯
Luton, England, United Kingdom Hybrid/Remote Options
easyJet
at eas yJet: • Ensure all employees, contractors, and third parties are granted only the access they need based on their job roles, enforcing the principle of least privilege • Monitor, audit, and manage who has access to what systems and data. To maintain Compliance and Security: • Drive, measure and report on process adherence and access controls to ensure compliance in … line with internal policies and external regulations (e.g., GDPR, PCI DSS V4, NIS-D), • Identify, analyse and respond to identity-related security risks or anomalies in collaboration with IT and Security teams. To conduct regular Access Reviews, Certifications and Audits: • Conduct regular reviews of user access to ensure continued appropriateness … of access in line with internal policy, • Prepare evidence and reports for internal audits or regulatory compliance audits, • Participate in internal and external audit meetings and interviews. To support with administration and continuous improvements of Identity and Access Management: • Automation of IAM processes, self-service access requests in the Identity tools such as More ❯
Birmingham, West Midlands, United Kingdom Hybrid/Remote Options
Mac Recruit Group
with frameworks including ISO 27001, SOC 2, PCI-DSS, GDPR, DORA, and NIS2 . The Role: Lead and deliver GRC engagements for large enterprise clients , including readiness assessments, internal audits, and advisory projects. Act as a trusted advisor to senior stakeholders, translating complex frameworks into clear, actionable strategies. Mentor and guide junior consultants, contributing to team development and … closely with technical teams to align governance and compliance with operational security practices Operate autonomously while helping refine and enhance consultancy methodologies. Desired Experience: Proven experience in GRC consulting, audit, or information security management within large or regulated organisations. Strong knowledge of ISO 27001 and SOC 2 (experience with PCI-DSS, NIST, DORA, or NIS2 advantageous). Excellent communication More ❯
Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid/Remote Options
Recruitment Revolution
And More... Your Background/Skills: Experience of managing a quality team, experience of running BRC audits as well as the ISO audits. Quality Management, Internal & external audit management. Quality assurance for in-process and finished goods manufacturing. Beauty & Cosmetic manufacturing. Food manufacturing. FMCG manufacturing. Our Story: Founded in 1988 by The Body Shop entrepreneur Dame Anita … ensuring performance reviews against Quality Manual 5.6.2. • Set annual Quality objectives and deliver them on time. • Define, monitor, and report on Quality KPIs. • Coordinate and support external and internal audits, including traceability and recall exercises. • Safeguard product quality—ensuring in-process and finished goods meet customer standards. • Investigate complaints, non-conformances, and deviations; drive root cause analysis and More ❯
hertfordshire, east anglia, united kingdom Hybrid/Remote Options
CommonAI Compute Ltd
services) End User License Agreements (EULAs) and Terms of Service Non-Disclosure Agreements (NDAs) and Confidentiality Agreements Employment contracts and benefit agreements Ensure all contractual documents adhere to internal standards, legal requirements, and regulatory compliance. Track and manage the contract lifecycle from initial request through execution and filing. Coordinate with internal and external stakeholders to gather … the company's legal document management system (Docusign), ensuring all files (physical and electronic) are accurate and easily accessible. Assist in preparing materials for litigation, compliance filings, and internal audits. Handle confidential information with the utmost discretion and professionalism. QualificationsEducation and Experience Required: Law degree from an accredited institution. Prior experience (2+ years) working within a corporate legal More ❯
Bristol, Avon, England, United Kingdom Hybrid/Remote Options
Meraki Talent Limited
Meraki Talent are delighted to be partnering again with our UK based listed client to recruit a newly created role for Audit Manager (Data & AI). The role will be based at our clients central offices in Bristol and will work alongside experienced internal audits teams. You will work across the Data Management and AI portfolio, with … a focus on contributing to the continuous evolution and improvement of effective controls and framework that supports the Group Data & AI strategy. Reporting to the Head of Audit, the role will work alongside experienced colleagues, require the development and enhancement of key business and stakeholder relationships across the Data, AI and Security framework, operations and other finance leaders. Core … duties and responsibilities: Lead high quality audits with autonomy, providing high quality assurance of the controls, framework and principles for Data and AI Contribute and develop audit plans, project managing audits across the portfolio Review and support controls testing, making suggestions for improvement Support and deliver improvements to current compliance procedures Conduct research and analysis on external trends Proactively More ❯
Edinburgh, Midlothian, Scotland, United Kingdom Hybrid/Remote Options
Meraki Talent Limited
Meraki Talent are delighted to be partnering again with our UK based listed client to recruit a newly created role for Audit Manager (Data & AI). The role will be based at our clients central offices in Edinburgh and will work alongside experienced internal audits teams. You will work across the Data Management and AI portfolio, with … a focus on contributing to the continuous evolution and improvement of effective controls and framework that supports the Group Data & AI strategy. Reporting to the Head of Audit, the role will work alongside experienced colleagues, require the development and enhancement of key business and stakeholder relationships across the Data, AI and Security framework, operations and other finance leaders. Core … duties and responsibilities: Lead high quality audits with autonomy, providing high quality assurance of the controls, framework and principles for Data and AI Contribute and develop audit plans, project managing audits across the portfolio Review and support controls testing, making suggestions for improvement Support and deliver improvements to current compliance procedures Conduct research and analysis on external trends Proactively More ❯