Latest grc Jobs

Spotlight

Senior Security Consultant (Delivery & Growth)

This role involves leading technical security consulting engagements, working closely with client stakeholders to solve complex security challenges and deliver high-quality consulting outputs. The consultant will also identify and develop opportunities for follow-on work, contributing to account growth and client value.

RiverSafe London, United Kingdom

Hybrid Permanent

IT GRC Lead

The IT GRC Lead will manage cyber governance, risk, and compliance initiatives, develop security frameworks, and ensure compliance across multiple business units. Key responsibilities include conducting risk assessments, audits, and developing security policies, with a focus on NIST CSF, CIS Controls, and ISO 27001.

Robert Half Leeds, United Kingdom £50,000 – £60,000 pa

Senior Governance, Risk & Compliance (GRC) Analyst

This role involves supporting NIS2 audit readiness, strengthening the organisation's ISO 27001-aligned ISMS, and coordinating evidence to identify and close control gaps. You will work closely with stakeholders across technology and the business to ensure regulatory and security compliance.

Robert Walters Bolton, United Kingdom £70,000 – £80,000 pa

On-site Contract

Security Assurance Adviser

This role involves maintaining security approvals, conducting risk assessments, and ensuring compliance with MOD and government security standards for secure networks and cloud environments. The Security Assurance Advisor will support the implementation of security assurance frameworks, conduct security assessments of cloud platforms, and engage with various stakeholders to ensure secure operations.

Experis London, United Kingdom £600 – £700 pd

Hybrid Contract Clearance Required

Governance, Risk & Compliance Lead

This role involves building and leading a new Governance, Risk and Compliance (GRC) function from the ground up, including designing security controls, developing risk management processes, and establishing compliance and assurance frameworks. The position offers significant scope for growth and influence over the organisation's security posture and commercial opportunities.

TRIA United Kingdom

Security Business Analyst

This role involves leading the assessment and remediation of enterprise security control gaps against the CIS Controls framework, translating technical requirements into actionable plans, and coordinating with stakeholders to drive implementation and ensure audit readiness. The position requires strong experience in security, GRC, and control implementation within large enterprises.

NXA Talent LTD London, United Kingdom £500 pd

Hybrid Contract Part-time

Cyber Security Architect & Engineering Lead

This senior technical leadership role involves designing, implementing, and improving security controls across various domains including identity, endpoints, networks, cloud, and applications. The role requires hands-on experience with Microsoft Sentinel, Defender, and Azure, along with strong leadership and stakeholder engagement skills.

Circle Recruitment London, United Kingdom £70,000 – £80,000 pa

Hybrid Permanent

Cyber Security Compliance Manager

The role involves managing and enhancing cyber security governance and compliance frameworks, leading PCI DSS compliance activities, and supporting the adoption of emerging technologies like AI and Microsoft Purview. You will work closely with stakeholders to ensure compliance and improve the organization's cyber security maturity.

Reed M33Aw, United Kingdom £50,000 – £75,000 pa

Vulnerability Management Service Lead

Lead the governance and operation of a mature enterprise vulnerability management framework, driving risk reduction across complex technology environments. Oversee remediation efforts, produce executive reporting, and ensure compliance with security standards. Work across internal teams and third-party suppliers to improve service maturity and security posture.

Adecco Preston, United Kingdom £70,000 – £75,000 pa

Cyber Risk Lead

The role involves leading and enhancing the third-party cyber risk management framework, including vendor due diligence, risk assessments, and compliance with regulations such as DORA, NIS2, and GDPR. The individual will work cross-functionally with IT, Procurement, and Legal teams, and provide clear risk reporting to senior stakeholders. Key responsibilities include managing cyber risk for critical suppliers and driving process improvements using GRC platforms and Power BI.

CPS Group London, United Kingdom £80,000 – £90,000 pa

Cyber Security Engineer - Governance, Risk & Compliance (UK Only)

This role involves creating and improving security labs, challenges, and online learning content on the Immersive One platform, focusing on governance, risk, and compliance (GRC). You will research the latest GRC regulations, design engaging and intuitive content, and act as a GRC subject matter expert for the engineering and product teams.

Immersive United Kingdom

Remote Permanent

Compliance Enablement Technical Program Manager

This role involves leading the technical compliance automation function for Sophos' Trust and Assurance team, focusing on ensuring controls in the GRC platform are accurate, continuously monitored, and aligned with cybersecurity frameworks. The candidate will work cross-functionally with engineering teams to integrate compliance into development workflows and reduce audit burden through automation. A strong blend of technical depth, program management, and AI-assisted compliance operations is central to the position.

Sophos Canada CA$109,000 – CA$181,000 pa

Remote

Cyber Security Engineer - MS Sentinel, Defender, SSO, PKI, SC-100/200, CISSP

This role involves strengthening cybersecurity across a global IT environment through hands-on engineering, incident response, and vulnerability management. You'll work with tools like MS Sentinel and MS Defender to monitor threats, remediate risks in Windows Server and Azure environments, and support major incidents. The position also includes designing secure infrastructure solutions and improving security posture through proactive risk assessment and technical leadership.

Comtecs London, United Kingdom £90,000 – £100,000 pa

Head of Information Security

This role involves leading and developing a security-first function within a growing technology business. Responsibilities include defining and delivering the Information Security strategy, embedding secure practices across teams, and building a mature, AI-enabled security capability.

Comtecs W45Ta, United Kingdom £100,000 pa