Cybersecurity Risk and Compliance Associate

Reference: 2bvuusbfk041p98419mm

We are seeking a Cybersecurity Risk and Compliance Associate to support the ongoing development, implementation, and monitoring of information security risk and compliance activities. In this role, you will help assess cybersecurity risks, maintain accurate governance documentation, and support the organisation in meeting applicable regulatory, contractual, and internal security requirements. You will work closely with technology, privacy, legal, internal audit, and business teams to promote effective risk management and security-aware decision-making.

Key responsibilities include coordinating risk assessments, documenting findings, tracking remediation plans, and monitoring the timely completion of corrective actions. You will assist with maintaining policies, standards, procedures, risk registers, control libraries, and compliance records. The role will also involve supporting internal and external audits, customer security questionnaires, third-party risk reviews, and evidence collection for security assessments. You may contribute to control testing, vulnerability and exception management, security metrics, management reporting, and the review of new or changing regulatory obligations. Clear communication will be essential when explaining requirements, identifying gaps, and helping stakeholders implement practical improvements.

The successful candidate will have experience in cybersecurity governance, risk, compliance, information security, internal controls, or a related discipline. Familiarity with recognised frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, SOC 2, PCI DSS, or relevant privacy legislation is desirable. You should be organised, analytical, detail-oriented, and comfortable managing multiple priorities and deadlines. Strong written and verbal communication skills, sound judgement, and the ability to work collaboratively with both technical and non-technical audiences are essential. Experience with governance, risk, and compliance tools, audit platforms, or security documentation processes would be advantageous. Relevant qualifications such as CISA, CRISC, CISSP, ISO 27001 training, or equivalent professional experience are welcomed.

COMPETITIVE SALARY
Added 22/09/2026
Reference: 2bvuusbfk041p98419mm

Cybersecurity Risk and Compliance Associate

London, England, United Kingdom Permanent Governance and Compliance

Other similar jobs

Cybersecurity Governance, Risk and Compliance

Added 06/10/2026

We are seeking an experienced Cybersecurity Governance, Risk and Compliance professional to strengthen the organisation’s information security framework and support the effective management of cyber risk. This role will help ensure that security policies, controls and processes align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to cybersecurity. Key responsibilities will include maintaining and improving cybersecurity governance frameworks, policies, standards and procedures; coordinating enterprise-wide risk assessments; tracking remediation activities; and preparing clear reports for senior leadership and relevant governance committees. You...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Technology and Cybersecurity Assurance and Risk Manager

Added 15/10/2026

We are seeking an experienced Technology and Cybersecurity Assurance and Risk Manager to lead the development, coordination and continuous improvement of technology assurance, cybersecurity risk management and governance activities. You will provide independent oversight and constructive challenge across technology services, projects, suppliers and business change, helping to ensure that risks are identified, assessed, managed and reported effectively. Key responsibilities will include maintaining technology and cybersecurity risk frameworks, policies, standards and control requirements; conducting risk and control assessments; overseeing remediation plans; and preparing clear reports for senior stakeholders and relevant governance forums. You will support security assurance reviews, audit activity, regulatory...

Learn more

Senior Manager, Cybersecurity Governance, Risk & Compliance (GRC)

Added 18/09/2026

We are seeking a Senior Manager, Cybersecurity Governance, Risk & Compliance (GRC) to lead the development and continuous improvement of a mature cybersecurity governance and risk management framework. This role will provide strategic direction, independent challenge and practical guidance to ensure security controls, policies and processes align with business objectives, regulatory obligations and recognised industry standards. The successful candidate will work closely with technology, risk, legal, audit and operational teams to strengthen cyber resilience across the organisation. Key responsibilities include owning and maintaining cybersecurity policies, standards, procedures and control frameworks; overseeing enterprise cyber risk assessments, risk registers, remediation plans and...

Learn more

Associate/Senior Associate - Data & Cyber

Added 04/09/2026

We are seeking an Associate/Senior Associate – Data & Cyber to support clients on a range of data, technology, privacy and cyber-related matters. The role will involve contributing to engagements that help organisations understand and manage technology risks, strengthen data governance, respond to regulatory requirements and improve their cyber resilience. You will work with experienced professionals and client stakeholders to analyse complex issues, develop practical recommendations and deliver high-quality outputs. Key responsibilities will include supporting assessments of data protection, information security and cyber risk; reviewing policies, controls, processes and operating models; assisting with data governance and privacy programmes; and contributing...

Learn more

Associate/Senior Associate - Data & Cyber

Added 04/09/2026

We are seeking an Associate or Senior Associate to join a specialist Data & Cyber team, advising clients on a broad range of privacy, cybersecurity, technology and data-related matters. This is an opportunity to work on complex and high-profile assignments across multiple sectors, supporting organisations as they manage evolving regulatory requirements, digital transformation and cyber risk. Your responsibilities will include advising on data protection and privacy compliance, data sharing arrangements, international data transfers, technology contracts, incident response and regulatory investigations. You will support clients through cyber incidents, including preparedness planning, breach assessment, notification strategies and engagement with relevant authorities. You...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Head of Information Security, Risk and Compliance

Added 22/09/2026

We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation. Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

Information Security and Compliance Risk Manager

Added 26/08/2026

We are seeking an Information Security and Compliance Risk Manager to lead the development, implementation and continual improvement of information security, compliance and enterprise risk management practices. This role will provide trusted advice to senior stakeholders, helping to identify, assess and manage technology, information and operational risks across the organisation. You will support a strong culture of security and accountability while ensuring that policies, controls and processes remain aligned with relevant legislation, regulatory expectations, industry standards and business objectives. Key responsibilities will include maintaining the information security and compliance risk framework; managing risk assessments, control reviews, assurance activities and remediation...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 18/08/2026

We are seeking a dedicated Information Security Governance, Risk, and Compliance (GRC) Specialist to join our team. In this role, you will be responsible for developing and maintaining the organization's information security policies and procedures, ensuring compliance with applicable regulations and standards. You will conduct risk assessments, identify vulnerabilities, and implement effective mitigation strategies to protect sensitive data. Collaborating with cross-functional teams, you will lead initiatives to enhance the organization’s overall security posture and ensure that all security measures align with business objectives. Your expertise will be crucial in conducting regular audits and assessments to evaluate the effectiveness of current...

Learn more

Delivery Consultant - Security, Risk, and Compliance, Professional Services

Added 18/08/2026

We are seeking a dedicated Delivery Consultant with expertise in Security, Risk, and Compliance within the realm of Professional Services. In this role, you will be responsible for leading client engagements, delivering tailored solutions, and ensuring that all security and compliance requirements are met. You will collaborate closely with clients to assess their current security posture, identify potential risks, and develop comprehensive strategies that align with regulatory standards and best practices. Your analytical skills will be vital in conducting detailed risk assessments, vulnerability analyses, and compliance audits. The ideal candidate will possess strong communication skills, allowing you to effectively present...

Learn more

Privacy Compliance Associate

Added 15/10/2026

We are seeking a Privacy Compliance Associate to support the delivery and ongoing development of privacy compliance activities across the organisation. This role will help ensure that personal data is handled lawfully, fairly and transparently, while supporting the implementation of effective controls, policies and procedures. You will work closely with colleagues across legal, information security, risk, technology and business operations to provide practical advice and promote a strong culture of data protection. Key responsibilities will include maintaining records of processing activities, supporting data protection impact assessments, reviewing data protection queries and assisting with the management of individual rights requests. You...

Learn more

OT Cybersecurity Compliance Lead – EMEA Projects and Systems

Added 02/09/2026

We are seeking an OT Cybersecurity Compliance Lead to support projects, systems and operational technology environments across the EMEA region. This role will lead the integration of cybersecurity compliance requirements throughout the lifecycle of OT initiatives, from design and procurement through implementation, commissioning and ongoing operations. You will work closely with engineering, automation, IT, project management, procurement and site teams to ensure that systems are secure, compliant and aligned with applicable policies, standards and regulatory obligations. Key responsibilities will include defining and maintaining OT cybersecurity requirements; conducting risk assessments, security reviews and compliance evaluations; supporting the development of secure architectures...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.