Senior GRC / Security Assurance Officer

Reference: zsy0bk4cqiss1ulmlo0a

We are seeking a Senior GRC / Security Assurance Officer to strengthen governance, risk management and information security assurance across the organisation. This role will support the development, implementation and continuous improvement of security frameworks, policies, standards and controls, ensuring they align with relevant legislation, regulatory obligations and recognised industry practices. You will work closely with technology, operational and business stakeholders to promote effective risk ownership and embed security into day-to-day decision-making.

Key responsibilities will include maintaining the information security risk register; coordinating risk assessments, control reviews and remediation plans; supporting internal and external audits; and preparing clear reports for senior management and governance forums. You will oversee assurance activities such as compliance reviews, control testing, supplier and third-party assessments, and evidence collection. The role will also contribute to security awareness initiatives, policy reviews, business continuity planning, incident lessons learned and the monitoring of agreed security improvement actions. Where required, you will provide practical advice on risk treatment, control design and regulatory or contractual requirements.

The successful candidate will have substantial experience in governance, risk, compliance, security assurance or a closely related discipline, ideally within a complex or regulated environment. You should have strong knowledge of information security principles and frameworks such as ISO 27001, NIST, CIS Controls or equivalent, together with experience interpreting regulatory, privacy and contractual obligations. Relevant professional qualifications, such as CISA, CRISC, CISSP, ISO 27001 Lead Auditor or equivalent, are desirable. Excellent analytical, written and verbal communication skills are essential, as is the ability to challenge constructively, manage competing priorities and build trusted relationships at all levels. You will be organised, pragmatic and confident translating technical and compliance matters into clear, actionable recommendations.

COMPETITIVE SALARY
Added 25/09/2026
Reference: zsy0bk4cqiss1ulmlo0a

Senior GRC / Security Assurance Officer

Filton, England, United Kingdom Permanent Governance and Compliance

Other similar jobs

Senior GRC / Security Assurance Officer

Added 01/09/2026

We are seeking a Senior GRC / Security Assurance Officer to lead and support governance, risk and compliance activities across a complex technology and information security environment. This role will help strengthen security assurance practices, maintain compliance with applicable regulatory and industry requirements, and provide clear, practical advice to stakeholders at all levels. The successful candidate will work closely with security, technology, risk, legal, audit and business teams to ensure that security controls are appropriately designed, implemented, monitored and evidenced. Key responsibilities include maintaining security policies, standards, procedures and control frameworks; coordinating risk assessments, control reviews, audits and assurance activities;...

Learn more

Senior Cyber Security Engineer

Added 03/09/2026

We are seeking a Senior Cyber Security Engineer to strengthen the organisation’s security capabilities and help protect critical systems, applications, data and services. This is a hands-on role for an experienced security professional who can combine technical expertise with sound risk judgement, contribute to strategic improvements and support the delivery of secure, resilient technology. You will work closely with infrastructure, software development, cloud, operations and governance teams to identify threats, reduce exposure and embed security throughout the technology lifecycle. Your responsibilities will include designing, implementing and maintaining security controls across networks, endpoints, cloud platforms, applications and identity services. You will...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 09/10/2026

We are seeking a Senior Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help maintain confidence in the organisation’s security, privacy and resilience controls by coordinating assurance programmes, supporting regulatory requirements and engaging with internal and external stakeholders. You will work closely with security, compliance, risk, legal, audit and operational teams to assess control effectiveness and promote continuous improvement. Key responsibilities include managing evidence collection for internal and external audits, coordinating responses to customer and regulatory assessments, and preparing clear, accurate reports for senior stakeholders. You will review security and compliance...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 19/08/2026

We are seeking a Senior Security Assurance Specialist to join our team, focusing on compliance and security assurance across the EMEA region. In this role, you will be responsible for leading security assessments, audits, and compliance initiatives to ensure alignment with industry standards and regulatory requirements. You will collaborate with various stakeholders, including engineering, product management, and legal teams, to develop and implement security policies, procedures, and best practices. Your expertise will be crucial in identifying vulnerabilities and recommending effective mitigation strategies to enhance security posture. The ideal candidate will have a strong background in information security, risk management, and...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 25/09/2026

We are seeking a Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help demonstrate that cloud services, business processes and operational controls meet applicable regulatory, contractual and industry requirements. You will work with security, legal, privacy, risk, audit and engineering teams to assess control effectiveness, coordinate evidence and communicate assurance outcomes to internal and external stakeholders. Key responsibilities include supporting customer, regulatory and third-party assurance requests; coordinating audit and assessment activities; reviewing policies, procedures and control documentation; and identifying opportunities to improve the efficiency and consistency of assurance processes. You will...

Learn more

Security Assurance Solutions Architect, AWS Security Assurance Services

Added 09/09/2026

We are seeking a Security Assurance Solutions Architect to help customers design, implement and validate secure solutions across cloud environments. In this role, you will act as a trusted security advisor, translating complex assurance requirements into practical technical architectures, controls and implementation plans. You will work with security, risk, compliance, engineering and business stakeholders to understand their objectives and guide them towards resilient, compliant and scalable outcomes. Key responsibilities include developing security assurance strategies; mapping regulatory, contractual and industry requirements to technical and organisational controls; reviewing architectures and identifying security gaps; and recommending pragmatic remediation approaches. You will support customer...

Learn more

Security Assurance Solutions Architect, AWS Security Assurance Services

Added 09/09/2026

We are seeking a Security Assurance Solutions Architect to help customers design, implement, and operate secure, resilient technology environments. In this role, you will serve as a trusted security advisor, translating complex regulatory, risk, and compliance requirements into practical technical solutions. You will work closely with security, engineering, architecture, risk, and compliance teams to develop assurance strategies that support business objectives while maintaining strong security controls. Your responsibilities will include assessing customer environments, identifying security and compliance gaps, and recommending improvements across governance, identity and access management, data protection, infrastructure security, monitoring, incident response, and resilience. You will create and...

Learn more

Security Assurance Manager, Security Assurance

Added 19/08/2026

We are seeking a dedicated Security Assurance Manager to oversee and enhance our security assurance framework. In this pivotal role, you will be responsible for identifying, assessing, and mitigating security risks across all operations. You will lead a team of security professionals in conducting thorough security assessments, audits, and risk analyses to ensure compliance with industry standards and regulatory requirements. Your expertise will be instrumental in developing and maintaining security policies, procedures, and best practices that safeguard our assets and data integrity. As a Security Assurance Manager, you will collaborate with cross-functional teams to implement effective security controls and provide...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 19/08/2026

We are seeking a detail-oriented Security Assurance Specialist to join our dynamic team focused on compliance and security assurance within the EMEA region. In this role, you will be responsible for evaluating and implementing security measures to protect sensitive information and ensure compliance with industry regulations. Your expertise will be crucial in assessing risks, conducting audits, and developing strategies to enhance the security posture of our cloud services. You will collaborate with cross-functional teams to identify vulnerabilities and recommend solutions that align with best practices and compliance requirements. The ideal candidate will possess a strong understanding of cloud security frameworks...

Learn more

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert leadership across cyber risk, information assurance and security governance. This is a senior opportunity for an experienced professional who can assess complex technology environments, translate risk into practical business decisions and support the delivery of secure, resilient services. The successful candidate will work with technical, operational and senior stakeholder groups to promote effective cyber risk management and assurance practices. Key responsibilities will include developing and maintaining cyber risk management frameworks, policies, standards and assurance processes aligned with ISO 27001, relevant government security principles and industry best...

Learn more

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert guidance across cyber security risk, governance and assurance activities within a complex technology environment. This is a senior role for an experienced professional who can translate security requirements into practical, proportionate controls and confidently advise stakeholders at all levels. The successful candidate will support the management of cyber risk across services, programmes, suppliers and cloud platforms, helping to maintain a strong and demonstrable security posture. Key responsibilities will include leading cyber risk assessments, maintaining risk registers and treatment plans, and providing assurance against relevant policies, standards...

Learn more

Information Assurance and Security Officer - Legal Aid Agency (Ref: 23071)

Added 09/10/2026

We are seeking an experienced Information Assurance and Security Officer to support the effective management of information security, data protection and business continuity across a complex public service environment. You will help protect sensitive information, systems and services by providing practical advice, promoting good security practices and ensuring that risks are identified, assessed and managed appropriately. Key responsibilities will include maintaining information assurance documentation, policies, procedures and risk registers; supporting security and privacy impact assessments; monitoring compliance with relevant legislation, standards and internal controls; and assisting with the investigation, management and reporting of security incidents. You will contribute to assurance...

Learn more

Cyber and Data Assurance Officer

Added 09/10/2026

We are seeking a Cyber and Data Assurance Officer to support the effective management of information security, data protection and technology risk across the organisation. This role will help ensure that systems, processes and services meet relevant internal policies, regulatory obligations and recognised industry standards. You will work with colleagues across the business to identify risks, strengthen controls and promote a culture of secure and responsible information handling. Key responsibilities will include coordinating assurance reviews, maintaining risk and compliance registers, and monitoring the completion of agreed actions. You will contribute to the development and review of security policies, procedures, standards...

Learn more

Cyber and Data Assurance Officer

Added 29/09/2026

We are seeking a Cyber and Data Assurance Officer to support the protection, integrity and effective use of organisational information and technology. You will help strengthen cyber security, data governance and assurance arrangements by coordinating risk assessments, reviewing controls and promoting compliance with relevant legislation, policies, standards and best practice. This is an opportunity to contribute to a positive security culture while working with colleagues across a range of business and technical functions. Your responsibilities will include maintaining cyber and data risk registers, supporting security and privacy impact assessments, and monitoring the implementation of agreed mitigating actions. You will assist...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.