IT GRC SOX Specialist - Regulatory Frameworks

Reference: qs8mygf53iblqy8uy8zc

We are seeking an experienced IT GRC SOX Specialist – Regulatory Frameworks to support the development, operation and continuous improvement of technology governance, risk and compliance activities. The role will focus on ensuring that IT controls are appropriately designed, implemented and evidenced to meet Sarbanes-Oxley (SOX) requirements, as well as relevant regulatory standards and internal policies. You will work closely with technology, finance, internal audit, risk and control owners to strengthen the control environment and promote effective risk management.

Key responsibilities will include maintaining the IT SOX control framework, coordinating control assessments and walkthroughs, and supporting the preparation of accurate, high-quality audit evidence. You will assess control design and operating effectiveness, identify gaps, document findings and track remediation plans through to completion. The role will also involve supporting internal and external audits, responding to audit queries, monitoring regulatory and industry developments, and evaluating their impact on technology processes and controls. You will help maintain policies, procedures, risk and control matrices, process documentation and management reporting, while contributing to control awareness and continuous improvement initiatives.

The successful candidate will have proven experience in IT governance, risk and compliance, SOX controls, technology assurance or a similar audit-related discipline. You will have a strong understanding of IT general controls, including access management, change management, IT operations, third-party risk and systems development controls, together with familiarity with regulatory frameworks and control methodologies. Relevant qualifications such as CISA, CRISC, CISSP, ACA, ACCA or equivalent experience would be advantageous. Strong analytical, organisational and communication skills are essential, as is the ability to manage multiple priorities, challenge constructively and build effective relationships with stakeholders at all levels. Experience using GRC, audit or risk management platforms and working in a complex, regulated environment would be highly desirable.

COMPETITIVE SALARY
Added 20/10/2026
Reference: qs8mygf53iblqy8uy8zc

IT GRC SOX Specialist - Regulatory Frameworks

London, England, United Kingdom Permanent Governance and Compliance

Other similar jobs

Regulatory Cyber Assurance Principal

Added 21/10/2026

We are seeking an experienced Regulatory Cyber Assurance Principal to lead the development and delivery of cyber assurance activities across a complex, highly regulated environment. This is a senior role for an individual who can translate regulatory expectations into practical controls, measurable outcomes and clear assurance plans, while providing constructive challenge to technology and business leaders. You will define and maintain the cyber assurance framework, ensuring alignment with relevant legislation, regulatory requirements, industry standards and internal policies. You will oversee risk-based assurance reviews covering areas such as governance, identity and access management, infrastructure security, cloud services, third-party risk, vulnerability management,...

Learn more

Regulatory Cyber Assurance Principal

Added 19/10/2026

We are seeking a Regulatory Cyber Assurance Principal to lead the development and delivery of cyber assurance activities across a complex, highly regulated environment. This is a senior role responsible for providing trusted advice on cyber risk, regulatory obligations and the effectiveness of security controls. You will work closely with technology, risk, compliance, audit and operational teams to ensure that cyber assurance is embedded into decision-making and supports the organisation’s strategic objectives. Your responsibilities will include establishing and maintaining a robust cyber assurance framework; interpreting relevant regulatory, legislative and industry requirements; and translating these into practical control objectives, assurance plans...

Learn more

Senior Data Protection & Regulatory Compliance Manager Flicknmix Ltd London Area, United Kingdom Be an early applicant 5 hours ago

Added 05/10/2026

We are seeking a Senior Data Protection & Regulatory Compliance Manager to lead and develop the organisation’s data protection, privacy and regulatory compliance framework. This is a senior role requiring strong knowledge of UK data protection legislation, including the UK GDPR and Data Protection Act 2018, as well as experience translating regulatory requirements into practical business processes. You will act as a trusted adviser to senior stakeholders, supporting responsible data use, effective risk management and a strong culture of compliance across the organisation. Key responsibilities will include maintaining and continuously improving data protection policies, procedures, records of processing activities and...

Learn more

MD Cyber Governance & Regulatory Relations

Added 26/08/2026

We are seeking an experienced Managing Director, Cyber Governance & Regulatory Relations to lead the development and implementation of a robust cyber governance framework across a complex, highly regulated environment. This senior role will provide strategic direction on cyber risk, regulatory engagement, technology governance and organisational resilience, ensuring that security priorities are aligned with business objectives and evolving regulatory expectations. You will be responsible for setting the cyber governance strategy, overseeing policies, standards, controls and assurance activities, and providing clear reporting to senior leadership and relevant governance committees. The role will lead constructive relationships with regulators, supervisory bodies, industry forums...

Learn more

Information Security (GRC) Specialist

Added 20/10/2026

We are seeking an Information Security (GRC) Specialist to support the development, maintenance and continuous improvement of governance, risk and compliance practices across the organisation. This is an opportunity to contribute to a mature information security environment, helping to ensure that business activities, technology services and third-party relationships are managed in line with relevant policies, regulatory obligations and industry standards. Key responsibilities will include maintaining information security policies, standards and procedures; coordinating risk assessments and supporting the creation and tracking of remediation plans; monitoring compliance with applicable legislation, contractual requirements and recognised frameworks; and preparing clear reports for senior stakeholders....

Learn more

GRC Security Specialist

Added 28/09/2026

We are seeking a GRC Security Specialist to support the development, implementation and continuous improvement of governance, risk and compliance practices across the organisation. In this role, you will help ensure that information security policies, processes and controls are aligned with business objectives, regulatory obligations and recognised industry frameworks. You will work with stakeholders across technology, operations, legal, privacy and internal audit to promote a consistent and practical approach to managing security risk. Your responsibilities will include maintaining security policies, standards and procedures; coordinating risk assessments and control reviews; supporting internal and external audits; tracking remediation activities; and preparing clear...

Learn more

Information Security & GRC Specialist

Added 17/09/2026

We are seeking an Information Security & GRC Specialist to support the development, implementation and continuous improvement of information security governance, risk and compliance activities. The role will help protect business information and technology assets by translating security requirements into practical policies, processes and controls. You will work with stakeholders across technology, operations, legal, privacy and business functions to promote a strong security culture and ensure that risks are identified, assessed and managed effectively. Key responsibilities include maintaining information security policies, standards and procedures; coordinating risk assessments, control reviews and remediation plans; supporting internal and external audits; and monitoring compliance...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

IT GRC Analyst

Added 20/10/2026

We are seeking an IT GRC Analyst to support the effective management of information technology governance, risk and compliance activities. This role will help ensure that technology processes, systems and controls are aligned with internal policies, regulatory obligations and recognised industry frameworks. You will work closely with colleagues across technology, security, audit, legal and business functions to identify risks, strengthen controls and promote a consistent approach to governance. Key responsibilities will include maintaining IT policies, standards, procedures and control documentation; supporting risk assessments and tracking remediation actions; coordinating evidence collection for internal and external audits; and monitoring compliance with applicable...

Learn more

Information Security Analyst – GRC & Risk

Added 20/10/2026

We are seeking an Information Security Analyst – GRC & Risk to support the development, implementation and continuous improvement of effective information security governance, risk and compliance practices. This role will help protect information assets, strengthen organisational resilience and ensure that security activities align with applicable regulations, industry standards and business objectives. You will work closely with technology, legal, compliance, audit and operational teams, providing clear, practical advice on information security risks and controls. Key responsibilities will include maintaining security policies, standards, procedures and risk registers; conducting information security and third-party risk assessments; supporting the identification, evaluation and treatment of...

Learn more

Cyber GRC Analyst- CRH International

Added 20/10/2026

We are seeking a Cyber Governance, Risk and Compliance (GRC) Analyst to support the development, operation and continuous improvement of cyber security governance and risk management practices across a complex, international environment. This role will help ensure that information security controls, policies and processes remain effective, proportionate and aligned with business objectives, regulatory obligations and recognised industry standards. Key responsibilities will include maintaining cyber security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports for stakeholders and governance forums. You will help coordinate internal and external audits, monitor compliance with relevant...

Learn more

Cyber GRC Analyst- CRH International

Added 20/10/2026

We are seeking a Cyber Governance, Risk and Compliance (GRC) Analyst to support the development, implementation and continuous improvement of cyber security governance across a complex, international environment. This role will help ensure that information security practices align with business objectives, regulatory obligations and recognised industry standards. You will work collaboratively with technology, risk, audit, legal and operational stakeholders to strengthen the organisation’s cyber resilience and risk management capability. Key responsibilities will include maintaining cyber security policies, standards, procedures and control frameworks; supporting regular cyber risk assessments and documenting risks, controls, treatment plans and remediation activity; and preparing clear reports,...

Learn more

Technology GRC Analyst

Added 16/10/2026

We are seeking a Technology GRC Analyst to support the development, maintenance and continuous improvement of technology governance, risk and compliance practices. This role will work closely with technology, information security, privacy, audit and business stakeholders to help ensure that systems, processes and controls meet applicable regulatory, contractual and internal requirements. Key responsibilities will include maintaining technology policies, standards, procedures and control frameworks; coordinating risk and control assessments; supporting the identification, evaluation and treatment of technology and cyber risks; and monitoring remediation activity to ensure actions are completed within agreed timescales. You will assist with internal and external audits, provide...

Learn more

Senior GRC Analyst

Added 16/10/2026

We are seeking an experienced Senior GRC Analyst to support the continued development and operation of a robust governance, risk and compliance framework. This is an excellent opportunity for a risk professional who can combine strong analytical capability with practical experience of information security, technology risk and regulatory compliance. You will work with stakeholders across the organisation to identify and assess risks, strengthen controls and promote a culture of continuous improvement. Key responsibilities will include maintaining risk registers, conducting control assessments and coordinating remediation activity across agreed timescales. You will support internal and external audits, prepare clear management information and...

Learn more

GRC Analyst

Added 15/10/2026

We are seeking a GRC Analyst to support the development, implementation and continuous improvement of governance, risk and compliance practices across the organisation. This role will help ensure that business activities, information systems and operational processes align with relevant legislation, regulatory expectations, industry standards and internal policies. You will work with stakeholders across technology, operations, security, legal and audit functions to identify risks, monitor controls and promote a consistent approach to managing compliance. Your responsibilities will include maintaining risk and control registers, coordinating risk assessments, documenting processes and controls, and supporting the review and updating of policies, standards and procedures....

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.