GRC Engineer

Reference: 8rq9psm3fo4ytnc12u7y

We are seeking a GRC Engineer to support the development, implementation and continuous improvement of governance, risk and compliance practices across a technology-focused environment. This role will work closely with information security, engineering, infrastructure, legal, privacy and operational teams to help ensure that systems, processes and controls meet business, regulatory and industry requirements.

You will contribute to the design and maintenance of security policies, standards, procedures and control frameworks. Responsibilities will include conducting risk assessments, maintaining risk and compliance registers, coordinating control testing, reviewing evidence, tracking remediation activities and preparing clear reports for stakeholders. You will also support internal and external audits, customer assurance requests, security questionnaires and regulatory assessments.

The role will involve translating technical and operational risks into practical recommendations, helping teams understand their compliance obligations and ensuring that agreed actions are completed within appropriate timescales. You will assist with the mapping of controls to recognised frameworks and standards, such as ISO 27001, SOC 2, NIST, CIS Controls or relevant data protection requirements. You may also contribute to third-party risk management, supplier assessments, policy reviews and security awareness initiatives.

The successful candidate will have experience in governance, risk, compliance, information security or a closely related discipline, together with a sound understanding of security controls, risk management principles and audit processes. Familiarity with GRC platforms, evidence management and control frameworks is desirable. Relevant certifications, such as ISO 27001 Lead Implementer or Auditor, CISA, CRISC, CISSP or equivalent experience, would be advantageous.

You should be analytical, organised and confident working with both technical and non-technical colleagues. Strong written and verbal communication skills are essential, as is the ability to manage multiple priorities, challenge constructively and explain complex requirements clearly. A proactive approach, attention to detail and a commitment to continuous improvement will be key to succeeding in this role.

COMPETITIVE SALARY
Added 23/10/2026
Reference: 8rq9psm3fo4ytnc12u7y

Other similar jobs

Senior Corporate Security Engineer

Added 21/09/2026

We are seeking a Senior Corporate Security Engineer to design, implement, and maintain secure technology solutions across a complex enterprise environment. This role will help protect corporate systems, networks, applications, data, and users from evolving cyber threats while supporting business objectives and regulatory requirements. You will work closely with infrastructure, cloud, application development, risk, compliance, and operations teams to embed security into projects, services, and day-to-day technology operations. Responsibilities will include developing and maintaining security architectures, standards, controls, and engineering patterns; conducting threat modelling, vulnerability assessments, and security reviews; and recommending practical improvements to reduce risk. You will configure and...

Learn more

Senior Software Engineer, Proactive Security

Added 21/09/2026

We are seeking a Senior Software Engineer, Proactive Security to help strengthen the security of complex, distributed systems before vulnerabilities become incidents. In this role, you will design and build scalable security solutions, develop tools that identify and reduce risk early in the software development lifecycle, and partner closely with engineering, infrastructure, and product teams. You will contribute to security architecture, threat modelling, vulnerability management, secure-by-design practices, and the automation of preventative and detective controls. Your responsibilities will include defining and implementing security engineering strategies, improving code and dependency scanning, developing security-focused services and integrations, and analysing emerging threats to...

Learn more

GRC Engineer

Added 03/11/2026

We are seeking a GRC Engineer to support the development, implementation and continuous improvement of governance, risk and compliance practices across a complex technology environment. This role will help ensure that information security controls, policies and processes are effective, measurable and aligned with business objectives and applicable regulatory requirements. You will work closely with security, technology, legal, privacy, procurement and operational teams to identify risks, assess control effectiveness and coordinate remediation activity. Responsibilities will include maintaining risk registers, supporting internal and external audits, preparing evidence, tracking findings and producing clear reports for technical and non-technical stakeholders. You will also contribute...

Learn more

Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer

Added 17/09/2026

We are seeking a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to strengthen enterprise-wide security governance and support the continuous improvement of cyber risk management practices. This role will provide expert guidance across security frameworks, policies, controls and assurance activities, helping to ensure that technology, business processes and third-party services meet regulatory, contractual and organisational requirements. Key responsibilities include developing, maintaining and reviewing information security policies, standards and procedures; conducting risk assessments and control reviews; supporting audit and compliance programmes; and tracking remediation activities through to completion. You will coordinate evidence gathering, prepare clear reports for senior stakeholders,...

Learn more

Sr. Security Engineer - GRC Fintech & Financial Services EU/UK

Added 11/09/2026

We are seeking a Senior Security Engineer specialising in Governance, Risk and Compliance (GRC) to support security and resilience across fintech and financial services environments in the UK and EU. This role will help strengthen risk management practices, maintain regulatory readiness and translate security requirements into practical, measurable controls. You will work closely with engineering, technology, legal, privacy, compliance and business teams to promote secure, compliant and resilient operations. Your responsibilities will include leading security and technology risk assessments, identifying control gaps and coordinating remediation plans through to completion. You will develop, review and maintain security policies, standards, procedures and...

Learn more

Security GRC Lead

Added 29/10/2026

We are seeking an experienced Security GRC Lead to drive the development, implementation and continuous improvement of governance, risk and compliance practices across the organisation. This is a key role for a security professional who can translate regulatory obligations and business requirements into practical, proportionate controls that protect information, technology and customers. You will lead the security governance framework, ensuring policies, standards and procedures remain current, effective and aligned with recognised industry practices. You will maintain the information security risk register, coordinate risk assessments, advise on risk treatment plans and provide clear reporting to senior stakeholders. The role will also...

Learn more

Staff GRC Analyst

Added 29/10/2026

We are seeking an experienced Staff GRC Analyst to help strengthen governance, risk and compliance practices across a complex technology environment. This is an influential role for a proactive professional who can translate regulatory expectations, business requirements and security principles into practical, sustainable controls. You will lead and contribute to governance, risk and compliance initiatives, working closely with security, technology, legal, privacy, internal audit and operational teams. Your responsibilities will include maintaining risk registers, coordinating risk assessments, evaluating control design and effectiveness, and supporting the timely remediation of identified issues. You will help develop, review and maintain policies, standards, procedures...

Learn more

GRC Audit & Assurance Consultant

Added 27/10/2026

We are seeking a GRC Audit & Assurance Consultant to support the delivery of governance, risk and compliance assessments across a range of business functions and technology environments. This role will help provide objective assurance that policies, controls and risk management practices are appropriately designed, implemented and maintained. You will plan and perform risk-based audits and assurance reviews, documenting objectives, scope, testing approaches and conclusions. Responsibilities will include reviewing policies and procedures, assessing control design and operating effectiveness, conducting interviews and walkthroughs, analysing evidence, and identifying opportunities to strengthen governance and compliance. You will prepare clear, well-structured reports for stakeholders,...

Learn more

Information Security and AI GRC Manager

Added 26/10/2026

We are seeking an experienced Information Security and AI GRC Manager to lead the development and continuous improvement of governance, risk and compliance frameworks across information security and artificial intelligence. This is an influential role for a collaborative professional who can translate regulatory expectations, emerging risks and business objectives into practical controls and clear guidance. You will develop and maintain policies, standards and procedures covering information security, data protection, artificial intelligence governance, third-party risk and operational resilience. Working with technology, legal, privacy, risk and business teams, you will ensure that security and AI-related risks are identified, assessed, recorded and managed...

Learn more

GRC Security Consultant - Operational Security

Added 23/10/2026

We are seeking a GRC Security Consultant – Operational Security to support the development, implementation and continual improvement of security governance, risk and compliance activities. This role will work closely with technical and business stakeholders to ensure that operational security practices are effective, proportionate and aligned with relevant policies, standards and regulatory obligations. You will assess security risks across operational processes, systems and services, documenting findings and working with control owners to agree practical remediation plans. Responsibilities will include supporting risk assessments, maintaining security registers, reviewing policies and procedures, monitoring control performance and preparing clear reports for management and governance...

Learn more

Senior GRC Analyst

Added 22/10/2026

We are seeking a Senior GRC Analyst to support the development, maintenance and continuous improvement of governance, risk and compliance practices across a complex technology and business environment. This is an excellent opportunity for an experienced professional to provide practical advice, strengthen control frameworks and help ensure that information, systems and services meet relevant regulatory and organisational requirements. You will lead and contribute to risk assessments, control reviews and compliance activities, identifying gaps and recommending proportionate improvements. The role will involve maintaining risk and control registers, supporting policy development, coordinating remediation plans and preparing clear reports for senior stakeholders. You...

Learn more

Information Security (GRC) Specialist

Added 20/10/2026

We are seeking an Information Security (GRC) Specialist to support the development, maintenance and continuous improvement of governance, risk and compliance practices across the organisation. This is an opportunity to contribute to a mature information security environment, helping to ensure that business activities, technology services and third-party relationships are managed in line with relevant policies, regulatory obligations and industry standards. Key responsibilities will include maintaining information security policies, standards and procedures; coordinating risk assessments and supporting the creation and tracking of remediation plans; monitoring compliance with applicable legislation, contractual requirements and recognised frameworks; and preparing clear reports for senior stakeholders....

Learn more

Cyber GRC Analyst- CRH International

Added 20/10/2026

We are seeking a Cyber Governance, Risk and Compliance (GRC) Analyst to support the development, operation and continuous improvement of cyber security governance and risk management practices across a complex, international environment. This role will help ensure that information security controls, policies and processes remain effective, proportionate and aligned with business objectives, regulatory obligations and recognised industry standards. Key responsibilities will include maintaining cyber security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports for stakeholders and governance forums. You will help coordinate internal and external audits, monitor compliance with relevant...

Learn more

IT GRC Analyst

Added 20/10/2026

We are seeking an IT GRC Analyst to support the effective management of information technology governance, risk and compliance activities. This role will help ensure that technology processes, systems and controls are aligned with internal policies, regulatory obligations and recognised industry frameworks. You will work closely with colleagues across technology, security, audit, legal and business functions to identify risks, strengthen controls and promote a consistent approach to governance. Key responsibilities will include maintaining IT policies, standards, procedures and control documentation; supporting risk assessments and tracking remediation actions; coordinating evidence collection for internal and external audits; and monitoring compliance with applicable...

Learn more

Information Security Analyst – GRC & Risk

Added 20/10/2026

We are seeking an Information Security Analyst – GRC & Risk to support the development, implementation and continuous improvement of effective information security governance, risk and compliance practices. This role will help protect information assets, strengthen organisational resilience and ensure that security activities align with applicable regulations, industry standards and business objectives. You will work closely with technology, legal, compliance, audit and operational teams, providing clear, practical advice on information security risks and controls. Key responsibilities will include maintaining security policies, standards, procedures and risk registers; conducting information security and third-party risk assessments; supporting the identification, evaluation and treatment of...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.