GRC Engineer
We are seeking a GRC Engineer to support the development, implementation and continuous improvement of governance, risk and compliance practices across a technology-focused environment. This role will work closely with information security, engineering, infrastructure, legal, privacy and operational teams to help ensure that systems, processes and controls meet business, regulatory and industry requirements.
You will contribute to the design and maintenance of security policies, standards, procedures and control frameworks. Responsibilities will include conducting risk assessments, maintaining risk and compliance registers, coordinating control testing, reviewing evidence, tracking remediation activities and preparing clear reports for stakeholders. You will also support internal and external audits, customer assurance requests, security questionnaires and regulatory assessments.
The role will involve translating technical and operational risks into practical recommendations, helping teams understand their compliance obligations and ensuring that agreed actions are completed within appropriate timescales. You will assist with the mapping of controls to recognised frameworks and standards, such as ISO 27001, SOC 2, NIST, CIS Controls or relevant data protection requirements. You may also contribute to third-party risk management, supplier assessments, policy reviews and security awareness initiatives.
The successful candidate will have experience in governance, risk, compliance, information security or a closely related discipline, together with a sound understanding of security controls, risk management principles and audit processes. Familiarity with GRC platforms, evidence management and control frameworks is desirable. Relevant certifications, such as ISO 27001 Lead Implementer or Auditor, CISA, CRISC, CISSP or equivalent experience, would be advantageous.
You should be analytical, organised and confident working with both technical and non-technical colleagues. Strong written and verbal communication skills are essential, as is the ability to manage multiple priorities, challenge constructively and explain complex requirements clearly. A proactive approach, attention to detail and a commitment to continuous improvement will be key to succeeding in this role.
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Consultant
- Security Analyst
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Senior Security Consultant-Sec...
- Manager Application Security
- Data Privacy Co-Ordinator
- Information Security Manager
- Senior Technical Consultant-Se...
- Red Team Operator (Cyber Resil...
- Cyber Security Analyst
- CTI Lead
- Microsoft IAM Consultant / Ass...
- Security Architect
- IT Security Operations Lead
- Cyber Policy Lead