GRC Audit & Assurance Consultant

Reference: v30nu3pwi6lge9koqgsz

We are seeking a GRC Audit & Assurance Consultant to support the delivery of governance, risk and compliance assessments across a range of business functions and technology environments. This role will help provide objective assurance that policies, controls and risk management practices are appropriately designed, implemented and maintained.

You will plan and perform risk-based audits and assurance reviews, documenting objectives, scope, testing approaches and conclusions. Responsibilities will include reviewing policies and procedures, assessing control design and operating effectiveness, conducting interviews and walkthroughs, analysing evidence, and identifying opportunities to strengthen governance and compliance. You will prepare clear, well-structured reports for stakeholders, outlining findings, root causes, risks and practical recommendations.

The successful candidate will work closely with control owners, risk teams, technology specialists and senior stakeholders to agree remediation plans and monitor progress. You will contribute to maintaining audit and assurance methodologies, risk and control libraries, testing schedules and management information. The role may also involve supporting regulatory, client or third-party assurance activities, responding to information requests and helping to embed a culture of continuous improvement.

Applicants should have experience in internal audit, IT audit, risk, compliance, information security or a related assurance environment. A sound understanding of governance and control frameworks such as ISO 27001, COBIT, NIST, ITIL, SOC 2 or equivalent is desirable. Relevant professional qualifications, or progress towards qualifications such as CISA, CRISC, CIA, CISM or an accountancy designation, would be advantageous.

You will need strong analytical and report-writing skills, excellent attention to detail and the confidence to challenge constructively. The ability to manage multiple assignments, prioritise effectively and communicate complex matters clearly to both technical and non-technical audiences is essential. A proactive, collaborative approach and a commitment to professional integrity are also expected.

COMPETITIVE SALARY
Added 27/10/2026
Reference: v30nu3pwi6lge9koqgsz

Other similar jobs

GRC Consultant

Added 15/10/2026

We are seeking an experienced GRC Consultant to support the development, implementation and continuous improvement of governance, risk and compliance frameworks. Working with stakeholders across the organisation, you will provide pragmatic advice that strengthens control environments, supports informed decision-making and helps ensure compliance with relevant legislation, regulations, standards and internal policies. Your responsibilities will include conducting risk assessments, control reviews and compliance gap analyses; maintaining risk registers, policies, procedures and control documentation; and supporting the design and delivery of governance frameworks. You will coordinate audit and assurance activities, track remediation plans and prepare clear reports for senior stakeholders. The role...

Learn more

Cyber Audit Consultant

Added 27/10/2026

We are seeking a Cyber Audit Consultant to assess, challenge and improve the effectiveness of information security controls across a range of technology environments. This role will involve working with stakeholders at all levels to provide independent assurance over cyber risk, regulatory compliance and the resilience of critical systems. You will plan and deliver cyber and information security audits, from scoping and risk assessment through to reporting and follow-up. Responsibilities will include reviewing security policies and procedures, evaluating governance frameworks, testing technical and operational controls, and assessing areas such as identity and access management, vulnerability management, incident response, cloud security,...

Learn more

Senior GRC / Security Assurance Officer

Added 25/09/2026

We are seeking a Senior GRC / Security Assurance Officer to strengthen governance, risk management and information security assurance across the organisation. This role will support the development, implementation and continuous improvement of security frameworks, policies, standards and controls, ensuring they align with relevant legislation, regulatory obligations and recognised industry practices. You will work closely with technology, operational and business stakeholders to promote effective risk ownership and embed security into day-to-day decision-making. Key responsibilities will include maintaining the information security risk register; coordinating risk assessments, control reviews and remediation plans; supporting internal and external audits; and preparing clear reports for...

Learn more

Director, Audit & Regulatory Engagement - Technology & Cyber

Added 27/10/2026

We are seeking an experienced Director, Audit & Regulatory Engagement – Technology & Cyber to lead strategic engagement with internal audit, external regulators and other assurance stakeholders. This senior role will provide objective insight into the effectiveness of technology, cyber security, information risk and operational resilience controls, helping to maintain confidence in the organisation’s risk management environment. You will establish and manage a clear engagement strategy across audit and regulatory activities, acting as a trusted adviser to senior technology, security, risk and business leaders. Responsibilities will include coordinating responses to audit and regulatory requests, overseeing the preparation of evidence and...

Learn more

Technology and Cyber Security Risk Audit Lead

Added 05/10/2026

We are seeking a Technology and Cyber Security Risk Audit Lead to provide independent assurance over the effectiveness of technology, information security and cyber risk management practices. This is a senior role for an experienced audit professional who can combine strong technical understanding with commercial awareness, sound judgement and the ability to influence stakeholders at all levels. You will help shape risk-based audit plans, identify emerging threats and provide practical recommendations that strengthen governance, resilience and regulatory compliance. Key responsibilities will include leading complex audits across areas such as cyber security, IT infrastructure, cloud services, identity and access management, data...

Learn more

Security Program Manager, Exam and Audit

Added 18/09/2026

We are seeking a Security Program Manager, Exam and Audit to lead the planning, coordination, and continuous improvement of security assessment activities across the organisation. This role will manage examination and audit programmes, ensuring that internal controls, policies, procedures, and operational practices are prepared for review and aligned with applicable regulatory, contractual, and industry requirements. You will act as a central point of contact for auditors, examiners, control owners, and senior stakeholders, coordinating evidence collection, interview schedules, responses, and remediation tracking. Responsibilities include maintaining the security assessment calendar; defining programme milestones, deliverables, and dependencies; assessing audit readiness; and identifying risks...

Learn more

Security Assurance Specialist, Security Assurance

Added 21/10/2026

We are seeking a Security Assurance Specialist to support the delivery of effective security governance, risk management and assurance across a complex technology and business environment. This role will help ensure that security controls are appropriately designed, implemented and operating effectively, while promoting a practical, risk-based approach to information security. You will plan and conduct security assurance reviews, control assessments and compliance activities across systems, services, suppliers and business processes. Responsibilities will include gathering and evaluating evidence, identifying control weaknesses, documenting findings and agreeing proportionate remediation plans with relevant stakeholders. You will monitor actions through to completion and provide clear,...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 09/10/2026

We are seeking a Senior Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help maintain confidence in the organisation’s security, privacy and resilience controls by coordinating assurance programmes, supporting regulatory requirements and engaging with internal and external stakeholders. You will work closely with security, compliance, risk, legal, audit and operational teams to assess control effectiveness and promote continuous improvement. Key responsibilities include managing evidence collection for internal and external audits, coordinating responses to customer and regulatory assessments, and preparing clear, accurate reports for senior stakeholders. You will review security and compliance...

Learn more

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert leadership across cyber risk, information assurance and security governance. This is a senior opportunity for an experienced professional who can assess complex technology environments, translate risk into practical business decisions and support the delivery of secure, resilient services. The successful candidate will work with technical, operational and senior stakeholder groups to promote effective cyber risk management and assurance practices. Key responsibilities will include developing and maintaining cyber risk management frameworks, policies, standards and assurance processes aligned with ISO 27001, relevant government security principles and industry best...

Learn more

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert guidance across cyber security risk, governance and assurance activities within a complex technology environment. This is a senior role for an experienced professional who can translate security requirements into practical, proportionate controls and confidently advise stakeholders at all levels. The successful candidate will support the management of cyber risk across services, programmes, suppliers and cloud platforms, helping to maintain a strong and demonstrable security posture. Key responsibilities will include leading cyber risk assessments, maintaining risk registers and treatment plans, and providing assurance against relevant policies, standards...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 25/09/2026

We are seeking a Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help demonstrate that cloud services, business processes and operational controls meet applicable regulatory, contractual and industry requirements. You will work with security, legal, privacy, risk, audit and engineering teams to assess control effectiveness, coordinate evidence and communicate assurance outcomes to internal and external stakeholders. Key responsibilities include supporting customer, regulatory and third-party assurance requests; coordinating audit and assessment activities; reviewing policies, procedures and control documentation; and identifying opportunities to improve the efficiency and consistency of assurance processes. You will...

Learn more

Security Assurance Solutions Architect, AWS Security Assurance Services

Added 09/09/2026

We are seeking a Security Assurance Solutions Architect to help customers design, implement, and operate secure, resilient technology environments. In this role, you will serve as a trusted security advisor, translating complex regulatory, risk, and compliance requirements into practical technical solutions. You will work closely with security, engineering, architecture, risk, and compliance teams to develop assurance strategies that support business objectives while maintaining strong security controls. Your responsibilities will include assessing customer environments, identifying security and compliance gaps, and recommending improvements across governance, identity and access management, data protection, infrastructure security, monitoring, incident response, and resilience. You will create and...

Learn more

Security Assurance Solutions Architect, AWS Security Assurance Services

Added 09/09/2026

We are seeking a Security Assurance Solutions Architect to help customers design, implement and validate secure solutions across cloud environments. In this role, you will act as a trusted security advisor, translating complex assurance requirements into practical technical architectures, controls and implementation plans. You will work with security, risk, compliance, engineering and business stakeholders to understand their objectives and guide them towards resilient, compliant and scalable outcomes. Key responsibilities include developing security assurance strategies; mapping regulatory, contractual and industry requirements to technical and organisational controls; reviewing architectures and identifying security gaps; and recommending pragmatic remediation approaches. You will support customer...

Learn more

GRC Security Consultant - Operational Security

Added 23/10/2026

We are seeking a GRC Security Consultant – Operational Security to support the development, implementation and continual improvement of security governance, risk and compliance activities. This role will work closely with technical and business stakeholders to ensure that operational security practices are effective, proportionate and aligned with relevant policies, standards and regulatory obligations. You will assess security risks across operational processes, systems and services, documenting findings and working with control owners to agree practical remediation plans. Responsibilities will include supporting risk assessments, maintaining security registers, reviewing policies and procedures, monitoring control performance and preparing clear reports for management and governance...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.