GRC Engineer

Reference: 1ngfwqkq1yvougwnudky

We are seeking a GRC Engineer to support the development, implementation and continuous improvement of governance, risk and compliance practices across a complex technology environment. This role will help ensure that information security controls, policies and processes are effective, measurable and aligned with business objectives and applicable regulatory requirements.

You will work closely with security, technology, legal, privacy, procurement and operational teams to identify risks, assess control effectiveness and coordinate remediation activity. Responsibilities will include maintaining risk registers, supporting internal and external audits, preparing evidence, tracking findings and producing clear reports for technical and non-technical stakeholders. You will also contribute to the review and maintenance of security policies, standards, procedures and control frameworks.

The role will involve mapping controls to recognised frameworks and regulations, such as ISO 27001, NIST, CIS Controls, SOC 2 or UK data protection requirements. You will help manage third-party risk assessments, security questionnaires, exceptions and risk acceptances, ensuring that actions are properly documented and completed within agreed timescales. You may also support security awareness initiatives and the delivery of governance reporting, metrics and dashboards.

Applicants should have experience in a governance, risk, compliance, information security or technology assurance role, with a sound understanding of security controls, risk assessment methodologies and audit processes. Familiarity with GRC platforms, evidence management and control testing is desirable. Relevant qualifications, such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, would be advantageous.

You should be analytical, organised and confident managing multiple priorities. Strong written and verbal communication skills are essential, as is the ability to explain risk and compliance requirements clearly to varied audiences. A collaborative approach, attention to detail and the confidence to challenge constructively will be important. This is an opportunity to help strengthen security governance while supporting practical, risk-based solutions across the organisation.

£110,000.00 - £200,000.00
Per annum
Added 03/11/2026
Reference: 1ngfwqkq1yvougwnudky

Other similar jobs

GRC Engineer

Added 23/10/2026

We are seeking a GRC Engineer to support the development, implementation and continuous improvement of governance, risk and compliance practices across a technology-focused environment. This role will work closely with information security, engineering, infrastructure, legal, privacy and operational teams to help ensure that systems, processes and controls meet business, regulatory and industry requirements. You will contribute to the design and maintenance of security policies, standards, procedures and control frameworks. Responsibilities will include conducting risk assessments, maintaining risk and compliance registers, coordinating control testing, reviewing evidence, tracking remediation activities and preparing clear reports for stakeholders. You will also support internal and...

Learn more

Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer

Added 17/09/2026

We are seeking a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to strengthen enterprise-wide security governance and support the continuous improvement of cyber risk management practices. This role will provide expert guidance across security frameworks, policies, controls and assurance activities, helping to ensure that technology, business processes and third-party services meet regulatory, contractual and organisational requirements. Key responsibilities include developing, maintaining and reviewing information security policies, standards and procedures; conducting risk assessments and control reviews; supporting audit and compliance programmes; and tracking remediation activities through to completion. You will coordinate evidence gathering, prepare clear reports for senior stakeholders,...

Learn more

Sr. Security Engineer - GRC Fintech & Financial Services EU/UK

Added 11/09/2026

We are seeking a Senior Security Engineer specialising in Governance, Risk and Compliance (GRC) to support security and resilience across fintech and financial services environments in the UK and EU. This role will help strengthen risk management practices, maintain regulatory readiness and translate security requirements into practical, measurable controls. You will work closely with engineering, technology, legal, privacy, compliance and business teams to promote secure, compliant and resilient operations. Your responsibilities will include leading security and technology risk assessments, identifying control gaps and coordinating remediation plans through to completion. You will develop, review and maintain security policies, standards, procedures and...

Learn more

Security GRC Lead

Added 29/10/2026

We are seeking an experienced Security GRC Lead to drive the development, implementation and continuous improvement of governance, risk and compliance practices across the organisation. This is a key role for a security professional who can translate regulatory obligations and business requirements into practical, proportionate controls that protect information, technology and customers. You will lead the security governance framework, ensuring policies, standards and procedures remain current, effective and aligned with recognised industry practices. You will maintain the information security risk register, coordinate risk assessments, advise on risk treatment plans and provide clear reporting to senior stakeholders. The role will also...

Learn more

Staff GRC Analyst

Added 29/10/2026

We are seeking an experienced Staff GRC Analyst to help strengthen governance, risk and compliance practices across a complex technology environment. This is an influential role for a proactive professional who can translate regulatory expectations, business requirements and security principles into practical, sustainable controls. You will lead and contribute to governance, risk and compliance initiatives, working closely with security, technology, legal, privacy, internal audit and operational teams. Your responsibilities will include maintaining risk registers, coordinating risk assessments, evaluating control design and effectiveness, and supporting the timely remediation of identified issues. You will help develop, review and maintain policies, standards, procedures...

Learn more

GRC Audit & Assurance Consultant

Added 27/10/2026

We are seeking a GRC Audit & Assurance Consultant to support the delivery of governance, risk and compliance assessments across a range of business functions and technology environments. This role will help provide objective assurance that policies, controls and risk management practices are appropriately designed, implemented and maintained. You will plan and perform risk-based audits and assurance reviews, documenting objectives, scope, testing approaches and conclusions. Responsibilities will include reviewing policies and procedures, assessing control design and operating effectiveness, conducting interviews and walkthroughs, analysing evidence, and identifying opportunities to strengthen governance and compliance. You will prepare clear, well-structured reports for stakeholders,...

Learn more

Information Security and AI GRC Manager

Added 26/10/2026

We are seeking an experienced Information Security and AI GRC Manager to lead the development and continuous improvement of governance, risk and compliance frameworks across information security and artificial intelligence. This is an influential role for a collaborative professional who can translate regulatory expectations, emerging risks and business objectives into practical controls and clear guidance. You will develop and maintain policies, standards and procedures covering information security, data protection, artificial intelligence governance, third-party risk and operational resilience. Working with technology, legal, privacy, risk and business teams, you will ensure that security and AI-related risks are identified, assessed, recorded and managed...

Learn more

GRC Security Consultant - Operational Security

Added 23/10/2026

We are seeking a GRC Security Consultant – Operational Security to support the development, implementation and continual improvement of security governance, risk and compliance activities. This role will work closely with technical and business stakeholders to ensure that operational security practices are effective, proportionate and aligned with relevant policies, standards and regulatory obligations. You will assess security risks across operational processes, systems and services, documenting findings and working with control owners to agree practical remediation plans. Responsibilities will include supporting risk assessments, maintaining security registers, reviewing policies and procedures, monitoring control performance and preparing clear reports for management and governance...

Learn more

Senior GRC Analyst

Added 22/10/2026

We are seeking a Senior GRC Analyst to support the development, maintenance and continuous improvement of governance, risk and compliance practices across a complex technology and business environment. This is an excellent opportunity for an experienced professional to provide practical advice, strengthen control frameworks and help ensure that information, systems and services meet relevant regulatory and organisational requirements. You will lead and contribute to risk assessments, control reviews and compliance activities, identifying gaps and recommending proportionate improvements. The role will involve maintaining risk and control registers, supporting policy development, coordinating remediation plans and preparing clear reports for senior stakeholders. You...

Learn more

IT GRC Analyst

Added 20/10/2026

We are seeking an IT GRC Analyst to support the effective management of information technology governance, risk and compliance activities. This role will help ensure that technology processes, systems and controls are aligned with internal policies, regulatory obligations and recognised industry frameworks. You will work closely with colleagues across technology, security, audit, legal and business functions to identify risks, strengthen controls and promote a consistent approach to governance. Key responsibilities will include maintaining IT policies, standards, procedures and control documentation; supporting risk assessments and tracking remediation actions; coordinating evidence collection for internal and external audits; and monitoring compliance with applicable...

Learn more

Information Security Analyst – GRC & Risk

Added 20/10/2026

We are seeking an Information Security Analyst – GRC & Risk to support the development, implementation and continuous improvement of effective information security governance, risk and compliance practices. This role will help protect information assets, strengthen organisational resilience and ensure that security activities align with applicable regulations, industry standards and business objectives. You will work closely with technology, legal, compliance, audit and operational teams, providing clear, practical advice on information security risks and controls. Key responsibilities will include maintaining security policies, standards, procedures and risk registers; conducting information security and third-party risk assessments; supporting the identification, evaluation and treatment of...

Learn more

Information Security (GRC) Specialist

Added 20/10/2026

We are seeking an Information Security (GRC) Specialist to support the development, maintenance and continuous improvement of governance, risk and compliance practices across the organisation. This is an opportunity to contribute to a mature information security environment, helping to ensure that business activities, technology services and third-party relationships are managed in line with relevant policies, regulatory obligations and industry standards. Key responsibilities will include maintaining information security policies, standards and procedures; coordinating risk assessments and supporting the creation and tracking of remediation plans; monitoring compliance with applicable legislation, contractual requirements and recognised frameworks; and preparing clear reports for senior stakeholders....

Learn more

Cyber GRC Analyst- CRH International

Added 20/10/2026

We are seeking a Cyber Governance, Risk and Compliance (GRC) Analyst to support the development, operation and continuous improvement of cyber security governance and risk management practices across a complex, international environment. This role will help ensure that information security controls, policies and processes remain effective, proportionate and aligned with business objectives, regulatory obligations and recognised industry standards. Key responsibilities will include maintaining cyber security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports for stakeholders and governance forums. You will help coordinate internal and external audits, monitor compliance with relevant...

Learn more

IT GRC SOX Specialist - Regulatory Frameworks

Added 20/10/2026

We are seeking an experienced IT GRC SOX Specialist – Regulatory Frameworks to support the development, operation and continuous improvement of technology governance, risk and compliance activities. The role will focus on ensuring that IT controls are appropriately designed, implemented and evidenced to meet Sarbanes-Oxley (SOX) requirements, as well as relevant regulatory standards and internal policies. You will work closely with technology, finance, internal audit, risk and control owners to strengthen the control environment and promote effective risk management. Key responsibilities will include maintaining the IT SOX control framework, coordinating control assessments and walkthroughs, and supporting the preparation of accurate,...

Learn more

Cyber GRC Analyst- CRH International

Added 20/10/2026

We are seeking a Cyber Governance, Risk and Compliance (GRC) Analyst to support the development, implementation and continuous improvement of cyber security governance across a complex, international environment. This role will help ensure that information security practices align with business objectives, regulatory obligations and recognised industry standards. You will work collaboratively with technology, risk, audit, legal and operational stakeholders to strengthen the organisation’s cyber resilience and risk management capability. Key responsibilities will include maintaining cyber security policies, standards, procedures and control frameworks; supporting regular cyber risk assessments and documenting risks, controls, treatment plans and remediation activity; and preparing clear reports,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.