GRC Engineer
We are seeking a GRC Engineer to support the development, implementation and continuous improvement of governance, risk and compliance practices across a complex technology environment. This role will help ensure that information security controls, policies and processes are effective, measurable and aligned with business objectives and applicable regulatory requirements.
You will work closely with security, technology, legal, privacy, procurement and operational teams to identify risks, assess control effectiveness and coordinate remediation activity. Responsibilities will include maintaining risk registers, supporting internal and external audits, preparing evidence, tracking findings and producing clear reports for technical and non-technical stakeholders. You will also contribute to the review and maintenance of security policies, standards, procedures and control frameworks.
The role will involve mapping controls to recognised frameworks and regulations, such as ISO 27001, NIST, CIS Controls, SOC 2 or UK data protection requirements. You will help manage third-party risk assessments, security questionnaires, exceptions and risk acceptances, ensuring that actions are properly documented and completed within agreed timescales. You may also support security awareness initiatives and the delivery of governance reporting, metrics and dashboards.
Applicants should have experience in a governance, risk, compliance, information security or technology assurance role, with a sound understanding of security controls, risk assessment methodologies and audit processes. Familiarity with GRC platforms, evidence management and control testing is desirable. Relevant qualifications, such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, would be advantageous.
You should be analytical, organised and confident managing multiple priorities. Strong written and verbal communication skills are essential, as is the ability to explain risk and compliance requirements clearly to varied audiences. A collaborative approach, attention to detail and the confidence to challenge constructively will be important. This is an opportunity to help strengthen security governance while supporting practical, risk-based solutions across the organisation.
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Consultant
- Security Analyst
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Senior Security Consultant-Sec...
- Manager Application Security
- Data Privacy Co-Ordinator
- Information Security Manager
- Senior Technical Consultant-Se...
- Red Team Operator (Cyber Resil...
- Cyber Security Analyst
- CTI Lead
- Microsoft IAM Consultant / Ass...
- Security Architect
- IT Security Operations Lead
- Cyber Policy Lead