Security Risk and Compliance Management Specialist V - UK

Reference: 1xmugf71pig2qt44s5o2

We are seeking an experienced Security Risk and Compliance Management Specialist to support the development, implementation and continuous improvement of information security risk and compliance practices across a complex UK operating environment. This is a senior-level role requiring sound judgement, strong stakeholder management and the ability to translate regulatory and security requirements into practical business outcomes.

You will manage the identification, assessment and treatment of information and cyber security risks, maintaining accurate risk registers and reporting material issues to relevant governance forums. Working with business and technology teams, you will develop remediation plans, monitor progress and provide clear, evidence-based advice on risk acceptance, mitigation and escalation.

Key responsibilities will include supporting security and compliance frameworks, policies, standards and procedures; coordinating internal and external assurance activities; preparing audit evidence; and tracking findings through to effective closure. You will assess the security implications of new services, suppliers, projects and operational changes, contributing to security reviews, control design and ongoing control effectiveness assessments.

The role will also involve monitoring changes in applicable legislation, regulation and industry good practice, helping to assess their impact and embedding resulting requirements into the control environment. You will produce management information and risk reports, identify trends and provide constructive challenge where controls or processes do not meet the required standard. Building trusted relationships across technical and non-technical teams will be essential.

Applicants should have substantial experience in information security risk, governance, compliance or assurance, ideally within a large or regulated environment. You will have a strong understanding of recognised security and risk frameworks, audit principles, control testing and third-party risk management. Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 or equivalent experience, are desirable.

You should be confident communicating with senior stakeholders, capable of managing competing priorities and comfortable working independently on complex matters. Strong analytical, written and organisational skills are essential, along with a pragmatic approach to problem-solving and a commitment to maintaining high standards of confidentiality, integrity and professionalism.

£61,388.00 - £79,619.00
Per annum
Added 04/11/2026
Reference: 1xmugf71pig2qt44s5o2

Security Risk and Compliance Management Specialist V - UK

Cardiff, Wales, United Kingdom Permanent Governance and Compliance

Other similar jobs

Senior Security Architect

Added 04/11/2026

We are seeking an experienced Senior Security Architect to define and strengthen security architecture across a complex technology environment. This is a strategic role for a confident security professional who can translate business objectives and evolving threats into practical, resilient security solutions. You will work with technical and business stakeholders to ensure that security is embedded throughout the design, delivery and operation of products, services and infrastructure. You will establish and maintain security architecture principles, patterns, standards and roadmaps, ensuring alignment with business priorities and regulatory obligations. Responsibilities will include assessing proposed solutions, identifying risks and recommending proportionate controls across...

Learn more

Security Architect

Added 23/09/2026

We are seeking an experienced Security Architect to design, develop and maintain secure technology solutions across a complex and evolving IT environment. The successful candidate will define security architecture principles, standards and patterns that support business objectives while protecting critical systems, applications, data and infrastructure. You will work closely with engineering, infrastructure, cloud, development and risk teams to embed security throughout the technology lifecycle, from initial concept and design through implementation and ongoing improvement. Key responsibilities will include assessing current and proposed architectures, identifying security risks and recommending practical mitigations. You will produce architecture documentation, security models, design reviews and...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Head of Information Security, Risk and Compliance

Added 22/09/2026

We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation. Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance...

Learn more

UK Head of IT Risk and Compliance

Added 02/11/2026

An exciting opportunity has arisen for a UK Head of IT Risk and Compliance to lead the development and delivery of a robust technology risk and compliance framework. This senior role will provide strategic direction, assurance and constructive challenge across information technology, cyber security, data protection and operational resilience. You will be responsible for maintaining an effective IT risk management programme, ensuring that risks are identified, assessed, recorded and treated consistently. Working closely with technology and business leaders, you will oversee risk appetite, control effectiveness, remediation plans and management reporting, providing clear insight to senior stakeholders and relevant governance forums....

Learn more

Senior Technology Risk and Compliance Analyst

Added 20/10/2026

We are seeking a Senior Technology Risk and Compliance Analyst to support the effective management of technology risk, information security and regulatory compliance across a complex business environment. The successful candidate will provide expert advice to technology and business stakeholders, helping to identify, assess and manage risks while promoting a strong culture of control and continuous improvement. Key responsibilities will include maintaining technology risk and control frameworks, coordinating risk and control assessments, and monitoring remediation activity to ensure issues are addressed within agreed timescales. You will support internal and external audits, regulatory reviews and assurance activities, preparing clear evidence, reports...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with the development and delivery of cybersecurity strategy, governance, risk and compliance programmes. You will work with senior stakeholders to understand business objectives, assess cyber maturity and translate regulatory, technological and operational requirements into practical, sustainable improvements. This role offers the opportunity to contribute to varied engagements across multiple industries, advising organisations as they strengthen their resilience in an increasingly complex threat landscape. Your responsibilities will include leading and delivering cybersecurity assessments, maturity reviews, risk assessments and compliance engagements; developing security strategies, policies, standards and governance...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business and technology risks, assess current security maturity and design practical, proportionate improvements aligned to regulatory, industry and organisational requirements. This role will involve delivering high-quality advisory engagements across a varied client portfolio, with opportunities to contribute to large-scale transformation programmes and support the development of innovative cybersecurity solutions. Responsibilities will include leading or contributing to cybersecurity strategy reviews, governance assessments, risk and control evaluations, regulatory compliance reviews...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking an experienced Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business priorities, assess current security maturity and develop practical, risk-based improvements that align with regulatory obligations, industry standards and organisational objectives. This is an opportunity to contribute to complex transformation programmes while helping organisations build sustainable and effective security practices. Your responsibilities will include leading or contributing to cybersecurity and GRC engagements, including security strategy development, operating model design, governance reviews, risk assessments, control evaluations, compliance assessments...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with cybersecurity strategy, governance, risk and compliance. You will help organisations understand their cyber risk, strengthen their security posture and develop practical, sustainable approaches to managing technology and information security. Working as part of a collaborative consulting team, you will engage with senior stakeholders, translate business objectives into security priorities and provide clear, commercially focused advice. Your responsibilities will include leading and contributing to cybersecurity assessments, maturity reviews, risk and control evaluations, governance framework design and regulatory compliance initiatives. You will help develop policies, standards, procedures,...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Cybersecurity Governance, Risk and Compliance

Added 06/10/2026

We are seeking an experienced Cybersecurity Governance, Risk and Compliance professional to strengthen the organisation’s information security framework and support the effective management of cyber risk. This role will help ensure that security policies, controls and processes align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to cybersecurity. Key responsibilities will include maintaining and improving cybersecurity governance frameworks, policies, standards and procedures; coordinating enterprise-wide risk assessments; tracking remediation activities; and preparing clear reports for senior leadership and relevant governance committees. You...

Learn more

Cybersecurity Risk and Compliance Associate

Added 22/09/2026

We are seeking a Cybersecurity Risk and Compliance Associate to support the ongoing development, implementation, and monitoring of information security risk and compliance activities. In this role, you will help assess cybersecurity risks, maintain accurate governance documentation, and support the organisation in meeting applicable regulatory, contractual, and internal security requirements. You will work closely with technology, privacy, legal, internal audit, and business teams to promote effective risk management and security-aware decision-making. Key responsibilities include coordinating risk assessments, documenting findings, tracking remediation plans, and monitoring the timely completion of corrective actions. You will assist with maintaining policies, standards, procedures, risk registers,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.