Job Search

We are seeking a GRC Engineer to support the development, implementation and continuous improvement of governance, risk and compliance practices across a complex technology environment. This role will help ensure that information security controls, policies and processes are effective, measurable and aligned with business objectives and applicable regulatory requirements.

You will work closely with security, technology, legal, privacy, procurement and operational teams to identify risks, assess control effectiveness and coordinate remediation activity. Responsibilities will include maintaining risk registers, supporting internal and external audits, preparing evidence, tracking findings and producing clear reports for technical and non-technical stakeholders. You will also contribute to the review and maintenance of security policies, standards, procedures and control frameworks.

The role will involve mapping controls to recognised frameworks and regulations, such as ISO 27001, NIST, CIS Controls, SOC 2 or UK data protection requirements. You will help manage third-party risk assessments, security questionnaires, exceptions and risk acceptances, ensuring that actions are properly documented and completed within agreed timescales. You may also support security awareness initiatives and the delivery of governance reporting, metrics and dashboards.

Applicants should have experience in a governance, risk, compliance, information security or technology assurance role, with a sound understanding of security controls, risk assessment methodologies and audit processes. Familiarity with GRC platforms, evidence management and control testing is desirable. Relevant qualifications, such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, would be advantageous.

You should be analytical, organised and confident managing multiple priorities. Strong written and verbal communication skills are essential, as is the ability to explain risk and compliance requirements clearly to varied audiences. A collaborative approach, attention to detail and the confidence to challenge constructively will be important. This is an opportunity to help strengthen security governance while supporting practical, risk-based solutions across the organisation.

An Interim Cyber Security Internal Auditor is required to provide independent assurance over the organisation’s information security, technology and cyber risk controls. The successful candidate will assess the design and operating effectiveness of controls, identify vulnerabilities and evaluate whether processes align with relevant policies, regulatory expectations and recognised frameworks.

Key responsibilities will include planning and delivering risk-based internal audits across areas such as access management, identity and privilege controls, vulnerability management, incident response, security monitoring, data protection, third-party risk, business continuity and cloud security. You will conduct interviews, review documentation and technical evidence, perform control testing and analyse findings to determine the potential impact and root cause of any weaknesses.

You will prepare clear and well-supported audit reports, setting out conclusions, risks and practical recommendations for improvement. The role will also involve discussing findings with control owners and senior stakeholders, agreeing appropriate management actions, monitoring remediation activity and providing regular updates on progress. Where required, you may contribute to wider assurance reviews, risk assessments and the development of the annual audit plan.

Applicants should have proven experience in cyber security, information technology or internal audit, ideally gained within a complex or highly regulated environment. A strong understanding of recognised frameworks and standards, such as ISO 27001, NIST, COBIT or the Cyber Assessment Framework, is desirable. Experience of auditing technical controls and translating complex issues into concise, business-focused reports is essential.

You will need excellent analytical, written and verbal communication skills, together with the confidence to challenge constructively and work effectively with stakeholders at all levels. Professional qualifications such as CISA, CISSP, CRISC, CIA or equivalent experience would be advantageous. The interim nature of the appointment requires someone who can quickly understand the environment, build effective working relationships and deliver high-quality assurance within agreed timescales.

An experienced IT Security Auditor is sought to assess, strengthen and improve information security controls across a complex technology environment. This role will provide independent assurance that systems, processes and controls are designed and operating effectively, while helping to identify opportunities to reduce cyber risk and support regulatory compliance.

Key responsibilities will include planning and delivering risk-based IT and information security audits, reviewing access controls, infrastructure, cloud services, applications, networks, data protection and third-party arrangements. You will conduct interviews, examine documentation, analyse technical evidence and test controls against recognised frameworks and applicable legislation. The role will also involve evaluating incident management, vulnerability management, change control, business continuity and disaster recovery arrangements.

You will prepare clear, well-evidenced audit reports, highlighting control weaknesses, root causes, risk implications and practical recommendations. Working with control owners and senior stakeholders, you will agree remediation plans, monitor progress and validate completed actions. You may also contribute to risk assessments, policy reviews, security projects and continuous improvement initiatives, providing constructive challenge while maintaining effective working relationships across technical and non-technical teams.

Applicants should have proven experience in IT audit, information security, cyber risk or a closely related discipline, together with a sound understanding of security principles, governance and control frameworks. Familiarity with standards such as ISO 27001, COBIT, NIST or CIS Controls is desirable, as is experience auditing cloud environments and suppliers. A relevant professional qualification, such as CISA, CISSP, CISM or equivalent experience, would be advantageous.

You will need strong analytical and report-writing skills, excellent attention to detail and the confidence to communicate findings clearly at all levels. The successful candidate will be organised, pragmatic and capable of managing competing priorities while maintaining independence, professional judgement and confidentiality.

An exciting opportunity has arisen for a UK Head of IT Risk and Compliance to lead the development and delivery of a robust technology risk and compliance framework. This senior role will provide strategic direction, assurance and constructive challenge across information technology, cyber security, data protection and operational resilience.

You will be responsible for maintaining an effective IT risk management programme, ensuring that risks are identified, assessed, recorded and treated consistently. Working closely with technology and business leaders, you will oversee risk appetite, control effectiveness, remediation plans and management reporting, providing clear insight to senior stakeholders and relevant governance forums.

The role will also lead the organisation’s IT compliance and assurance activities, including the interpretation of regulatory requirements, internal policies and recognised industry standards. You will coordinate audits, assessments and control testing, manage responses to findings, and ensure that agreed actions are delivered within appropriate timescales. A key focus will be supporting compliance with UK regulatory expectations, data protection obligations and information security best practice.

You will build strong relationships with internal teams, external advisers and assurance providers, promoting a culture in which risk ownership and continuous improvement are embedded. The role will contribute to third-party risk management, business continuity, disaster recovery, incident management and technology change governance, ensuring that risk considerations are addressed throughout the technology lifecycle.

Applicants should have substantial experience in IT risk, compliance, information security or technology assurance, ideally within a complex and regulated environment. You will bring a strong understanding of control frameworks and standards such as ISO 27001, COBIT, NIST or equivalent, alongside experience of regulatory engagement, audit management and executive-level reporting. Relevant professional qualifications, such as CISA, CRISC, CISSP, CISM or a comparable risk qualification, would be advantageous.

We are seeking an inclusive and confident leader with excellent communication and influencing skills. You will be comfortable translating technical and regulatory issues for non-technical audiences, challenging constructively and delivering practical solutions. This is an opportunity to shape a mature risk culture while supporting secure, resilient and compliant technology services across the UK.

An opportunity has arisen for a Senior IT Risk and Governance Analyst to support the development, implementation and continuous improvement of technology risk and governance practices. This role will help strengthen the organisation’s control environment, promote effective risk management and provide clear insight to senior stakeholders across technology and the wider business.

Working closely with technology, security, audit, compliance and business teams, you will identify, assess and monitor IT risks, ensuring that appropriate controls and mitigation plans are in place. You will maintain risk registers, track remediation activity and provide regular reporting on key risks, issues, control effectiveness and emerging threats. The role will also involve supporting governance forums and preparing concise, accurate information for senior management.

Your responsibilities will include developing and maintaining IT policies, standards, procedures and control frameworks; coordinating risk and control self-assessments; supporting internal and external audits; and monitoring compliance with relevant regulatory, legal and industry requirements. You will contribute to the review of third-party technology risks, assist with information security and operational resilience activities, and help embed a consistent risk-aware culture across technology teams.

The successful candidate will have substantial experience in IT risk, governance, controls, audit or information security, ideally within a complex or regulated environment. You will be confident interpreting technical and business information, assessing risk and translating complex issues into clear, practical recommendations. Experience with recognised frameworks such as COBIT, ITIL, ISO 27001, NIST or similar would be advantageous.

Strong analytical, organisational and stakeholder management skills are essential, together with excellent written and verbal communication. You will be comfortable challenging constructively, managing competing priorities and working independently while contributing effectively to a collaborative team. Relevant professional qualifications, such as CISA, CRISC, CISM, CISSP or equivalent experience, would be desirable.

An opportunity has arisen for a Principal Adviser, Ethics & Compliance Privacy to provide authoritative advice on privacy, data protection and ethical practice across a complex organisation. This is a senior role for an experienced professional who can translate legislation, regulatory expectations and best practice into practical, proportionate guidance that supports effective decision-making.

You will lead the development, implementation and continuous improvement of privacy and compliance frameworks, policies and procedures. Key responsibilities will include advising on data protection requirements, conducting and reviewing Data Protection Impact Assessments, supporting privacy-by-design approaches, and providing guidance on information-sharing, records management, retention and the lawful use of personal data. You will also contribute to the management of privacy risks, incidents, breaches and regulatory enquiries.

Working with senior leaders and a wide range of internal and external stakeholders, you will promote a strong culture of ethical conduct and accountability. You will deliver training and awareness activities, prepare clear reports and recommendations for governance forums, and monitor compliance with relevant legislation, including the UK GDPR and the Data Protection Act 2018. The role will also involve horizon scanning for legal and regulatory developments and advising on their implications.

We are seeking a confident and credible adviser with substantial experience in privacy, data protection, ethics or compliance, ideally within a large or highly regulated environment. You will have detailed knowledge of UK data protection law, excellent analytical and problem-solving skills, and the ability to communicate complex issues clearly to both technical and non-technical audiences. A relevant professional qualification or membership of an appropriate privacy, legal, risk or compliance body would be advantageous.

You will be organised, pragmatic and able to manage competing priorities while maintaining a high level of professional judgement. The successful candidate will demonstrate integrity, discretion and the ability to influence at senior level, together with a commitment to continuous improvement and responsible use of information.

We are seeking a Cyber Security Governance, Risk & Assurance Specialist to strengthen security oversight, manage technology risk and support the continuous improvement of cyber security controls. This is an opportunity to play a key role in helping an organisation understand and manage its cyber risks while maintaining compliance with relevant regulatory, industry and internal requirements.

You will develop, maintain and review cyber security policies, standards, procedures and control frameworks. Working with stakeholders across technology, risk, compliance and the wider business, you will identify security risks, assess their potential impact, agree appropriate treatment plans and monitor progress through to completion. You will also support risk reporting, governance forums and management information, providing clear and concise advice to senior stakeholders.

The role will involve coordinating and supporting assurance activities, including internal and external audits, control assessments, supplier reviews and evidence gathering. You will help track findings, validate remediation activity and ensure that lessons learned are incorporated into security processes. You may also contribute to security assessments for new technologies, projects, services and third-party arrangements, ensuring that risks are identified early and managed effectively.

The successful candidate will have experience in cyber security governance, risk management, compliance or assurance, ideally within a complex or regulated environment. You will have a sound understanding of security frameworks and standards such as ISO 27001, NIST, CIS Controls or similar, together with experience translating technical risks into clear business impacts and practical recommendations.

Strong communication, organisation and stakeholder management skills are essential. You should be confident challenging constructively, managing multiple priorities and producing accurate written reports for both technical and non-technical audiences. Relevant professional qualifications, such as CISM, CRISC, CISSP, ISO 27001 or equivalent experience, would be advantageous. In return, you will have the opportunity to influence security maturity, support meaningful risk reduction and develop your career within a collaborative and evolving environment.

An exciting opportunity has arisen for a UK Head of IT Risk & Compliance to lead the development and delivery of a robust technology risk and compliance framework across a complex, multi-site environment. This senior role will provide strategic direction, challenge and assurance, ensuring that information technology risks are identified, managed and reported effectively.

You will own the IT risk management lifecycle, including risk identification, assessment, treatment, monitoring and reporting. Working closely with technology, information security, internal audit, legal and business stakeholders, you will ensure that appropriate controls are designed, implemented and maintained. You will also oversee compliance with relevant legislation, regulatory expectations, industry standards and internal policies.

Key responsibilities will include maintaining the IT risk and control framework; leading control testing and assurance activity; coordinating responses to internal and external audits; tracking remediation plans; and producing clear, insightful reports for senior leadership and governance committees. You will support the management of technology-related incidents, third-party risks, resilience assessments and regulatory submissions, while promoting a strong culture of accountability and continuous improvement.

The successful candidate will be an experienced IT risk, governance or compliance professional with a strong understanding of technology controls, cyber security, operational resilience and audit principles. You will have experience operating at a senior level within a regulated, complex or highly controlled environment, together with a track record of influencing stakeholders and translating technical risks into clear business-focused recommendations.

Relevant qualifications such as CISA, CRISC, CISM, CISSP, ISO 27001 or equivalent experience would be advantageous. You will combine excellent communication and presentation skills with sound judgement, strong analytical capability and the confidence to challenge constructively. The ability to manage competing priorities, lead through influence and deliver practical, proportionate solutions will be essential.

This is an opportunity to shape the technology risk and compliance agenda, strengthen organisational resilience and make a visible contribution to effective governance at a senior level.

We are seeking an experienced Security GRC Lead to drive the development, implementation and continuous improvement of governance, risk and compliance practices across the organisation. This is a key role for a security professional who can translate regulatory obligations and business requirements into practical, proportionate controls that protect information, technology and customers.

You will lead the security governance framework, ensuring policies, standards and procedures remain current, effective and aligned with recognised industry practices. You will maintain the information security risk register, coordinate risk assessments, advise on risk treatment plans and provide clear reporting to senior stakeholders. The role will also involve monitoring control performance, identifying areas for improvement and supporting a culture of accountability and continuous security enhancement.

Key responsibilities include managing internal and external audits, coordinating evidence collection, tracking remediation activity and ensuring that regulatory and contractual commitments are met. You will support assessments against relevant frameworks such as ISO 27001, NIST, CIS Controls or equivalent, and contribute to business continuity, third-party risk management, data protection and supplier assurance activities. You will also develop meaningful metrics and management information to communicate security posture, trends and emerging risks.

Working closely with technology, legal, privacy, procurement and operational teams, you will provide pragmatic guidance on security requirements throughout the project and supplier lifecycle. You will help embed security by design, review exceptions and ensure that agreed controls are understood and consistently applied.

The successful candidate will have substantial experience in information security governance, risk and compliance, together with a strong understanding of security frameworks, audit principles and regulatory expectations. Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable. You will be an excellent communicator, confident engaging with senior audiences and capable of influencing without direct authority. Strong analytical, organisational and stakeholder management skills are essential, as is the ability to balance commercial priorities with effective risk management.

We are seeking an experienced Staff GRC Analyst to help strengthen governance, risk and compliance practices across a complex technology environment. This is an influential role for a proactive professional who can translate regulatory expectations, business requirements and security principles into practical, sustainable controls.

You will lead and contribute to governance, risk and compliance initiatives, working closely with security, technology, legal, privacy, internal audit and operational teams. Your responsibilities will include maintaining risk registers, coordinating risk assessments, evaluating control design and effectiveness, and supporting the timely remediation of identified issues.

You will help develop, review and maintain policies, standards, procedures and control frameworks aligned with recognised industry practices and applicable regulations. The role will also involve coordinating internal and external audits, preparing evidence, tracking findings and producing clear reports for senior stakeholders. You will support the assessment of suppliers and third parties, contribute to security and compliance monitoring, and identify opportunities to improve processes through automation and better data quality.

The successful candidate will have substantial experience in governance, risk and compliance, information security, technology risk or a related discipline. You should be confident interpreting regulatory and contractual requirements and mapping them to controls and business processes. Experience with frameworks such as ISO 27001, SOC 2, NIST, CIS Controls or similar is desirable, along with familiarity with privacy, risk management and audit principles.

You will be an excellent communicator, capable of presenting complex issues clearly to both technical and non-technical audiences. Strong analytical, organisational and documentation skills are essential, as is the ability to manage competing priorities and work independently. A relevant professional qualification, such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, is advantageous.

This opportunity offers the chance to shape mature GRC capabilities, influence decision-making and make a measurable contribution to the organisation’s security, resilience and regulatory readiness.