Grc jobs in Gerrards CrossCreate job alerts

Our client is seeking a highly technical application security consultant. This is a hands-on technical role, not a GRC, policy, or compliance position. We are looking for a practitioner with a deep background in Application Security, Secure Coding, or Penetration Testing. You must be able to do more than just relay automated scan results; you need to deeply understand standard vulnerabilities, explain them technically to development teams, and validate that the implemented code remediations are effective. Key Technical Responsibilities: • Vulnerability Remediation: Analyze penetration test report findings, meet with development teams to explain the technical mechanics of the vulnerabilities (e.g., XSS, SQLi, CSRF), and guide them on how to fix them at the code level., • Remediation Validation: Technically validate and test that the remediations applied by the development team are effective and secure., • Secure SDLC Implementation: Embed secure design principles and application security controls directly into the software development lifecycle., • Architecture & Design Reviews: Conduct deep-dive technical security architecture and design reviews for new and existing projects., • Pentest Management: Plan, support, and execute application penetration tests, taking full accountability for driving the technical remediation follow-up., • Cloud Security Guardrails: Provide hands-on security guidance for cloud platforms, specifically across Salesforce, Azure, and AWS., • Threat Modelling: Act as the technical security authority within project streams, identifying threats early in the design phase. Required Technical Skills & Experience: • Deep AppSec Background: Proven, hands-on experience working specifically in Application Security, Penetration Testing, or as a Security-Focused Software Engineer., • Vulnerability Expertise: Absolute fluency in the OWASP Top 10. You must be able to explain how vulnerabilities work, how they are exploited, and exactly how to remediate them., • Developer Collaboration: Demonstrable experience working directly with software development teams, speaking their language, and providing actionable secure coding guidance for common languages/platforms., • Testing Tools: Strong practical knowledge of penetration testing tools, techniques, and manual verification methods., • Cloud Platforms: In-depth technical security knowledge for Salesforce, Azure, and AWS environments. Desirable Skills: • Hands-on experience securing containers and serverless technologies., • Familiarity with security frameworks (NIST CSF, CIS) and compliance requirements (GDPR, PCI-DSS, CRA) from a technical implementation perspective., • Degrees and certifications (e.g., OSCP, OSWE, GWAPT, CISSP) are advantageous; however, we welcome demonstrable, hands-on technical capability

Cyber Security GRC Consultant (DV Cleared).

As a GRC Consultant specialising in Cyber Essentials Plus, you’ll plan and deliver a broad portfolio of client engagements. Collaborate with a highly skilled GRC team. If you're ready to take the next step in your GRC career and work across varied, impactful engagements, we’d love to hear from y

GRC/Security Architect) to join our Professional Services team and support clients in designing, assessing, and strengthening their security strategies, architectures, and cloud environments.

A risk management consultancy is seeking a ServiceNow professional to develop Risk solutions.This role involves designing and configuring ServiceNow applications and requires a recognised degree and ServiceNow CSA certification.You should have at least 4 years of practical experience in ServiceNow s

A leading equity firm in Greater London is looking for a proactive GRC Sales Executive to drive business growth.

Bupa is hiring a GRC Manager for their office in London. Candidates should have experience with GRC platforms, strong Power BI skills, and the ability to improve user training.

This is a senior hire within the Information Security GRC function, acting as deputy to the Head of Information Security & GRC, supporting the leadership and day‑to‑day running of the team. Act as second‑in‑command within the GRC function, supporting the Head of Information Security & GRC ac

As Information Security GRC Lead within our Technology Information Security function, you'll own the governance, risk, and compliance capability for the organisation end to end. If you want to own a GRC function with real organisational reach, this is a strong platform to do it from. Own the informa

A leading firm in Governance and Assurance seeks a Senior Security Consultant to join their GRA team.You will leverage your expertise in cyber security to advise clients on information security and lead technical engagements.The role requires strong knowledge in compliance frameworks and effective s

Job title: Cyber Security Engineer (GRC).

A technology company is seeking a dedicated professional to lead customer adoption project teams.You will manage projects, drive adoption of Diligent solutions, and enhance customer experiences.The ideal candidate has strong project management skills, effective communication abilities, and a custome

Tink is seeking an experienced Information Security GRC Engineering Consultant to lead the implementation of security controls within their offerings.

Isomorphic Labs Limited in London is looking for a Senior Security Specialist to manage third-party security risk and compliance.This role involves enhancing governance measures, coordinating risk management lifecycles, and providing guidance on risk assessments.Ideal candidates will have a strong b

PEI is looking for an Information Security & Compliance Officer based in Greater London.This role involves coordinating security activities, managing compliance initiatives, and overseeing third-party risk management.The ideal candidate will have 3-5 years of experience in information security with

Janus Henderson AAA CLO ETF in London seeks an Information Security Governance, Risk, and Compliance (GRC) Specialist to develop and maintain cybersecurity policies, conduct risk assessments, and ensure compliance with regulations.

A healthcare consulting firm in Greater London seeks an Information Security GRC Analyst to support governance, risk, and compliance efforts.

A leading multinational banking firm is looking for an Information Security – GRC Intern in London.

This role combines Cyber Business Analysis, GRC, and Technical Consultancy, ensuring secure-by-design principles are embedded throughout the engineering process.

Quilter, a leading financial services provider, is hiring for a role focused on risk governance in their Southampton office.The position involves oversight of risk management activities, ensuring compliance and facilitating effective decision-making.Candidates should have a strong background in risk

A career at Janus Henderson is more than a job, it’s about investing in a brighter future together.Janus Henderson’s mission is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world‑class service.We do this by protect

Cyber Security GRC Consultant (DV Cleared).

A leading investment management firm in the UK is seeking a Cybersecurity Analyst to develop and manage cybersecurity policies, conduct risk assessments, and ensure compliance with regulations.The ideal candidate will have a Bachelor's degree in a related field, 3-5 years of experience in informatio

Information Security GRC Risk Manager. You’ll support the Information Security (InfoSec) GRC Lead to deliver effective risk management, ensuring risks are consistently identified, assessed and managed and that appropriate governance, including policies and standards, supports effective risk mitiga

The ideal candidate has extensive GRC controls experience and relevant professional qualifications.

A global software provider is seeking an experienced GRC Analyst to join their IT Security team in Hammersmith, London.

A cybersecurity consultancy in the United Kingdom is looking for a GRC Consultant specializing in Cyber Essentials Plus.

A leading cybersecurity consultancy in the United Kingdom is seeking a Senior Security Consultant to guide clients on information security and lead technical engagements.The ideal candidate will possess extensive experience in cyber governance, skills in stakeholder management, and a strong knowledg

The GRC Analyst’s mission is to provide independent, objective assurance and consulting principles to improve MoonPay’s regulatory compliance program. Proven experience with tools such as Google Workspace, Mac OS, SharePoint/GRC Platforms, Okta/Active Directory, Jira/Linear.

You’ll build on your prior experience from a GRC or an information security role, within a technology company, to support our ambitious company growth plans. Have been in an information security or GRC role, within a technology company and hold either a ISO 27001 Lead Implementer or Lead Auditor c

Wise is seeking an experienced Security GRC Lead to join their Security Team in Greater London.

The role involves architecting and implementing ServiceNow GRC solutions, translating business risk needs into scalable designs, and providing governance.

A leading technology firm is seeking an IT GRC Sox Specialist for a 1-year fixed-term contract based in London.

A growing cybersecurity firm in the UK is looking for a Manager, GRC Engineering to lead client engagements and manage compliance programs under frameworks like SOC 2 and ISO 27001.

Starling Bank is seeking an Information Security professional to join their Engine team.In this role, you will manage compliance programs including ISO 27001, SOC 2, and PCI DSS, and collaborate with various teams to ensure security standards are met.The ideal candidate will have at least 3 years of

Continuous Improvement: Identify opportunities to improve the effectiveness and efficiency of our GRC program and related processes. Experience with GRC software is a plus.

A leading governance technology firm is looking for a Solutions Engineer II to act as a trusted advisor to clients, translating compliance challenges into actionable solutions.The role demands strong presentation and customer interaction skills, a background in Ethics & Compliance, and the ability t

A leading GRC solutions company is seeking a Solution Consultant to join their Customer Services Team in London. Candidates should have 9-14 years of experience, familiarity with GRC frameworks, and excellent communication skills.

A Global Saas Organisation requires a Contractdata governance and compliance specialist to rapidly assess and unify a fragmented global compliance landscape within a fast-paced SaaS environment.The role will define direction, map current certification and audit activity, and deliver clear, prioritis

This role will lead a GRC Solution Sales team across diverse EMEA markets. Expereince selling GRC, audit or risk solutions is highly advantageous.

A leading consultancy firm is seeking IT Auditors to join their central GRC team in London within the Luxury Lifestyle and Leisure sector.

This senior role involves owning the full sales cycle, driving new business for a GRC platform among mid-market and enterprise customers.

A leading SaaS company is seeking a Global Account Executive for their Capital Markets division in London.The role involves managing the full sales cycle and leveraging existing networks to drive growth in key markets.Candidates should have over 7 years of experience in SaaS sales, specifically with

Mitratech seeks a Sales Consultant specializing in Governance, Risk, and Compliance (GRC) to drive growth in the DACH region and the UK.

A leading security consultancy in Greater London seeks a Senior Security Consultant with extensive experience in cyber governance and risk management.The role involves leading compliance engagements, assessing client risks, and designing information security policies.Ideal candidates will possess re

Information Security Governance, Risk, and Compliance (GRC) Specialist.

We are seeking a Manager, GRC Engineering who leads with a client‑first mindset and brings exceptional relationship management skills to every engagement.