Grc jobs in MitchamCreate job alerts

Job Title: Security Consultant/Architect Location: London (hybrid) Length: 6 months PAYE only Overall purpose of the role Are you a security professional with a "shift-left" mindset and a passion for building secure-by-design platforms? Join Barclaycard Payments as we build a brand-new, cloud-native, and fully independent fintech-style merchant acquiring platform. This isn't about maintaining legacy systems; it’s about building a target-state platform from the ground up. As a Security Consultant / Analyst , you will be embedded within the CISO function, working directly with engineering and product teams to ensure security is woven into the fabric of the GAIA roadmap. You will act as a bridge between high-level security standards and technical execution. This role is a blend of Cyber Business Analysis, GRC (Governance, Risk, and Compliance), and Technical Consultancy. Key Accountabilities: Secure-by-Design: Provide pragmatic security guidance to engineering workstreams, reviewing designs and technical specifications to identify risks early in the SDLC. Control Mapping & BA: Perform deep-dive business analysis to map cyber controls against the GAIA roadmap, ensuring alignment with the Barclays Cyber Control Library and refreshed Cyber Standards. Cloud & DevOps Security: Support the secure configuration of AWS workloads, CI/CD pipelines (GitHub), and containerised environments (Docker/Kubernetes). Compliance & Frameworks: Ensure the platform is built to be PCI DSS compliant, utilizing frameworks such as ISO 27001/2 and NIST CSF . Risk Orchestration: Help translate complex technical risks into business-relevant terms for stakeholders, ensuring all risks are logged, understood, and mitigated. Assurance: Assist in preparing for penetration testing, remediating findings, and validating control improvements. Key Skills: We are looking for a high-energy consultant who has spent the last 5+ years in Cyber Security, ideally within Fintech or Financial Services. You should be comfortable "spinning plates" in a greenfield environment and have a strong background in reporting to CISO leadership. Essential Experience: Cyber experience within Fintech/Financial Services: Proven experience in security consultancy, advisory, or GRC roles. Cyber Business Analysis: At least 2 years of recent experience in mapping cyber controls and navigating complex project roadmaps. Framework Fluency: Deep understanding of ISO 27001/2, NIST CSF, and PCI DSS. Cloud & Modern Engineering: A solid grasp of cloud implementations (AWS preferred) and secure development lifecycle principles. Stakeholder Mastery: The ability to challenge and influence developers, architects, and risk officers effectively. Desirable Skills: Experience securing End User Compute (EUC), specifically MacBooks managed via JAMF. Administration and securing of Google Workspace environments. Knowledge of merchant acquiring, payment flows, and fintech ecosystems. Security certifications (CISM, CISSP, or equivalent) are a plus. About Barclays Barclays is a British universal bank. It is diversified by business, by different types of customers and clients, and by geography. Barclays businesses include consumer banking and payments operations around the world, as well as a top-tier, full service, global corporate and investment bank, all of which are supported by its service company which provides technology, operations and functional services across the Group. Values Everything Barclays does is shaped by its five values of Respect, Integrity, Service, Excellence and Stewardship. The Barclays values inform the foundations of its relationships with customers and clients, but they also shape how Barclays measures and rewards the performance of colleagues. Simply put, success is not just about what you achieve, but about how you achieve it. Diversity Barclays aims to foster a culture where individuals of all backgrounds feel confident in bringing their whole selves to work, feel included and their talents are nurtured, empowering them to contribute fully to Barclays vision and goals. Hybrid Working Barclays is currently in the early stages of implementing a hybrid working environment, which means that many colleagues spend part of their working hours at home and part in the office, depending on the nature of the role they are in. Barclays is flexible on how this works and it may continue to change and evolve. Depending on your team, typically this means that colleagues spend a minimum of between 20% to 60% of their time in the office, which could be over a week, a month or a quarter. However, some colleagues may choose to spend more time in the office over a typical period than their role type requires. Barclays also has a flexible working process where, subject to business needs, all colleagues globally are able to request work patterns to reflect their personal circumstances Your Benefits As a contract employee of Randstad Sourceright, you’ll receive a wide range of financial and personal benefits. There’s enrolment in a pension plan (after 12 weeks on assignment) and holiday pay. You’ll also get 24/7 access to an Employee Assistance Programme, designed to help you deal with any problems that could be affecting your home or work life. Plus, there’s discounts at heaps of high street shops, restaurants and entertainment - from Asda to Zizzi Italian restaurants.

Cyber Security GRC Consultant (DV Cleared).

GRC/Security Architect) to join our Professional Services team and support clients in designing, assessing, and strengthening their security strategies, architectures, and cloud environments.

If you're ready to take the next step in your GRC career and work across varied, impactful engagements, we’d love to hear from you. Join our growing GRC team and lead high‑impact engagements that help organisations strengthen their cyber resilience and compliance posture. As a GRC Consultant spe

Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c.

The GRC Analyst’s mission is to provide independent, objective assurance and consulting principles to improve MoonPay’s regulatory compliance program. Proven experience with tools such as Google Workspace, Mac OS, SharePoint/GRC Platforms, Okta/Active Directory, Jira/Linear.

O Associates is seeking a Senior SAP GRC Support Engineer to join a fully remote and high-performing 24/7 support team. Candidates should have strong experience in SAP GRC Process Control, a background in SAP support, and the ability to resolve issues independently.

This role promotes a customer-first mindset and involves leading strategic initiatives to enhance the uptake of GRC solutions.

A leading industrial software company is hiring an IT GRC Sox Specialist for a 1-year Fixed Term Contract in the UK.

Vanta is hiring a Senior Product Manager in the UK to lead the Frameworks Experience team.You will redefine how compliance and security programs are designed and adopted, ensuring that our customers can efficiently implement these programs.The role involves developing product strategy, understanding

Take the lead, in conjunction with SE & CS, to develop strategies and approaches to drive increased adoption of Diligent Solutions and in expansion plays for GRC use cases. Preferred experience coming from within the GRC domain.

GRC Lead – Privacy, AI & Security. We’re looking for a hands‑on GRC Lead to own the operational delivery of governance, risk, and compliance across. Run GRC frameworks across ISO 27001, ISO 27701 (primary focus), and ISO 42001.

At CoreStream GRC, we provide organizations with technology to efficiently manage risk, compliance, and audit activities through a risk management solution that is both user-friendly and user-centered. CoreStream GRC’s client base includes public sector ministries, governments, and FTSE and Fortun

Starling Bank Limited seeks a Governance, Risk, and Compliance specialist to help maintain its compliance programs, focusing on ISO 27001, SOC 2, and PCI DSS standards.The role involves managing compliance processes, supporting audits, and collaborating with various teams to enhance security protoco

Key responsibilities include leading the GRC strategy, engaging with regulatory bodies, and managing audits for compliance.

The ideal candidate should have a strong understanding of GRC frameworks and experience in risk management.

A forward-thinking technology firm in Greater London is seeking a Senior Information Security Analyst.This role involves managing the Information Security Management System (ISMS) aligned with ISO 27001, conducting risk assessments, and ensuring compliance with regulatory requirements.Ideal candidat

We are seeking an experienced Head of InfoSec GRC & Awareness to lead governance, risk, compliance, and security awareness initiatives across an organisation at a time of significant modernisation. The key responsibilities of the Head of Information Security GRC & Awareness are:. Head of InfoSec GRC

Mitratech seeks a Sales Consultant specializing in Governance, Risk, and Compliance (GRC) to drive growth in the DACH region and the UK.

A leading SaaS company is seeking a Global Account Executive for their Capital Markets division in London.The role involves managing the full sales cycle and leveraging existing networks to drive growth in key markets.Candidates should have over 7 years of experience in SaaS sales, specifically with

Information Security Governance, Risk, and Compliance (GRC) Specialist.

Expereince selling GRC, audit or risk solutions is highly advantageous. This role will lead a GRC Solution Sales team across diverse EMEA markets.

A leading consultancy firm is seeking IT Auditors to join their central GRC team in London within the Luxury Lifestyle and Leisure sector.

A Global Saas Organisation requires a Contractdata governance and compliance specialist to rapidly assess and unify a fragmented global compliance landscape within a fast-paced SaaS environment.The role will define direction, map current certification and audit activity, and deliver clear, prioritis

A leading security consultancy in Greater London seeks a Senior Security Consultant with extensive experience in cyber governance and risk management.The role involves leading compliance engagements, assessing client risks, and designing information security policies.Ideal candidates will possess re

Premium Credit Limited is seeking an Enterprise & Operational Risk Transformation Lead to drive the design and implementation of their GRC software platform and manage the enterprise and operational risk framework.

This includes maintaining existing security measures while continuously enhancing our governance, risk management and compliance (GRC) frameworks and policies. Significant experience in Information Security and GRC.

IT Security, GRC or related roles.

We are seeking a Manager, GRC Engineering who leads with a client‑first mindset and brings exceptional relationship management skills to every engagement.

This senior role involves owning the full sales cycle, driving new business for a GRC platform among mid-market and enterprise customers.

The Guardian is seeking an Information Security GRC Risk Manager to join their Group Technology & Data team in Greater London.

The ideal candidate has over 3 years of experience in GRC roles and possesses strong communication skills.

A leading global blockchain ecosystem is looking for an experienced Internal Audit professional with a minimum of 6 years in internal controls.This role involves conducting internal control reviews, supporting regulatory examinations, and ensuring timely closure of findings.Ideal candidates will hav

Sanderson Government & Defence is seeking a Cyber GRC specialist to manage cyber security governance and risk across the Service Group in London.

The ideal candidate will possess deep expertise in Governance, Risk and Compliance (GRC), particularly with SAP environments.

A leading global business transformation partner is seeking an SAP Security Consultant in Greater London.This role involves delivering innovative SAP projects, driving security implementations, and collaborating with top-tier clients.Ideal candidates will have significant experience in SAP project d

Synthesia is seeking a full-time GRC Analyst to enhance our governance, risk, and compliance program.

PEI Group is seeking an Information Security & Compliance Officer based in Greater London.This role is pivotal in coordinating security activities, supporting compliance initiatives, and managing third-party risks.The ideal candidate should possess 3–5 years in information security and have experi

A leading gaming company is looking for a Governance, Risk & Compliance (GRC) Analyst to join their InfoSec team in Sunderland.

The Security Governance, Risk and Compliance team (GRC) is a sub-team of Security.

This role involves planning and executing IT audits, client risk assessments, and GRC Advisory engagements.

A leading company in digital finance is seeking a GRC Analyst to enhance their regulatory compliance program.

Job Title:** IT GRC Sox Specialist - Regulatory FrameworkLocation: London | CambridgeEmployment Type: 1 year Fixed Term ContractThe JobThe IT GRC Sox Specialist will support the IT GRC team in embedding effective IT governance, risk, and compliance across the organisation. Experience using r

A leading technology company in London seeks a Governance, Risk and Compliance Analyst to enhance core compliance frameworks and address security risks associated with AI technologies.The role involves evaluating security for AI systems, updating security policies, and promoting security awareness a

Cyber Security training courses is seeking an experienced Information Security Manager in London, focusing on Governance, Risk, and Compliance (GRC).

Coach and mentor Technology and GRC Governance Analysts.

LocationLondon, England, United Kingdom# Enterprise Technology Engineer (GRC) – ServiceNow Developer at N Consulting LtdLocationLondon, England, United KingdomSalary£600 - £650 /dayJob TypeContractDate PostedApril 1st, 2026Apply NowWork mode: Hybrid Number of days a week worked in the office: 2