Grc jobs in OxfordCreate job alerts

Role: Cyber Security Assurance Specialist Salary/Rate: £45-55 per hr inside IR35 Location: Hybrid, near Oxford 3x per week Contract Duration: until December 2026 We are currently looking for a Cyber Security Assurance Specialist for our government client. This Cyber Security Assurance Specialist role is hybrid, based between working 3 days per week on site in Abingdon Oxfordshire and the remainder of the week working remotely. There is no further flexibility with the on-site requirement. The contract for this Cyber Security Assurance Specialist position is until December 2026, with potential to extend, operating inside IR35. Security Clearance: eligible for Security Check ("SC Clearance") This role is inside IR35 - Due to the service of the role, it will now be based on an Umbrella solution. Essential skills/experience required: • Demonstrable experience in designing and implementing secure infrastructure or cloud architectures., • Proven experience with risk assessment methodologies and maintaining enterprise risk registers., • Working knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating)., • Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks., • Experience conducting or supporting security audits and implementing remediation plans., • Proficiency in assessing and securing platforms such as Entra ID (Azure AD), Microsoft 365 E5, Azure IaaS/PaaS, Windows/Linux/Unix., • Strong knowledge of security tooling such as SIEM, endpoint detection (EDR/XDR), and vulnerability management platforms., • Hands-on experience with policy development, access control models and logging standards., • Experience supporting assurance activities or government-mandated reviews (e.g. GovAssure, Secure by Design)., • Knowledge of Incident Management, Vulnerability Assessments, SIEM & SOC Systems., • Familiarity with ITSM workflows and change control procedures, • Experience designing or reviewing secure software supply chain and CI/CD security., • Ability to interpret CVEs, CVSS scores, and threat intelligence feeds., • Strong stakeholder engagement and communication skills with an ability to produce technical reports and articulate risk to non-specialists., • Conduct technical risk assessments on IT/OT/cloud systems, • Provide secure design guidance to digital projects (cloud/infra/app), • Maintain and update the security risk register quarterly, • Evaluate 2 critical technical changes for architectural risk (e.g., network reconfig, app onboarding), • Document evidence gathering and remediation planning for Secure-by-design,CAF and GovAssure, • Conduct internal technical assurance reviews aligned to GovAssure/CAF/ISO27001 domains, • Maintain traceability of security controls to frameworks (NIST, CE+, NCSC),, • Evaluate Suppliers against internal and external risk criteria for Assurance., • Contribute to the adoption of Zero Trust principles in platform design, • Provide secure-by-design input into infrastructure/cloud/app initiatives, • Define security control templates for new deployments (e.g., SaaS, Azure service, OT upgrade), • Deliver knowledge sessions to technical teams (secure config, threats, compliance), • Develop secure configuration guidance for platforms (e.g. Entra ID, Linux, M365), • Represent Cyber Security in architecture/design authorities, • Produce and maintain technical security reports for assurance cycles, • Support compliance audit evidence packs (GovAssure/CAF, CE+, ISO 27001), • Develop or update security standard documents (e.g. threat modelling, vulnerability mgmt), • Support cyber input for IT, research or OT programmes, • Work with IT teams to co-author and test secure configuration standards and playbooks, • Support security policy application in hybrid cloud, infra, and app settings Should you require reasonable adjustments at any point during the recruitment process or if there is a better way for us to communicate, please do let us know. Security, Cyber, Infosec, Information Security, GRC, Assurance, Compliance, Risk, Vulnerability Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment.

Cyber Security GRC Consultant (DV Cleared).

As a GRC Consultant specialising in Cyber Essentials Plus, you’ll plan and deliver a broad portfolio of client engagements. Collaborate with a highly skilled GRC team. If you're ready to take the next step in your GRC career and work across varied, impactful engagements, we’d love to hear from y

GRC/Security Architect) to join our Professional Services team and support clients in designing, assessing, and strengthening their security strategies, architectures, and cloud environments.

IT Internal Audit Manager - FTSE 100 (Cyber or GRC). IT audit, technology risk, cyber, or GRC.

Experience with GRC software is a plus. Continuous Improvement: Identify opportunities to improve the effectiveness and efficiency of our GRC program and related processes.

A leading cybersecurity consultancy in the United Kingdom is seeking a Senior Security Consultant to guide clients on information security and lead technical engagements.The ideal candidate will possess extensive experience in cyber governance, skills in stakeholder management, and a strong knowledg

A career at Janus Henderson is more than a job, it’s about investing in a brighter future together.Janus Henderson’s mission is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world‑class service.We do this by protect

Cyber Security GRC Consultant (DV Cleared).

A leading investment management firm in the UK is seeking a Cybersecurity Analyst to develop and manage cybersecurity policies, conduct risk assessments, and ensure compliance with regulations.The ideal candidate will have a Bachelor's degree in a related field, 3-5 years of experience in informatio

The GRC Analyst’s mission is to provide independent, objective assurance and consulting principles to improve MoonPay’s regulatory compliance program. Proven experience with tools such as Google Workspace, Mac OS, SharePoint/GRC Platforms, Okta/Active Directory, Jira/Linear.

You’ll build on your prior experience from a GRC or an information security role, within a technology company, to support our ambitious company growth plans. Have been in an information security or GRC role, within a technology company and hold either a ISO 27001 Lead Implementer or Lead Auditor c

Starling Bank is seeking an Information Security professional to join their Engine team.In this role, you will manage compliance programs including ISO 27001, SOC 2, and PCI DSS, and collaborate with various teams to ensure security standards are met.The ideal candidate will have at least 3 years of

The ideal candidate has extensive GRC controls experience and relevant professional qualifications.

A leading governance technology firm is looking for a Solutions Engineer II to act as a trusted advisor to clients, translating compliance challenges into actionable solutions.The role demands strong presentation and customer interaction skills, a background in Ethics & Compliance, and the ability t

A cybersecurity consultancy in the United Kingdom is looking for a GRC Consultant specializing in Cyber Essentials Plus.

A global software provider is seeking an experienced GRC Analyst to join their IT Security team in Hammersmith, London.

Wise is seeking an experienced Security GRC Lead to join their Security Team in Greater London.

Quilter, a leading financial services provider, is hiring for a role focused on risk governance in their Southampton office.The position involves oversight of risk management activities, ensuring compliance and facilitating effective decision-making.Candidates should have a strong background in risk

A growing cybersecurity firm in the UK is looking for a Manager, GRC Engineering to lead client engagements and manage compliance programs under frameworks like SOC 2 and ISO 27001.

A leading technology firm is seeking an IT GRC Sox Specialist for a 1-year fixed-term contract based in London.

Candidates should have 9-14 years of experience, familiarity with GRC frameworks, and excellent communication skills. A leading GRC solutions company is seeking a Solution Consultant to join their Customer Services Team in London.

The role involves architecting and implementing ServiceNow GRC solutions, translating business risk needs into scalable designs, and providing governance.

Information Security GRC Risk Manager. You’ll support the Information Security (InfoSec) GRC Lead to deliver effective risk management, ensuring risks are consistently identified, assessed and managed and that appropriate governance, including policies and standards, supports effective risk mitiga

Ideagen is seeking a Senior Business Sales Professional for a hybrid position in Ruddington, Nottinghamshire, UK.This individual contributor role involves managing the full sales cycle and exceeding ARR quotas, specifically within regulated environments.Candidates should have a proven sales backgrou

A leading global blockchain ecosystem is looking for an experienced Internal Audit professional with a minimum of 6 years in internal controls.This role involves conducting internal control reviews, supporting regulatory examinations, and ensuring timely closure of findings.Ideal candidates will hav

This position involves leading risk assessments, managing compliance audits, and mature GRC programs.

A leading technology firm is seeking a Global Alliances Manager - Cloud Service Providers to lead their hyperscaler strategy with key cloud players.The role involves managing marketplace execution and aligning internal expectations about CSP capabilities.Candidates should have a strong background in

The IT GRC Sox Specialist will support the IT GRC team in embedding effective IT governance, risk, and compliance across the organisation. Experience using risk and GRC tooling, particularly Riskonnect; exposure to ServiceNow GRC, Archer, or AuditBoard is advantageous. Job Title: IT GRC Sox Speciali

Sanderson Government & Defence is seeking a Cyber GRC specialist to manage cyber security governance and risk across the Service Group in London.

A cybersecurity firm in the United Kingdom is seeking an experienced Information Security Manager.This pivotal role focuses on strengthening internal security and enhancing clients' security maturity.You will deliver assessments, support compliance with standards such as Cyber Essentials and ISO 270

This role combines technical and GRC responsibilities within a dynamic technology-driven environment.

A leading global business transformation partner is seeking an SAP Security Consultant in Greater London.This role involves delivering innovative SAP projects, driving security implementations, and collaborating with top-tier clients.Ideal candidates will have significant experience in SAP project d

The ideal candidate will possess deep expertise in Governance, Risk and Compliance (GRC), particularly with SAP environments.

The ideal candidate has over 3 years of experience in GRC roles and possesses strong communication skills.

A leading Internet security provider in Greater London seeks a passionate Security intern to enhance its security posture through project execution and collaboration with various teams.The ideal candidate will have familiarity with security frameworks, a foundational understanding of risk management

As the Security GRC Lead, you will own our Security GRC services. You will manage two distinct pillars: GRC Operations, and our Regional Information Security Officer Team. We are looking for an experienced GRC Lead to join our Security Team.

This role will lead a GRC Solution Sales team across diverse EMEA markets. Expereince selling GRC, audit or risk solutions is highly advantageous.

A Global Saas Organisation requires a Contractdata governance and compliance specialist to rapidly assess and unify a fragmented global compliance landscape within a fast-paced SaaS environment.The role will define direction, map current certification and audit activity, and deliver clear, prioritis

A leading consultancy firm is seeking IT Auditors to join their central GRC team in London within the Luxury Lifestyle and Leisure sector.

A leading security consultancy in Greater London seeks a Senior Security Consultant with extensive experience in cyber governance and risk management.The role involves leading compliance engagements, assessing client risks, and designing information security policies.Ideal candidates will possess re

A leading SaaS company is seeking a Global Account Executive for their Capital Markets division in London.The role involves managing the full sales cycle and leveraging existing networks to drive growth in key markets.Candidates should have over 7 years of experience in SaaS sales, specifically with

Information Security Governance, Risk, and Compliance (GRC) Specialist.

IT Security, GRC or related roles.

Premium Credit Limited is seeking an Enterprise & Operational Risk Transformation Lead to drive the design and implementation of their GRC software platform and manage the enterprise and operational risk framework.

This includes maintaining existing security measures while continuously enhancing our governance, risk management and compliance (GRC) frameworks and policies. Significant experience in Information Security and GRC.

Mitratech seeks a Sales Consultant specializing in Governance, Risk, and Compliance (GRC) to drive growth in the DACH region and the UK.

We are seeking a Manager, GRC Engineering who leads with a client‑first mindset and brings exceptional relationship management skills to every engagement.