Job Search

We are seeking a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to strengthen enterprise-wide security governance and support the continuous improvement of cyber risk management practices. This role will provide expert guidance across security frameworks, policies, controls and assurance activities, helping to ensure that technology, business processes and third-party services meet regulatory, contractual and organisational requirements.

Key responsibilities include developing, maintaining and reviewing information security policies, standards and procedures; conducting risk assessments and control reviews; supporting audit and compliance programmes; and tracking remediation activities through to completion. You will coordinate evidence gathering, prepare clear reports for senior stakeholders, and advise on risk acceptance, treatment plans and control effectiveness. The role will also contribute to security architecture and project reviews, supplier and third-party risk assessments, business continuity activities, incident response governance, and the implementation of improvements aligned with recognised frameworks such as ISO 27001, NIST, CIS Controls or similar.

The successful candidate will have substantial experience in cyber security governance, risk and compliance, with a strong understanding of security controls, regulatory obligations, audit principles and risk management methodologies. Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are desirable. You should be confident engaging with technical and non-technical audiences, able to challenge constructively, and skilled at translating complex security issues into practical business recommendations. Strong analytical, documentation and stakeholder-management skills are essential, along with the ability to prioritise competing demands and work independently in a changing environment. Experience with GRC platforms, cloud security risk, third-party assurance and security metrics would be advantageous.

We are seeking a highly skilled Senior Cyber Security Engineer to join our dynamic team. In this role, you will be responsible for designing, implementing, and maintaining robust security measures to protect our systems and data from emerging cyber threats. You will conduct thorough risk assessments and vulnerability analyses while developing and enforcing security policies and procedures. Collaborating with cross-functional teams, you will ensure the integration of security protocols across all platforms, as well as provide guidance on best practices to enhance overall security posture.

The ideal candidate will possess a strong understanding of various security frameworks and standards. You should have experience with intrusion detection/prevention systems, firewalls, and encryption technologies. Your role will also involve monitoring security incidents, responding to threats, and conducting forensic investigations as needed. Additionally, you will mentor junior team members and lead initiatives to improve security awareness throughout the organization. A relevant degree and professional certifications such as CISSP, CISM, or CEH are highly desirable.