Technical GRC Specialist
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Technical GRC Specialist focusing on enhancing cybersecurity measures and managing vendor risk at an AI-powered support automation platform. Collaborating with teams to ensure compliance and audit readiness.
Responsibilities:
- Provide hands-on support in the assessment, improvement, and maintenance of technical security baselines based on industry best practices (e.g., NIST, CIS, ISO).
- Ensure configurations satisfy global regulatory mandates (e.g., HIPAA, GDPR).
- Leverage automated tools to monitor security and compliance posture.
- Act as a GRC interface with Infrastructure and Engineering teams to ensure hardening requirements are technically feasible and effectively implemented.
- Manage and continuously improve the company's Third-Party Risk Management programme across suppliers, vendors and strategic partners.
- Own end-to-end due diligence processes for new and existing vendors, including inherent risk assessments, security/privacy reviews and ongoing monitoring.
- Review vendor assurance documentation such as ISO 27001 certificates, SOC 2 reports, penetration test summaries, policies and compliance evidence.
- Identify, document and communicate vendor risks, remediation actions and approval recommendations.
- Maintain risk tiering and reassessment schedules for critical and high-risk vendors.
- Act as a trusted partner to internal stakeholders during vendor onboarding, renewals and procurement decisions.
- Engage directly with suppliers to resolve due diligence issues and drive remediation.
- Maintain audit-ready documentation within GRC systems.
- Support team members with global and contractual compliance efforts, as well as internal and external audits.
- Contribute to security and compliance policy, process, and control improvements.
- Identify opportunities for automation, simplification, and improved GRC tooling.
Requirements:
- 3+ years’ experience in compliance, GRC, vendor risk management, information security, internal audit or related fields.
- Proven experience in cybersecurity and managing third-party/vendor due diligence programmes.
- Strong understanding of common assurance frameworks such as ISO 27001, SOC 2, NIST or equivalent.
- Good working knowledge of UK GDPR / privacy considerations in supplier relationships.
- Familiarity with cloud/SaaS environments and common systems (e.g. identity providers, cloud platforms, collaboration tools).
- Experience reviewing supplier security documentation and identifying practical risks.
- Strong organisational skills with the ability to manage multiple priorities independently.
- Excellent written and verbal communication skills; proficient in English.
Benefits:
- Private health insurance
- Profit Interest Unit Appreciation Rights
- 25 days paid leave
- Pension
- Group life assurance
- Group income protection
- Flexible work environment
- A supportive, diverse workplace where we prioritize respect for each other and our clients
- A fun and collaborative team culture
Similar Jobs
Senior GRC Analyst
Senior GRC Analyst at Doppler managing security and compliance programs. Ensuring SOC 2 Type II and ISO 27001 certifications while collaborating across teams.
Compliance Program Coordinator
Compliance Program Coordinator providing administrative support for AICPA Peer Review Program. Managing workflows, ensuring compliance, and supporting peer review processes.
Corporate Telecom Compliance Manager
Strategy & Operations role focusing on telecommunications compliance at Twilio. Leading strategic execution and governance for global communications platform compliance initiatives.
Vice President, Compliance & Risk Management
Vice President Compliance & Risk Management leading healthcare compliance initiatives and risk management strategy for Emerus. Develop and implement comprehensive frameworks to support patient safety and ethical standards.
Senior Engineer, GRC – Audit & Compliance
Senior Engineer overseeing audit and compliance programs at NextGen Healthcare, ensuring alignment with regulatory and security requirements. Leading audit lifecycle and optimizing GRC solutions for efficient compliance operations.
Compliance Specialist
Compliance Manager providing governance and assurance for compliance obligations and processes. Overseeing the organization’s Integrated Management System and ensuring compliance with regulatory frameworks.
Regulatory Consultant – CMC, Small Molecule Products
Support execution of global regulatory CMC strategy and submissions for small molecule products. Collaborate with cross-functional teams at Syneos Health to deliver effective regulatory compliance in the biopharmaceutical industry.
Regulatory Labeling Manager – Artwork Development, Source Text Review
Labeling Artwork Reviewer ensuring compliance in pharmaceutical product packaging through detailed review and collaboration with various teams. Focused on regulatory requirements and global market alignment.
GRC Analyst
GRC Analyst at Primer responsible for managing Governance, Risk & Compliance programs. Collaborates with engineering and security teams to maintain compliance and manage audit readiness.
Regulatory Manager
US Regulatory Manager at Unchained ensuring compliance with U.S. financial services regulations. Involves collaboration across departments for effective risk management and policy implementation.
Compliance Officer
Compliance Officer managing AML/CTF compliance and operations at Allocated Bullion Exchange. Overseeing day-to-day operations including onboarding and regulatory obligations.
Onboarding Compliance Specialist
Onboarding Compliance Specialist ensuring HR compliance for clinical workforce at Charlie Health. Assisting in personnel file management and regulatory adherence for new hires.
Director, Regulatory Affairs
Director of Regulatory Affairs leading regional regulatory strategy and stakeholder engagement for Grid United. Focus on developing frameworks and supporting regulatory approvals for electric transmission projects.
Senior Regulatory Affairs Associate
Regulatory Affairs Senior Associate at Amgen assisting in regulatory document creation and submission. Supporting US regulatory activities and compliance under USRL supervision.
Regulatory and Start Up Specialist
Regulatory Specialist managing Site Activation for clinical studies in life sciences. Ensuring compliance with regulations and quality in deliverables for Swedish sites.
Senior Business SOX Compliance Manager
Senior Business SOX Compliance Manager leading business process control framework at Zillow. Involves assessments, integrations, and team development in a distributed work environment.
Assistant Manager, Special Education Compliance
Assistant Manager for IDEA supporting special education compliance and program implementation in various Texas and remote locations. Collaborating with staff, students, and families in achieving academic success.
Regional Food Safety Quality and Regulatory Lead
Canada Food Safety Quality and Regulatory POD Lead providing safety leadership across plants in Canada. Collaborating with stakeholders for quality and regulatory compliance while driving continuous improvement initiatives.
Senior Advisor, Pharmacy & Care Delivery Compliance
Senior Advisor for compliance within Evernorth Care Delivery and Pharmacy. Responsible for evaluating compliance and managing audits and reports across regulatory requirements.
Executive Director, Regulatory Affairs – Global
Executive Director leading global regulatory affairs for biopharmaceutical company, focusing on international regulatory strategy and compliance for oncology products.