> Markdown version of [/jobs/ext/1269021-grc-consultant](https://www.wearedevelopers.com/jobs/ext/1269021-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Consultant - **Company:** Lex Dinamica - **Location:** London, UK (Remote available) - **Salary:** £35,000.0 - £55,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Information Technology, RSA Archer Platform, Servicenow - **Published:** July 15, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=02213702c6f4a20d ## About the Role Must haves * A solid grounding in governance, risk and compliance, with practical experience designing or operating GRC frameworks, controls, or assurance programmes in a client or in house setting. * Willingness to learn OneTrust and broader GRC platforms quickly, supported by our internal training and certification. * A genuine interest in privacy, AI governance, and the wider compliance technology space. You enjoy the intersection of regulation, risk and technology and want to build a career there. * Strong analytical and problem solving instincts. GRC work is detail heavy, and small framework choices have real downstream consequences. * Strong written and verbal communication in English. You can explain a complex risk concept to a non technical client without losing them or oversimplifying. * A right to work in the UK or the EU. Nice to haves * Fluency in German. With German, you will become a natural point of contact for our DACH region clients and work directly in their language where that adds value. * Fluency in French. With French, you will become a natural point of contact for our French speaking clients across France, Belgium, Luxembourg and Swiss Romande. * Fluency in any other language. We work across more than fifty jurisdictions, and additional language capability extends the range of clients you can serve. * Hands on experience with one or more GRC technology platforms (OneTrust, ServiceNow GRC, Archer, MetricStream, or similar). * Familiarity with widely used GRC frameworks and standards (ISO 27001, ISO 27701, SOC 2, NIST CSF, COSO, or similar). * Working knowledge of GDPR, the EU AI Act, and the wider regulatory landscape across the UK and EU. * Exposure to specific regimes such as DORA, NIS2, or sectoral compliance requirements. * Consulting experience, whether at a professional services firm, a Big Four, or a privacy or risk specialist firm. * A recognised credential such as CIPP/E, CIPM, CRISC, CISA, ISO 27001 Lead Auditor or Implementer, or equivalent. * A relevant degree in a field such as Business, Law, Economics, Computer Science, Information Security, or similar., Our screening process assesses candidates' qualities, capabilities, experience, fit, vision, and ambition to ensure they align with our needs. We conduct comprehensive evaluations and in-depth interviews to identify top talent. ## Description In this role, you will: * Advise clients across governance, risk and compliance, including framework design, controls, and assurance * Support implementation of GRC technology platforms, with a focus on OneTrust and adjacent tools * Bring a broad GRC lens to engagements that touch privacy, security, AI and operational risk * Work directly with clients across our global portfolio, including German or French speaking accounts if your languages allow In practice, that means working alongside our consultants and senior leadership to deliver GRC programmes from scoping through go live and into operations. You will advise clients on the frameworks that hold their compliance programmes together. Risk taxonomies, control libraries, policy structures, assurance approaches, and the operating models that bring them to life. You will help clients move from fragmented, function specific compliance toward something integrated. You will support the implementation and configuration of GRC technology. OneTrust is a focus for us, alongside the wider landscape of GRC platforms our clients use. You do not need to be a OneTrust expert today. You do need to be ready to build that expertise quickly with our support and certification. You will bring an integrated view across risk domains. Privacy, information security, AI governance, operational resilience, third party risk, and the regulatory landscape that connects them. Our clients increasingly want one partner who can see across all of it. You will help us be that partner. You will work directly with clients across our global portfolio. If you happen to speak German or French, you will also be the natural point of contact for clients who prefer to work in that language, which is something we are increasingly asked for. You will contribute to how we work. Our GRC service line is growing, and the people who join now will help shape the methodologies, templates, and ways of working that we take to every future client. ## Related Videos - [Rethinking Recruiting: What you didn’t know about Responsible AI](https://www.wearedevelopers.com/videos/1090-rethinking-recruiting-what-you-didn-t-know-about-responsible-ai) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Your Enterprise RAG Has No Legal Basis](https://www.wearedevelopers.com/videos/100344-your-enterprise-rag-has-no-legal-basis) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)