101 to 125 of 139 DORA Jobs in the UK

working. You manage a portfolio without being chased. Nice to have: Understanding of regulatory frameworks relevant to EMEA clients, such as MiCAR, DORA, the Travel Rule, the Basel crypto‐asset standards, FINMA requirements, or Middle East regimes like VARA (Dubai) and ADGM. Familiarity with custody and key management concepts like ...

enabled testing tools. The role requires influence without authority, deep test automation expertise, and the ability to drive fast feedback loops and improved DORA outcomes across the portfolio. #J-18808-Ljbffr ...

security, SOC, threat intelligence, and risk functions across the organization. Responsibilities include designing security elements for new products, ensuring regulatory compliance with TS A, DORA and ISO27001, and #J-18808-Ljbffr ...

exemptions. Please take a look at our International Applicants page for further information. EMBL is a signatory of DORA. Find out how we apply DORA principles to our recruitment and performance assessment processes here. Diversity and inclusion At EMBL, we believe that diverse teams drive innovation and scientific excellence. ...

control effectiveness to the Group Head of Information Security and relevant governance committees Support regulatory alignment as it relates to AI tool usage, including DORA, UK GDPR and sector-specific AI guidance Act as the internal technical authority and first point of contact for AI security queries across the business … threat models, including prompt injection, data leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA, UK GDPR, ISO 27001 and NIST CSF Experience running structured risk assessments and translating them into actionable controls Strong stakeholder management, with the confidence ...

control effectiveness to the Group Head of Information Security and relevant governance committees Support regulatory alignment as it relates to AI tool usage, including DORA, UK GDPR and sector-specific AI guidance Act as the internal technical authority and first point of contact for AI security queries across the business … threat models, including prompt injection, data leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA, UK GDPR, ISO 27001 and NIST CSF Experience running structured risk assessments and translating them into actionable controls Strong stakeholder management, with the confidence ...

Security, Cybersecurity, Data Protection, Information Governance or Risk Recognised qualifications such as CISSP or CompTIA Security+ Exposure to frameworks including NIST, HIPAA, FedRAMP or DORA Knowledge of DevOps or DevSecOps practices Prior experience of a scale-up or growth‐stage SaaS company Please note Due to the security clearance requirements … Information Security Analyst, ISO 27001, Data Protection, GDPR, CCPA, UK GDPR, EU GDPR, GRC, Risk & Compliance, Third Party Risk, Supplier Risk, FedRAMP, NIST, HIPAA, DORA, AWS, Cloud Security, DevOps, Application Security, DevSecOps, Compliance Manager, Data Protection Officer, Privacy, Cybersecurity, Information Governance #J-18808-Ljbffr ...

risk-based decisions in complex and evolving environments. Preferred Qualifications Familiarity with payment regulatory requirements from Payment Services Directive (PSD2), Digital Operational Resilience Act (DORA), Payment Services Regulation (PSR), Anti-Money Laundering Directive (AMLD) - strong customer authentication, operational resilience, outsourcing, consumer lending, open banking, and financial data protection. Ability ...

greenfield setting. Based in London with hybrid 50/50% work, you will contribute to an IT governance Centre of Excellence and align with DORA standards while ensuring audit readiness across EMEA. #J-18808-Ljbffr ...

Impact By pairing technical depth with executive gravitas, you will de-risk platform modernisation, ensure strict financial and regulatory governance (e.g., BCBS 239, DORA), drive referenceable client outcomes, and unlock measurable business value through intelligence engineering. Requirements What You Bring to the Role Industry Leadership: 15+ years of experience … Azure, GCP, Databricks, Snowflake). Data Governance & Compliance: Robust understanding of data security, lineage, privacy (GDPR, CCPA), and financial sector regulatory frameworks (BCBS 239, DORA, Basel standards) governing financial data engineering. Programme & Delivery Leadership Large-Scale Delivery Track Record: 15+ years in Digital/Data Engineering or IT Consulting, with ...

Head of Security Company: Aptitude Software Reports to: Chief Product and Technology Officer (CPTO) Location: London, hybrid. The security team is split across the UK and Poland. Type: Permanent, full time Direct reports: Four at ...

Lead GRC Analyst and reporting to the IT GRC Manager, you will support governance, risk, and compliance efforts spanning frameworks such as GDPR, DORA, and Sarbanes-Oxley, partnering with internal and external auditors and control owners across the enterprise. It's an ideal opportunity for someone with 2–3 years … risk — and contribute to risk mitigation plans that address identified vulnerabilities.Partner with HL Compliance to ensure IT systems align with regulations such as GDPR, DORA, and SOX, and other standards relevant to the financial services industry.Conduct assurance activities, including security assessments and issue management, and collaborate with IT teams ...

catch most regressions faster and more reliably. You will help teams build healthy test pyramids, achieve fast feedback loops, and reach high/elite DORA outcomes (elite deployment frequency, low change failure rates, and fast lead times). You will operate as a program manager and strategic advisor: aggregating quality … engineering teams, measuring test pyramid health (unit vs. acceptance vs. integration vs. E2E ratios), automation coverage, test reliability/flakiness, and alignment with DORA metrics. Conduct regular portfolio reviews to identify systemic quality risks, gaps, and anti-patterns — e.g., teams over-indexing on E2E tests, missing acceptance-layer testing ...

relevant regulatory requirements, industry standards, and internal company policies. This includes active ownership of infrastructure obligations under financial services regulations such as DORA (Digital Operational Resilience Act), ensuring the region meets resilience, incident reporting, and third-party risk requirements applicable to IT infrastructure. IT Asset Management: Oversee the management … influence and drive outcomes through global chapter structures without direct line authority. Understanding of financial services regulatory requirements relevant to IT infrastructure, including DORA or equivalent operational resilience frameworks. ITIL Certified is preferred We offer in return! Competitive salary & pension scheme, discretionary bonus scheme, 25 days annual leave plus ability ...

Independent KRI Oversight & Monitoring: Monitor trends in system resilience, patch management, and automated control failures, providing early-warning alerts through risk governance. Regulatory Alignment & DORA Oversight: Act as the 2nd line subject matter expert on evolving digital regulations (e.g., DORA, SS2/21). Governance & Board Insight: Translate complex … have constructive, high-tension conversations with senior engineering leaders and hold them accountable. Regulatory Context: Practical knowledge of UK operational resilience expectations (e.g., DORA, SS2/21). Qualifications: Degree in Computer Science, Information Security, Engineering, AI, or a related quantitative field. Certifications: Industry certifications such as CISA, CRISC ...

Impact By pairing technical depth with executive gravitas, you will de-risk platform modernisation, ensure strict financial and regulatory governance (e.g., BCBS 239, DORA), drive referenceable client outcomes, and unlock measurable business value through intelligence engineering. Requirements What You Bring to the Role Industry Leadership: 15+ years of experience … Azure, GCP, Databricks, Snowflake). Data Governance & Compliance: Robust understanding of data security, lineage, privacy (GDPR, CCPA), and financial sector regulatory frameworks (BCBS 239, DORA, Basel standards) governing financial data engineering. Programme & Delivery Leadership Large-Scale Delivery Track Record: 15+ years in Digital/Data Engineering or IT Consulting, with ...

Impact By pairing technical depth with executive gravitas, you will de-risk platform modernisation, ensure strict financial and regulatory governance (e.g., BCBS 239, DORA), drive referenceable client outcomes, and unlock measurable business value through intelligence engineering. Requirements What You Bring to the Role Industry Leadership: 15+ years of experience … Azure, GCP, Databricks, Snowflake). Data Governance & Compliance: Robust understanding of data security, lineage, privacy (GDPR, CCPA), and financial sector regulatory frameworks (BCBS 239, DORA, Basel standards) governing financial data engineering. Programme & Delivery Leadership Large-Scale Delivery Track Record: 15+ years in Digital/Data Engineering or IT Consulting, with ...

privacy into everything it does. What you'll do Own and evolve our ISMS and security policy framework, aligned to ISO 27001 and DORA Run cyber and information risk management, from risk assessments to board‐level reporting Lead third‐party and ICT supplier risk — tiering, due diligence, DPAs and ongoing … similar) Strong working knowledge of GDPR/UK GDPR — not just the theory, but how to make it work day to day Familiarity with DORA or EBA ICT risk guidelines Enough technical depth in cloud environments (GCP a plus) to challenge engineers credibly Clear, sharp writing — equally at home drafting ...

Genomics England is a global leader in enabling genomic medicine and research, focused on creating a world where everyone benefits from genomic healthcare. Building on the 100,000 Genomes Project, we support the NHS’s ...

About Marex Marex Group plc (NASDAQ: MRX) is a diversified global financial services platform providing essential liquidity, market access and infrastructure services to clients across energy, commodities and financial markets. The group provides comprehensive breadth ...

prototype that production can’t absorb is a failure, not a success. Work inside Insignis's regulatory and operational guardrails — Consumer Duty, FCA SYSC, DORA operational resilience, UK GDPR — and know which constraints bind at prototype stage versus hardening. Pull compliance and ISMS in early, not as a gate … Nice to have — FCA‐regulated fintech, payments, BaaS or open‐banking experience; partner‐integration or white‐label platform work; familiarity with Consumer Duty, or DORA; DDD, Kafka, Kubernetes. Benefits Of The Job: Competitive compensation 25 days holiday (exc. Bank holidays) Pension contributions Private medical insurance Employee health and wellness discounts ...

About Refractal Refractal is an AI security company building the infrastructure organisations need to defend against autonomous AI threats. 2026 has shown that generally capable intelligence is here. The challenge now is modernising security to ...

regulated environment. We are a regulated financial institution, and you would be supporting our compliance capabilities to maintain alignment with PCI-DSS, ISO27001, DORA, and many more. A developer and engineering mindset. A practical understanding of how software is built in a professional environment: not just the ability to write … scaling engineering organisation builds software securely. Direct exposure to banking-licence-scale security work in a regulated payments environment, with PCI DSS, DORA, and GDPR as live constraints on the work. Room to grow: Building and growing your own capability is mutually beneficial, and we want to support ...

The role of Microsoft Modern Work & AI Consultant is to be a senior technical and consultative resource within ITRM, specialising in Microsoft 365, Azure, Copilot, and AI-driven solutions. This role involves owning delivery workstreams ...

Certa is the AI-first third-party operating system. Enterprises, from the Fortune 500 to fast-growing startups, use our no-code platform to onboard, assess, and monitor their vendors, suppliers, and partners across risk ...