26 to 50 of 58 Remediation Plan Jobs in England

requirements into practical business actions. The role will include delivering gap analyses, risk assessments, control reviews, audit readiness support, policy and process development, remediation planning and certification support. In addition, the role holder will support the management and continual improvement of norms internal ISMS and help ensure … operational constraints. Support supplier assurance, third-party risk management, data protection, business continuity and incident management activities where required. Work closely withinternal teams toscope,plan, schedule anddeliver client engagements efficiently and to a consistently high standard. Supportcolleaguesbysharingknowledge,templates,bestpracticeandsubjectmatterexpertise across GRC and information security disciplines. Contributetoserviceimprovement,methodologydevelopmentandthecreationofreusable consultancycollateral. Attendindustryseminarsandevents ...

into Agile delivery. Establish secure design patterns for customer-facing applications. Review authentication, authorisation and API security controls. Support penetration testing activities and remediation planning. Identify security risks and provide pragmatic recommendations. Promote DevSecOps and secure development best practice. Main Skills Needed Experience securing digital applications and online ...

events. Lead vulnerability management as a programme, not a process. Define the prioritisation framework — drawing on EPSS, KEV, CVSS, and asset criticality — set remediation SLAs, own the risk-acceptance register, negotiate remediation plans with IT operations and product teams, and report programme KPIs (MTTR by severity … which includes a Smart Tech scheme, Cycle to work scheme, and an individual benefits allowance which you can invest in a Health care cash plan or Pension plan. We’re also big on connection and have an optional social and wellbeing calendar of events for all employees to join ...

events. Lead vulnerability management as a programme, not a process. Define the prioritisation framework - drawing on EPSS, KEV, CVSS, and asset criticality - set remediation SLAs, own the risk-acceptance register, negotiate remediation plans with IT operations and product teams, and report programme KPIs (MTTR by severity … which includes a Smart Tech scheme, Cycle to work scheme, and an individual benefits allowance which you can invest in a Health care cash plan or Pension plan. We're also big on connection and have an optional social and wellbeing calendar of events for all employees to join ...

coordinate SAQs and AOCs, and work with QSAs, acquirers and brands to drive compliant outcomes. The role focuses on scoping, evidence validation, and remediation planning, with reporting to senior stakeholders and guidance on secure design for PCI scoped systems. Based in London, the position supports a strong compliance ...

risks, and influence secure decision making. Bring the technical depth to challenge solution designs, coordinate penetration testing activities, review test results, and validate remediation plans to achieve secure project outcomes. Demonstrated experience delivering security within project environments, with a background as a Security Consultant or similar role supporting ...

persuasive written deliverables for a senior audience A strong risk and control awareness with the ability to anticipate control gaps and determine appropriate remediation plans Strong proficiency in Excel and PowerPoint Preferred qualifications, skills and capabilities Knowledge of JPMorgan Payments Knowledge of digital tools such as Alteryx ...

malware, phishing, credential compromise, insider risk, data exposure, privilege misuse and suspicious network activity. Ensure evidence handling, incident timelines, decisions, lessons learned and remediation actions are complete and auditable. Produce post‐incident reviews and track corrective actions through to closure. Risk, governance and assurance Translate technical findings into … risk statements, control weaknesses and prioritised remediation plans. Support risk assessment, risk acceptance, audit and assurance activity with clear evidence and professional judgement. Advise on relevant information security legislation. Contribute to security standards, control testing, supplier assurance and management reporting. Data Loss Prevention and Multi‐Factor Authentication control ...

build assets/base servers and import/install required components Support penetration testing activities (prep, escort, cleanup) and produce a remediation plan Conduct user onboarding support and provide architectural/early capability assistance Update documentation, perform system acceptance reviews, and support service transition activities What ...

build assets/base servers and import/install required components Support penetration testing activities (prep, escort, cleanup) and produce a remediation plan Conduct user onboarding support and provide architectural/early capability assistance Update documentation, perform system acceptance reviews, and support service transition activities What ...

growth. Key Responsibilities Provide independent oversight and challenge of technology, cyber, data and operational risk management activities. Review risk assessments, control effectiveness and remediation plans, ensuring risks are identified and managed appropriately. Monitor and assess emerging risks across areas such as cyber security, artificial intelligence, technology change … data governance. Lead the review of incidents, issues and root cause analysis, challenging remediation actions where required. Deliver clear and insightful risk reporting to senior stakeholders and governance committees. Support the development and embedding of enterprise risk frameworks, policies and risk appetite requirements. Act as a subject matter ...

growth. Key Responsibilities Provide independent oversight and challenge of technology, cyber, data and operational risk management activities. Review risk assessments, control effectiveness and remediation plans, ensuring risks are identified and managed appropriately. Monitor and assess emerging risks across areas such as cyber security, artificial intelligence, technology change … data governance. Lead the review of incidents, issues and root cause analysis, challenging remediation actions where required. Deliver clear and insightful risk reporting to senior stakeholders and governance committees. Support the development and embedding of enterprise risk frameworks, policies and risk appetite requirements. Act as a subject matter ...

implementations Assess and validate data collection, event tracking, attribution and reporting outputs Identify tracking gaps, inconsistencies, and data quality issues, and define clear remediation plans Produce implementation-ready documentation including tagging specifications and Jira tickets Establish scalable tagging governance frameworks including naming conventions, event catalogues and decision trees ...

year. Responsibilities Lead defined workstreams or small project teams within larger cloud security and exposure management engagements. Manage assigned deliverables, including exposure assessments, remediation plans, security control improvements, and reporting outputs against agreed engagement milestones. Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft … Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business impact. Understand incident response, cyber recovery, and how exposure management can reduce the likelihood and impact of security incidents. Understand ...

Engineering and business stakeholders to embed security into projects, operational processes and supplier relationships. You'll be responsible for identifying security gaps, driving remediation activities, coordinating internal and external audits, managing governance processes and ensuring the business continues to meet evolving regulatory and compliance requirements. Key Responsibilities Lead … enterprise risk registers Develop, review and maintain Information Security policies, standards and procedures Coordinate internal and external audits, ensuring evidence is prepared and remediation actions are delivered Lead third-party supplier assurance, vendor risk assessments and ongoing governance activities Work closely with Technology, Infrastructure and Engineering teams ...

technology functions Maintains an awareness of any interdependencies with other workstreams in the Program, and assumes responsibility for delivery in line with the Plan agreed with the European Central Bank Leads the day-to-day delivery of BCBS 239 requirements for risk data aggregation, validation, reconciliation and reporting Develops … data quality, completeness, timeliness and reporting efficiency Presents regular status updates to governance forums and senior stakeholders on BCBS 239 milestones, risks and remediation plans Coordinates with Governance, Compliance, Risk and Legal partners to ensure all data practices adhere to internal policies and external regulations Supports regulatory stress ...

technical andprocedural evidence and working closely with IT, security, and business teams toremediate compliance gaps. Our PCI Assurance Analyst also maintains compliancedocumentation, tracks remediation plans, supports Qualified Security Assessor (QSA)engagements, and provides clear assurance reporting to stakeholders, helping reduceregulatory, financial, and reputational risk associated with payment card … review and validate evidenceAct as the primary liaison with Qualified Security Assessors (QSAs), acquirers, and payment brands during audits and assessmentsTrack and support remediation plans, ensuring issues are clearly documented, risk-assessed, prioritised, and resolvedMaintain accurate PCI documentation, including scoping diagrams, diagrams, risk assessments, policies, and proceduresSupport ...

related controls supporting SOX, GDPR, ISO27001 and other regulatory requirements. Act as the primary point of contact for internal and external auditors. Lead remediation of audit findings and compliance gaps. Establish sustainable, audit-ready processes and evidence repositories. Ensure audit evidence can be produced efficiently and consistently. Monitor … management activities. Build strong relationships with Business Process Owners, Audit, Cybersecurity, Compliance, HR, and Technology teams. Communicate risks, audit findings, compliance issues, and remediation plans to leadership. Translate technical security concepts into business-focused recommendations. Champion a culture of accountability, governance, and compliance across the organisation. ESSENTIAL SKILLS ...

major organisation operating within a complex, business-critical environment is seeking an experienced Cyber Essentials Plus Consultant to lead a significant remediation and certification programme. Following a recent review of the organisation's Cyber Essentials Plus readiness, a number of gaps have been identified that must be addressed … before certification can be successfully achieved. The successful contractor will take ownership of the programme, driving remediation activity across technology teams and lead the organisation through to successful certification. This is a delivery-focused role requiring an individual who understands the Cyber Essentials and Cyber Essentials Plus process ...

operationalise a global compliance change process framework that helps DoorDash detect changes in our compliance landscape, assess impact, identify gaps, and drive accountable remediation across teams. This is a senior individual contributor role for someone who has managed global compliance frameworks and security/privacy compliance programs … markets and products. Maintain a structured view of DoorDash’s compliance landscape, including obligation inventories, control mappings, ownership models, risk decisions and remediation status. Lead compliance-impact assessments for new regulations, framework updates, product launches, market expansions, vendor changes and major technology initiatives. Facilitate compliance risk workshops with ...

environment. Ensure disaster recovery testing satisfies internal governance, audit requirements, and financial services regulatory expectations. Produce evidence packs, test reports, lessons learned, and remediation plans following each exercise. Business Continuity & Operational Resilience Review and enhance Business Continuity Plans (BCPs) for critical production services. Ensure business continuity processes align … Confirm infrastructure and application architectures are capable of meeting agreed recovery objectives. Identify gaps between current capabilities and business recovery requirements and drive remediation activities. Work closely with solution architects and engineering teams to optimise recovery capabilities. Governance, Risk & Compliance Ensure disaster recovery and business continuity documentation meets ...

health and social care ecosystem. The successful candidate will bring relevant experience in delivering broad cyber advisory services, including DSPT-CAF readiness and remediation, cyber strategy, governance, risk and assurance, and programmes that enable frontline productivity through secure, resilient and effective use of technology. Description of the role …/2022, NIST Cyber Security Framework and other relevant regulatory or assurance requirements. Advising healthcare organisations on DSPT-CAF readiness, gap assessment, remediation planning, evidence development, assurance, reporting and sustainable improvement across cyber, information governance and operational resilience domains. Supporting NHS clients to improve frontline productivity by aligning ...

transparency, and human oversight Governance requirements across HR and TA tools, processes, and third-party vendors Cross-functional coordination on policy interpretation, controls, remediation, and readiness Ongoing monitoring of legislative and regulatory developments affecting HR data handling and AI-enabled people processes globally Responsibilities: Lead the design … concerns Establish practical controls for AI-related risk, including fairness, transparency, explainability, human oversight, documentation, and vendor accountability Drive governance-related projects and remediation plans, ensuring clear ownership, timelines, and stakeholder alignment Support the development and maintenance of retention requirements, processing standards, guidance, and governance documentation Translate legal ...

owners, technology support teams, Internal Audit, and external auditors, you will drive the effective operation of the controls framework, oversee testing activities, monitor remediation progress, and provide clear reporting on control effectiveness and risk exposure. You will also lead the review SOC1 Type 2 reports for supplier-managed … testing outputs, sampling approaches, and retained audit evidence to ensure audit readiness Assess, document, and communicate control deficiencies, including risk impacts and recommended remediation actions Drive and monitor remediation plans, ensuring actions are owned, tracked, and delivered within agreed timescales Review SOC1 Type 2 reports ...

controls environment across core mortgage, data, insight and credit-modelling systems. The consultant will identify gaps, assess risks and produce a prioritised remediation plan. Key responsibilities Review data governance and control frameworks. Assess data quality, lineage, privacy and records management. Review data completeness, accuracy and reconciliation controls. Investigate … schemas, databases and data flows. Assess data movement into downstream reporting and credit-modelling systems. Identify key risks, control gaps and remediation priorities. Produce a clear findings and recommendations pack. Essential experience Strong data governance and data controls experience. At least 3-4 similar discovery or review engagements. ...