Join us as our Head of Controls Optimisation We're looking for someone to oversee the risk and control environment across multiple technology teams, as well as control testing for technology applications You'll lead the control automation strategy across our Controls function and you'll be accountable for … our Application Control Testing Centre of Excellence and control automation Recognised as a key risk partner for the Chief Data Information Officers for Retail, Commercial & Institutional, and the Chief Data & Analytics Officer, you'll support the identification, assessment, and ongoing management of key risks within the agreed risk … of 12 months What you'll do Working with the Retail, Wealth, Commercial & Institutional and Data & Analytics key leaderships teams, you'll provide strong riskmanagement support for the implementation of our strategy, covering technology, the application of model riskmanagement practices, and digital transformation. You More ❯
Cyber & Data Security Risk Consultant Date: 15 Apr 2025 Location: Edinburgh, GB Company: Royal London Group Job Title: Cyber & Data Security Risk Consultant Contract Type: Permanent Location: Edinburgh/Alderley Park Working style: Hybrid 50% home/office based About the Role: Are you passionate about cyber security … Do you have a knack for identifying and managing risks? If so, we have the perfect opportunity for you! As a Cyber & Data Security Risk Consultant, you will play a crucial role in advising the Board and senior management on strategic planning and decision-making. You will independently … oversee and challenge the Group's strategic and business risk profiles, provide formal independent opinions on significant risks, and monitor Group-wide risk exposures compared to risk appetite. This role operates within the 2nd line of defence in GR&C, focusing on riskmanagement and More ❯
Our client Scottish Power are seeking a Cyber-Risk Analyst for an immediate start for a critical intial 3 month project based in the Glasgow office, which could potentially reach to 6-9 months. Job Purpose Statement The primary purpose of the Cyber Risk and Assurance Analyst is … to support the delivery of Cyber Risk and Assurance services by the SPEN Cyber Governance, Risk and Assurance team. This role offers the opportunity to work and gain further experience within three primary GRA domains across BAU and Change Delivery – Cyber RiskManagement, Third Party RiskManagement and Cyber Assurance. Risk activities performed by this role are expected to include conducting or supporting cyber risk assessments on behalf of stakeholders using the Cyber Risk Assessment Methodology across our essential services, IT and OT estates regular reviews and reporting of existing risks More ❯
Glasgow, Stobcross (historical), City of Glasgow, United Kingdom
Morson Talent
Our client Scottish Power are seeking a Cyber-Risk Analyst for an immediate start for a critical intial 3 month project based in the Glasgow office, which could potentially reach to 6-9 months. Job Purpose Statement The primary purpose of the Cyber Risk and Assurance Analyst is … to support the delivery of Cyber Risk and Assurance services by the SPEN Cyber Governance, Risk and Assurance team. This role offers the opportunity to work and gain further experience within three primary GRA domains across BAU and Change Delivery – Cyber RiskManagement, Third Party RiskManagement and Cyber Assurance. Risk activities performed by this role are expected to include conducting or supporting cyber risk assessments on behalf of stakeholders using the Cyber Risk Assessment Methodology across our essential services, IT and OT estates regular reviews and reporting of existing risks More ❯
City, Edinburgh, United Kingdom Hybrid / WFH Options
ENGINEERINGUK
C-suite Contract Type Permanent Hours Full Time About this role Business Unit Overview BlackRock Aladdin is uniquely positioned to address the industry's riskmanagement, portfolio construction and financial technology demands. The various business departments within Aladdin are focused on providing clients with highly scalable portfolio analytics … riskmanagement, liability-driven investing, pension solutions, regulatory advice, and balance sheet strategy. The Aladdin Wealth Tech team partners with wealth management clients to help them oversee their enterprise risk, build better portfolios, and enhance their value proposition to clients. This is achieved by leveraging risk analytics - powered by Aladdin - to equip wealth management clients with model construction capabilities, risk monitoring tools, and portfolio construction & analytics. The Aladdin Wealth Tech team is responsible for leading the design and deployment of the Aladdin Wealth product for clients. Implementations are high profile initiatives which require More ❯
Strategy Consulting Professional with experience in finance or the energy industry, focusing on investment and trading. You excel in using quantitative analysis, analytics, and riskmanagement to support clients' investment, trading, and riskmanagement strategies. Energetic, resilient, and passionate about serving clients, you love continuous learning. … and people skills, you thrive in team settings and appreciate diverse perspectives. The Work: Accenture Trading, Investments & Optimization Strategy (ATIOS) helps clients manage commodity risk and unlock value through riskmanagement, investment advisory, and commercial optimization. We work with clients across commodity value chains in industries like … navigate the energy transition with new business models, sustainability strategies, and market outlooks. Assist commodity trading organizations in setting up and expanding trading and riskmanagement activities. Analyze client businesses and advise on strategies to grow product margins, boost supply certainty, and reduce price/volumetric volatility. Use More ❯
Barclays UK Operational Risk oversees the Operational Risk profile of BUK, spanning all business areas, Retail Products (Cards, Loans, Current Account & Payments, Tesco Bank, Mortgages, Savings & Insurance), Business Banking, Customer & Digital and Barclays UK Chief Operating Office. BUK has a significant transformation agenda including integration of Tesco Bank. … The role holder will lead a team of senior risk professionals (Directors and VPs) to provide second line oversight of the Retail Product, Customer & Digital and Business Banking operational risk profiles; providing an independent view on how the risk profiles are being managed against agreed tolerances. The … ensuring that the First Line of Defence effectively and optimally manages operational risk. The role holder will also be responsible for thought leadership and management of BUK wide operational risk activities. As BUK is a ring-fenced entity, there are a number of committees and governance bodies that More ❯
City, Edinburgh, United Kingdom Hybrid / WFH Options
ENGINEERINGUK
Associate/Analyst, Aladdin Wealth Tech Relationship Manager About this role Aladdin Wealth Tech - Associate/Analyst, Relationship Management Business Unit Overview BlackRock Aladdin is uniquely positioned to address the industry's riskmanagement, portfolio construction and financial technology demands. The various business departments within Aladdin are … focused on providing clients with highly scalable portfolio analytics, riskmanagement, liability-driven investing, pension solutions, regulatory advice, and balance sheet strategy. The Aladdin Wealth Tech team partners with wealth management clients to help them oversee their enterprise risk, build better portfolios, and enhance their value … proposition to clients. This is achieved by leveraging risk analytics - powered by Aladdin - to equip wealth management clients with model construction capabilities, risk monitoring tools, and portfolio construction & analytics. This is an exciting opportunity to shape the Wealth Management industry while helping to build a growing More ❯
BPS Limited/BTS is a growing division with an expanding Financial Services footprint. The role of Monitoring & Assurance Manager is pivotal in driving risk maturity across the BTS business. It provides independent, holistic opinions on Conduct, Compliance, and Regulatory Risk effectiveness, ensuring Atos BPS meets strategic goals. … The role is responsible for identifying areas of actual and potential regulatory risk, both for Atos and its clients, and ensuring that appropriate procedures and controls operate within the business to mitigate and control these risks. This is achieved through regulatory advice, oversight, and the delivery of a compliance … This role is available UK-wide, however, regular travel to Edinburgh may be required. Key Responsibilities: Lead in embedding the Compliance, Conduct, and Regulatory Risk framework, tools, and mechanisms to ensure effective regulatory compliance. Conduct monitoring reviews in line with the monitoring schedule. Evaluate the adequacy and effectiveness of More ❯
us and see how you can elevate the power of your work at Iron Mountain. We provide expert, sustainable solutions in records and information management, digital transformation services, data centers, asset lifecycle management, and fine art storage, handling, and logistics. We proudly partner every day with our … the daily activities of each project, ensuring they align with the company’s profitability targets without exceeding the budget. Effective engagement, influencing, and relationship management skills are crucial. You should also possess the ability to manage multiple tasks and meet deadlines. Serving as a point of escalation for customers … your strengths, making you a valuable asset in this multifaceted role. Your role in our mission: Key objectives of the role include annual budget management, cost management, and Project Management, this encompasses: Project Management: As we continue to strive for excellence in our project managementMore ❯
Wick, Scotland, United Kingdom Hybrid / WFH Options
Iron Mountain
us and see how you can elevate the power of your work at Iron Mountain. We provide expert, sustainable solutions in records and information management, digital transformation services, data centers, asset lifecycle management, and fine art storage, handling, and logistics. We proudly partner every day with our … the daily activities of each project, ensuring they align with the company’s profitability targets without exceeding the budget. Effective engagement, influencing, and relationship management skills are crucial. You should also possess the ability to manage multiple tasks and meet deadlines. Serving as a point of escalation for customers … your strengths, making you a valuable asset in this multifaceted role. Your role in our mission: Key objectives of the role include annual budget management, cost management, and Project Management, this encompasses: Project Management: As we continue to strive for excellence in our project managementMore ❯
an expectation to cover on-call duties at times We have an excellent opportunity for a career-driven individual to join our forward-thinking management team; to lead, develop, manage and be accountable for your team and services around Dunfermline. We are looking for someone with creative experience, to … your approach and willing to travel between services. The Role As the Service Manager, you will be the registered manager responsible for the overall management of a number of services within the Dunfermline area, ensuring regulatory and contractual compliance requirements are met, and where possible exceeded whilst driving the … of the people who use our services. To ensure that every service user has an up-to-date person-centred plan and person-centred risk assessments in place, and that these are regularly reviewed through a person-centred review process. To ensure that staff and resources in local areas More ❯
Glasgow, Renfrewshire, United Kingdom Hybrid / WFH Options
N Consulting Limited
remote work: Hybrid, 2-3 days per week Contract duration: 6 months with potential extension Location: Glasgow JOB DETAIL Required Core Skills: Budgeting Stakeholder ManagementRiskManagement Issue Escalation Reporting and Analysis Strategic Thinking Project Management Change and Transformation Digital and Technology Change Management Corporate … Governance Business Acumen Cost-Benefit Analysis (CBA) Risk and Controls Coordinating Resources Hands on experience in Azure Minimum years of experience: >8 years Areas of responsibility: To manage change projects that help the organisation achieve its strategic objectives while ensuring that projects are delivered on time, within budget, in More ❯
Join us as aModel Risk Validation Officer in Traded RiskModels This is anopportunity for a passionate and driven risk specialist to join ourbusiness We’ll look to you to help review andvalidate traded risk and pricing models supporting all businessunits and legal entities. It's an ideal … role togain detailed exposure to the developing world of model risk, aswell as to a range of stakeholders and seniorexecutives Whatyou'll do As a ModelRisk Validation Officer, you’ll be undertaking quantitative andqualitative analysis to make sure that the model risks areadequately highlighted. We’ll look to you … a succinct and clearmanner Preparing checklists for variousvalidation activity to make sure that appropriate controls areestablished and consistently followed Providingexpert advice on aspects of riskmanagement, including providingsenior executives with relevant MI andreports Making sure that model risk managementaligns with our model risk policy, and undertaking More ❯
Kingdom, Edinburgh WRS - United Kingdom Time type: Full time Posted on: Posted 4 Days Ago Job requisition id: REQ-13864 Role Description The Global Risk and Compliance division (GR&C) exists to enable the FNZ Group to safely achieve its strategic objectives and protect value; to support the growth … and business units to align data privacy strategies with the firm's strategic objectives and evolving regulatory landscape. This role will collaborate with governance, risk, and compliance (GRC) specialists and analytics experts to ensure effective oversight, reporting, and continuous improvement of the firm's data protection position. Reporting directly … to build a robust data protection program that supports the firm's strategic goals and regulatory obligations. Specific Role Responsibilities Data Protection & Privacy Program Management: Develop, implement, and oversee the global data protection framework, policies, and standards, ensuring alignment with local data privacy regulatory obligations and industry best practices More ❯
City, Edinburgh, United Kingdom Hybrid / WFH Options
Aberdeen
of our clients, customers, colleagues, shareholders and society. We are focused on growing our direct and advised wealth platforms and repositioning our specialist asset management business to meet client demand. We are committed to providing excellent client service, supported by leading technology and talent. About the Department The Security … reviews and requests from clients, regulators, and auditors, ensuring we maintain the highest standards of protection for our customers. By driving insightful reporting and risk-based reviews, you'll contribute to the ongoing effectiveness of our security controls and resilience initiatives. Key Responsibilities Develop and implement Aberdeen's Security … with global standards (e.g., NIST). Maintain and develop the Information and Cyber Security (ICS) and Technology (IT) policies as part of the Enterprise RiskManagement Framework. Provide guidance and support to ensure compliance with regulatory requirements, industry best practices, and evolving risk landscapes. Review third-party More ❯
AWS. You're an expert in operating within an enterprise security program and developing a security model in the AWS cloud - identity and access management, logging and monitoring, infrastructure security, data protection, and incident response. Delivery - As a consultant you will often go on-site to customers to deliver … developing tools, services, and new artefacts that help others build on the work you deliver. BASIC QUALIFICATIONS Significant experience in IT security, compliance and riskmanagement, including privacy, controls, etc. Proven and significant experience working with security reference architectures for all-in cloud deployments and/or hybrid … Certifications, e.g. AWS Solutions Architect Associate, Security Specialty. Strong verbal and written communications skills and ability to lead effectively across organisations Understanding of enterprise riskmanagement methods and techniques to drive successful outcomes in complex public sector or highly regulated organisations Degree or equivalent experience; Computer Science or More ❯
Oversight, you should have experience with: Working in or closely with a Chief Data Office (CDO/CDAO), ideally in a governance, oversight, or risk capacity. A background in data governance, data controls, and policy implementation within financial services. Familiarity with oversight on data products, data transformation, and/… or machine learning models (e.g., tracking model inputs, data drift, explainability, fairness, and model risk governance). Some other desirable skills may include: Understanding of Financial Crime risk domains (Anti Money Laundering, Know Your Customer, and Sanctions) and their data dependencies. Knowledge of regulatory expectations and model governance … frameworks. Programme office accountabilities. You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen strategic thinking and digital and technology, as well as job-specific technical skills. This role will be located at our Glasgow More ❯
visit Civil Service Jobs and quote ref no. The ComSec (Communication Security) Team provide services to HMRC in respect of secure communications and provides management, assurance and accountability for Rosa, Crypto and STRAP services. The ComSec Team will additionally provide: Support Training Guidance To ensure that HMRC is compliant … regional facilities where Rosa and STRAP networks will be housed. Experience of the design and build of these facilities is required. Duties will include: Management of one or more HO level staff. Leading, as subject matter expert, on several areas of security activity including security incidents. Facilitating access to … be limited to : Maintain the security and integrity of all STRAP enclaves and material; Providing advice and guidance on STRAP matters; Providing updates and management information to Senior Stakeholders; Management and assurance of STRAP information, systems and documentation in accordance with national regulations. Crypto: The role of Crypto More ❯
Glasgow, Blackhall, Renfrewshire, United Kingdom Hybrid / WFH Options
Be-IT Resourcing Ltd
client on the lookout for an IT Project Manager (Infrastructure). Key Responsibilities Project Planning : Convert project requirements into comprehensive plans for execution. Resource Management : Align project demand with resource availability using industry-standard tools. Global Meetings : Lead and schedule customer-facing meetings across different time zones to report … key activities and dependencies. Efficient Resource Allocation : Forecast and allocate resources throughout the project lifecycle. Resource Planning : Create schedules to highlight constraints and utilisation. Risk Documentation : Generate documentation for risks related to budget, hardware delays, scope changes, technical issues, skill gaps, bottlenecks, and overutilisation. Risk Communication : Inform the … Head of Project Management about potential risks and impacts. Milestone Tracking : Improve planning and tracking to meet deadlines effectively. Scope and Budget Monitoring : Prevent profit dilution and ensure budget alignment. Continuous Improvement : Document lessons learned to drive innovation and improvement. Essential Skills & Experience Project Delivery : Experience in end-to More ❯
international savings and investments business with roots stretching back more than 170 years, we offer a range of financial products and services through Asset Management, Life and Wealth. All three operating segments work together to deliver attractive financial outcomes for our clients, and superior shareholder returns. Through our behaviours … implement the cloud and security architecture strategy aligned with M&G's business objectives and technology vision. Cloud Architecture: oversee the design, implementation, and management of scalable, secure, and resilient cloud infrastructure solutions. Security Architecture: ensure robust security measures are integrated into all architectural solutions, mitigating risks and protecting … enterprise architecture. Innovation and Best Practices: keep abreast of industry trends and emerging technologies, recommending and implementing best practices to enhance efficiency and security. RiskManagement: identify potential security threats, develop risk mitigation strategies, and ensure compliance with relevant regulations and standards. Team Leadership: lead, mentor, and More ❯
significant impact to the long-term direction, strategy and financial sustainability of the University, providing strategic leadership and expert insight to support the identification, management and enhancement of mutually beneficial bilateral partners, networks and alliances. Main Duties and Responsibilities Strategy and Business Development Building on the existing TNE arrangements … and working closely with colleagues engaged in TNE management and governance, lead on the University of Glasgow's TNE strategy focused on new international business opportunities, including the mobilisation and co-ordination of all senior stakeholders. This will require a business development approach to support the identification and creation … broader network of TNE partnerships. This will include representing the University in negotiating and finalising agreements with senior staff in overseas-based education institutions. RiskManagement and Due Diligence Lead on the development of risk assessments for each international partnership project - this will include periods of time More ❯
City, Aberdeen, United Kingdom Hybrid / WFH Options
Baker Hughes Gruppe
Are you passionate about cybersecurity, risk & compliance? Are you passionate about being part of a successful team? Join us! A leader in the Energy Technology Industry, Baker Hughes offers opportunities for qualified people who want to grow in our high-performance organization. Our leading technologies and our ability to … You will be supporting the HQ DT M&A team in planning and execution of the cybersecurity section of deals, and Regional Compliance and Risk Management. You will oversee the M&A and Cybersecurity and Risk function across different Baker Hughes business sites, presence and interests. As a … to business strategies and requirements. Assisting in the maintenance of M&A playbooks based on company security standards, procedures, and best practices including account management, tenant management, information/IP protection management, proxy server management, security ingress/egress management, domain trusts posture, SSL/ More ❯
Edinburgh, Midlothian, United Kingdom Hybrid / WFH Options
Inspire People
and agile mindset Experience in driving DevSecOps and Automation culture among the engineering team Desirable skills: Insurance domain experience is highly desired Tech Dependency management, stakeholder management skills and storytelling abilities Tech Debt and Riskmanagement Benefits: Organisation is consistently voted a Top Employer in the More ❯
Glasgow, Scotland, United Kingdom Hybrid / WFH Options
Head Resourcing
ensuring adherence to industry best practices. Collaborate with cross-functional teams to improve cybersecurity measures and prevent future threats. Provide clear communication to senior management on cybersecurity risks and incidents. Drive continuous improvement through post-incident reviews and scenario testing. What They're Looking For Extensive experience in cybersecurity … incident response and operational leadership within a Security Operations environment. Strong knowledge of cyber attack vectors, threat actors, and risk mitigation strategies. Proficiency in cybersecurity metrics, riskmanagement, and incident response best practices. Excellent communication and stakeholder management skills. Ability to work in a dynamic, fast … participate in an on-call rotation for incident response. Desirable Skills & Qualifications Professional certifications such as CISSP, CISM, CEH, GIAC. Familiarity with ITIL Service Management processes (Change, Incident & Problem Management). Experience in eDiscovery and digital forensics. Knowledge of operational security controls and product stacks. What's In More ❯