101 to 125 of 186 Risk Register Jobs in the UK

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...

delivery of software projects, from early scoping and planning through release and post launch improvement. Creation and ownership of project schedules, resource plans, risk registers, and delivery roadmaps that keep teams aligned and moving. Coordination across software engineering, QA, data science, systems engineering, quality, and regulatory affairs to ensure ...

success metrics. Create solution architectures, technical designs, and high-value proposals aligned to customer outcomes. Develop accurate SOWs, resource plans, delivery timelines, assumptions and risk registers. Support commercial negotiations and provide input on pricing, T&Cs and change control. Serve as lead consultant on assigned billable engagements — run workshops ...

encryption of sensitive stores, and publish them to data owners. Advise the security function on data-protection exceptions and record each decision in the risk register. Lead cross-functional data privacy and security design and threat-modelling activities, translating identified risks into layered, prioritised engineering improvements. Design and implement ...

Services are engaged across sales stages. Governance, tooling, and metrics Build the program management and governance infrastructure: intake frameworks, capacity planning models, risk registers, delivery dashboards, and milestone tracking. Define and report delivery KPIs: on-time delivery, utilization, engagement margin, customer satisfaction. Own SOW amendment and change-order processes ...

audits and maintain associated evidence, records and corrective action plans. Monitor and report on information security performance, risks and compliance activities. Conduct information security risk assessments across systems, applications, infrastructure, business processes and third-party suppliers. Maintain security risk registers and support the implementation of appropriate mitigation measures. … from design through implementation. Contribute to solution reviews and security assessments for new technologies, systems and services. Support supplier security reviews and third-party risk assessments. Assist with the implementation of security improvement initiatives across the organisation. Security Awareness & Culture Develop and deliver information security awareness activities, campaigns ...

Secure DevOps. You may have started your career in cyber engineering, infrastructure security, security operations or cloud security before moving into GRC, cyber risk or controls. Alternatively, you may already be working in a technically focused Cyber GRC position within financial services or another highly regulated organisation. This … highly visible opportunity to help strengthen cybersecurity governance, risk management and regulatory compliance across a complex international business. THE ROLE * Develop and maintain comprehensive cybersecurity policies, standards and procedures * Ensure security policies align with regulatory requirements and recognised industry frameworks * Integrate effective security practices and controls across technical ...

overall defence security posture is maintained, evidenced, and continuously improved. The role is the single point of accountability for security assurance, accreditation support, risk governance, and policy compliance across the service delivery lifecycle. Key Responsibilities Security Assurance Regime Develop, implement, and maintain the security assurance regime for the service … primary point of contact for all security accreditation matters — engaging with the client's Security Accreditation Authority, Information Asset Owners, and Senior Information Risk Owners (SIROs). Support the accreditation lifecycle. Maintain a register of all accreditation conditions, caveats, and risk acceptances — tracking compliance and closure. Security ...

with partner teams or you have to write the code yourself. Act as the technical arm of Vinted Pay's security accountable: maintain the risk register, prepare mitigation‐or‐acceptance decisions against centrally set thresholds, and represent Vinted Pay in the group's security governance. Embed secure development … into Payments engineering so security lands at design time rather than after deployment, and raise the security fluency of Vinted Pay engineers so risk‐based decisions happen well without you in the room - security as a delivery enabler, not a gate. About you Strong hands‐on security engineering experience ...

financial controls. The role supports the Technology Vendor Manager and works across internal stakeholders and third‐party providers. You will help maintain governance routines, risk registers and change management, contributing to Supplier transition planning and continuous improvement initiatives. #J-18808-Ljbffr ...

contract. You’ll support EU Cyber Resilience Act readiness and mature governance across engineering, product, quality, service and cyber security teams. Responsibilities include maintaining risk registers, supporting audits and implementing AuditBoard, with UK remote work and occasional travel to client sites in England. #J-18808-Ljbffr ...

integration of contractors into core systems and processes Provide governance and oversight for the Awaab's Law Phase 2 programme Maintain project plans, risk registers, dependencies, budgets, and resources Drive collaboration between IT, operational teams, suppliers, and stakeholders Lead and direct Senior Business Analysts to ensure outcome-focused delivery ...

Itchyfeet Recruitment Agency is seeking a full-time Technology Risk and Governance Analyst based in the Isle of Man. You will support the technology risk and governance framework, coordinating risk, control, policy, audit, outsourcing, and regulatory activities with technology leadership and risk owners. The role focuses … managing risk assessments, risk registers, policy reviews, supplier governance, and audits while promoting regulatory compliance and a strong control environment. #J-18808-Ljbffr ...

support senior consultants in ensuring robust cyber security across our projects. Day-to-day of the role: Support project-level security assurance and risk management activities. Gather and document control evidence and assurance artefacts. Maintain risk registers, actions, and remediation tracking. Support audits, reviews, and formal assurance processes. … implement agreed security controls. Assist with cloud and SaaS security assurance tasks. Ensure decisions, risks, and controls are clearly documented and traceable. Produce security risk assessments, risk positions, and pragmatic control recommendations across cloud, SaaS, and integration-heavy environments. Support remediation activity by working with delivery teams ...

support senior consultants in ensuring robust cyber security across our projects. Day-to-day of the role: Support project-level security assurance and risk management activities. Gather and document control evidence and assurance artefacts. Maintain risk registers, actions, and remediation tracking. Support audits, reviews, and formal assurance processes. … implement agreed security controls. Assist with cloud and SaaS security assurance tasks. Ensure decisions, risks, and controls are clearly documented and traceable. Produce security risk assessments, risk positions, and pragmatic control recommendations across cloud, SaaS, and integration-heavy environments. Support remediation activity by working with delivery teams ...

support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions with confidence, using evidence-based recommendations and clear communication with technical … response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing deliverables including assessments, risk registers and executive summaries. Required Hands-On Experience 1. Cloud Security (preferably AWS) Hands-on experience securing cloud environments, preferably AWS, including core services ...

companionship platform. You will review code, drive remediation with developers, and coordinate pen tests and audits. Independently own security end-to-end, maintain the risk register, monitor threats, and address AI-specific risks like prompt injections and jailbreaks. Remote Europe, B2B contractor. #J-18808-Ljbffr ...

architecture, operating model and roadmap for how Reachdesk uses its systems. Own the SOC 2 Type II programme, the security policy set and the risk register as the accountable business owner. Own identity and access management, joiner, mover and leaver processes, and the device and endpoint estate across ...

architecture, operating model and roadmap for how Reachdesk uses its systems. Own the SOC 2 Type II programme, the security policy set and the risk register as the accountable business owner. Own identity and access management, joiner, mover and leaver processes, and the device and endpoint estate across ...

architecture, operating model and roadmap for how Reachdesk uses its systems. Own the SOC 2 Type II programme, the security policy set and the risk register as the accountable business owner. Own identity and access management, joiner, mover and leaver processes, and the device and endpoint estate across ...

architecture, operating model and roadmap for how Reachdesk uses its systems. Own the SOC 2 Type II programme, the security policy set and the risk register as the accountable business owner. Own identity and access management, joiner, mover and leaver processes, and the device and endpoint estate across ...

future state processes, and coordinate testing activities. Partner closely with Business Analysts to ensure delivery is grounded in well-understood business needs Manage risk proactively: Maintain risk registers and mitigation plans. Surface issues early, escalating where needed, and keep the project leadership team ahead of potential blockers Shape ...

carried out by the internal IT & Systems Manager, ensuring proper separation of control definition and operational delivery. You will drive a costed security roadmap, risk register, and board reporting while advising on certification direction and an incident framework. #J-18808-Ljbffr ...

have a primary focus on external stakeholders and compliance. Working primarily in the disciplines of Architecture and consultancy, Identity and Access Management and Governance, Risk and Compliance you will be supported by a security operations and engineering team to deliver security, business value and cyber resilience. This role will … developing security architecture and patterns. Stewardship of information security risks working with the Business Assurance team on reporting. Focusing on crown jewel systems ensuring risk posture and cyber resiliency needs. Ensuring technical risks form Data Protection Impact Assessments are managed Ensure policy exceptions and risks are recorded and managed ...

primarily operational and administrative, helping maintain governance processes, evidence tracking, reporting cadence and awareness activities. Responsibilities Maintain and update compliance trackers, action logs, risk registers and evidence repositories. Support monitoring of obligations related to the Telecommunications (Security) Act and related security frameworks. Assist in preparing governance updates, dashboards, metrics … evidence for audits, assurance reviews and regulatory requests, including Ofcom s135 requests. Ensure all supporting documentation, such as the Information Security Compliance Toolkit (Asset Register, Business Impact Assessment, Risk Treatment Plan), is kept up to date. Assist in the rollout and maintenance of security policies, standards, procedures ...