51 to 75 of 186 Risk Register Jobs in the UK

with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation. We pride ourselves on combining technical expertise with a practical, hands‐on approach, helping our clients strengthen resilience … meet regulatory requirements, and stay ahead in an increasingly digital and risk‐driven landscape. Technical and Domain Experience Conduct cybersecurity maturity and risk assessment and for clients. Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments. Advise clients on cybersecurity strategy, metrics ...

highly regulated engineering programme. This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management. Location: Barrow-in-Furness (Hybrid) Hybrid: Typically 1-2 days on-site per month Contract: 12 months Positions: 1 Rate: £63.21 PAYE/… line with programme plans and governance Developing Interim and Final Security Cases across programme phases Managing IA and security risks, including maintaining security/risk register contributions Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence Coordinating and managing IA Technical Queries and formal communications ...

provider, acting as the internal security practitioner against their outputs. The role also requires genuine compliance capability, you will contribute to internal audit and risk assessment cycles and support ISO 27001 compliance activity. You will provide ad-hoc expert input to the IT function where security judgement is needed … maintained to a defined standard Managing the vulnerability management programme, including coordination of internal and external penetration testing Conducting internal security audits and risk assessments, producing findings reports and tracking remediation Supporting ISO 27001 compliance activity, including contributing to control evidence and audit cycles Producing clear written outputs -- findings ...

condition of doing business for us. The role You will own security at Aptitude Software: product and cloud security, internal and corporate security, governance, risk and compliance, third-party and vendor security, business continuity and disaster recovery, and the security tooling estate. You will build these into one function … with the CPTO and reported to the executive team and board. Establish clear, simple security metrics and report them regularly Own the information security risk register and the information security committee agenda Own security policy end to end, including the vulnerability management, version support and secure development policies. ...

Frasers Group is seeking a Technology GRC Analyst to support the ongoing development of its technology risk and assurance capability across the group’s global operations. You will identify, assess and monitor technology and cyber risks while ensuring IT and business controls are designed and operating effectively, collaborating with … multiple stakeholders. You will deliver risk assessments, controls testing and IAM assurance, maintain the risk register and contribute to supplier risk and #J-18808-Ljbffr ...

Role Title: Compliance & Risk Support Analyst Pay rate: £276.00 per day Umbrella Location: Bearwood Rd, Sindlesham, Wokingham RG41 5BN | Hybrid 50/50 Duration: 4 Months Clearance: Active SC clearance Role A Compliance & Risk Support Analyst helps an organization maintain regulatory adherence and minimize potential risks by identifying …/logging risks, developing mitigation strategies, and monitoring compliance. Key duties include conducting risk reviews, analyzing data, maintaining risk registers and policies, preparing for and support evidence collection for audits, and educating staff on compliance and risk management. Essential skills include strong analytical abilities, attention to detail ...

Ensure compliance with Premier League cybersecurity requirements, PCI DSS, GDPR, and applicable regulatory frameworks. Provide executive-level oversight of the Club's security posture, risk register, and incident response capability. Ensure security considerations are embedded into all technology investment, procurement, and change decisions. Stadium, Venue, and Football Technology … cost justification to the COO, CFO, and ownership group as required. Negotiate and manage vendor and supplier contracts, ensuring value for money and contractual risk is appropriately managed. Identify opportunities to reduce cost, consolidate platforms, and improve return on technology investment. MEASURES OF PERFORMANCE Technology strategy is clearly articulated ...

Ensure compliance with Premier League cybersecurity requirements, PCI DSS, GDPR, and applicable regulatory frameworks. Provide executive-level oversight of the Club's security posture, risk register, and incident response capability. Ensure security considerations are embedded into all technology investment, procurement, and change decisions. Stadium, Venue, and Football Technology … cost justification to the COO, CFO, and ownership group as required. Negotiate and manage vendor and supplier contracts, ensuring value for money and contractual risk is appropriately managed. Identify opportunities to reduce cost, consolidate platforms, and improve return on technology investment. MEASURES OF PERFORMANCE Technology strategy is clearly articulated ...

information on data governance activity, progress, risks, and outcomes. Record, track, and support the management of data incidents, including associated action plans, the Data Risk Register, and incident logs. Work with Data Owners, Data Stewards, Risk, Information Security, Compliance, and other governance functions to identify, elevate ...

Cyber Security Specialist to support the protection of the organisation's information assets, systems, and services. The role will work across security operations, governance, risk management, compliance, incident response, and security awareness to help maintain a robust and resilient security posture. What you'll do: Security Operations Monitor security … incidents, coordinating containment, eradication, and recovery activities. Support vulnerability management activities, including remediation tracking and reporting. Assist with threat intelligence gathering and analysis. Governance, Risk & Compliance Support the maintenance and continual improvement of the Information Security Management System (ISMS). Conduct security risk assessments and maintain risk ...

cycles throughout the year, coordinating with external auditors, internal control owners, Engineering, People, Legal, Finance and Operations. You'll maintain the controls, evidence, policies, risk register, access reviews, vendor reviews, business continuity processes, and incident response documentation that support our certifications and customer commitments. AI drafts and updates … Product and Engineering to translate compliance requirements into practical operational controls without slowing the company down unnecessarily. You'll help the company make clear, risk‐based decisions, escalating when something matters and cutting through noise when it doesn't. You'll raise the maturity of how Humaans thinks about ...

programme timelines, release plans, and business objectives. Lead test planning, estimation, and scheduling across distributed teams and workstreams to ensure timely delivery. Implement a risk-based testing approach; maintain a dynamic test risk register and ensure timely mitigation. Design and implement the automation strategy across ...

Sizewell C Limited is seeking a Cyber Risk Manager to lead the organisation's cyber risk management framework. You will translate threats into actionable insights, working with cyber security, digital, assurance and business teams to strengthen resilience and align with regulatory and business objectives. Reporting to the CISO … will own the risk register, taxonomy and scoring, ensuring escalation and governance, with a focus on protecting critical infrastructure in a highly regulated #J-18808-Ljbffr ...

MAIN DUTIES Information Security & Risk Management Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready. Provide proactive security and data protection … initiatives, change and ongoing projects, ensuring security-by-design and privacy-by-design requirements are embedded from design through implementation. Conduct information security risk assessments to identify, evaluate and prioritise threats and control gaps, ensuring effective controls are agreed, implemented, tracked to closure and reflected in the risk ...

process industries. To establish and scale a safety-first OT and ICS testing capability that allows industrial clients to understand and reduce cyber risk in live operational environments, and to grow it into a differentiated, profitable service line that we cross-sell across LRQA Cyber. Working conditions: Hybrid … skilling and a leveraged delivery mix. Key health & safety responsibilities: Eliminate or minimise employee exposure to risks by regularly reviewing the health and safety risk register, applying appropriate controls, communicating results of risk assessments, and ensuring health and safety is considered in the planning and execution ...

Governance Working Group, bringing together representatives from operations, People, finance, and IT to embed a culture of data stewardship. Maintain a comprehensive data asset register and ensure all critical data flows are mapped and documented. Data Protection & GDPR Compliance Act as the organisation’s subject matter expert … enforced. Conduct periodic reviews of third‐party data processors to confirm ongoing compliance with contractual and regulatory obligations. Maintain the organisation’s supplier data risk register and elevate material risks to the CTO. Training, Awareness & Culture Design and deliver data governance and data protection training programmes ...

that it works. Manage external IT providers and vendors, review new software before adoption and support the IT budget. Maintain a technology and cyber‐risk register and report clear KPIs to senior leadership. Person Specification Essential 5+ years’ hands‐on experience in cyber security, IT or platform engineering. ...

that improve operational performance and user experience. Governance & Administration Produce and maintain accurate records of business systems, licences, suppliers and key documentation including schedules, risk registers, governance documentation, and status reporting Ensure technology changes are documented and communicated appropriately. Support system access reviews and maintain appropriate documentation for technology ...

level communications during service-impacting events. Manage customer escalations through to successful resolution while maintaining strong stakeholder confidence. Develop and maintain service improvement plans, risk registers, and customer success strategies. Ensure accurate reporting of KPIs, SLAs, customer satisfaction metrics, and service performance indicators. Support contract renewals, service expansion opportunities ...

management framework, ensuring all projects follow the agreed-upon methodologies. Conduct regular “health checks” and audits on project documentation, including PIDs (Project Initiation Documents), risk registers, and closure reports. Support the Head of PMO in refining project delivery templates and processes to increase organizational efficiency. 2. Reporting & Data Analysis ...

well established global technology company with a strong base in Edinburgh. This is a senior role within the Information Security team, focused on governance, risk and compliance, with responsibility for helping shape and continually improve the organisation's security framework across a global environment. You'll take ownership … areas, including ISO 27001, security risk assessments, third-party risk, audit and control effectiveness. There is also an interesting element around the governance and responsible use of AI, helping the business understand and manage the security and data risks that come with emerging technologies. The Company: This ...

realise these benefits, Dorset Council requires dedicated senior transformation leadership focused specifically on Procurement and Commissioning. Without this role, there is a material risk that legacy SAP processes are replicated within Oracle, limiting improvement, weakening control, and undermining the Council's Medium Term Financial Plan (MTFP) savings assumptions. … requisitioning, approvals, supplier onboarding and contract lifecycle processes. Eliminate SAP legacy workarounds and shadow systems. Drive adoption of standard Oracle-enabled processes. Governance, Compliance & Risk Strengthen procurement governance and internal controls. Own procurement risk register within ERP programme. Provide assurance on procurement readiness for go-live. Data ...

Management Identify schedule risks, constraints, and interdependencies early. Model mitigation scenarios and communication of impacts clearly to stakeholders. Feed schedule intelligence into broader project risk registers. Process & Best Practice Implement robust planning standards aligned with client expectations. Skills & Experience Required Strong experience in project planning and controls. Expert user ...

Travis Perkins plc is now hiring for a proactive and detail-oriented Governance, Risk, and Compliance (GRC) Infosec Manager (PCI) to join our central Information Security team. This is a high-visibility, specialised role focused on leading our Group-wide Payment Card Industry (PCI) compliance ecosystem. Reporting directly … will serve as the primary subject matter expert and point of contact for external Qualified Security Assessors (QSAs), while also contributing across wider cyber risk, third-party assurance, and data privacy governance. If you are a driven GRC professional with a strong grounding in PCI DSS standards, third-party ...

team. The Role This is a new position acting as the organisation's Responsible AI lead. You will set up and run the governance, risk management and assurance arrangements that support safe adoption of AI across the business. AI risk will be managed as part of the wider … technology risk and security framework rather than in isolation, so the role also covers broader technology GRC. Key Responsibilities Help design, implement and run the Responsible AI governance framework, covering risks such as fairness, transparency, explainability, privacy, security and human oversight Carry out risk triage and assessments ...