76 to 100 of 186 Risk Register Jobs in the UK

processes and metrics.* Drive planning readiness and cadence across team backlogs (features, capabilities, epics).* Assist in creating reports on ART performance, flow metrics, risk registers, and objectives.**Stakeholder Engagement*** Collaborate with Product Management, architecture leaders, programme managers and customers to clarify requirements and integration needs.* Communicate ART progress ...

experience as an Information Security Manager leading cyber/data security & compliance teams in a similar sized organisation(s). Experience managing an enterprise risk register. Experience managing InfoSec gathering and reporting metrics. Experience spearheading offensive security activities. Certifications such as CISSP, CISM, CISA, or similar are highly preferred. ...

company locations may be required for meetings, audits or business needs. Your Duties and Responsibilities Maintain compliance trackers including DSAR logs, DPIA registers, risk registers and DSPT action plans Support the annual DSPT submission and maintain audit-ready evidence throughout the year Organise and maintain ...

What we’re looking for (Essential Skills)****Information Security Risk Management & Governance** **Experience in an Information Security Manager or similar role** **Qualifications** Experience assessing and managing security risks across varied sectors or accounts Strong analytical, organisational and stakeholder engagement skillsMaintaining the information security risk register and treatment ...

gathering, DPO and auditor liaison, findings and remediation, management assertion. Between audits you keep the ISMS and AIMS actually operating with the Security Lead: risk register, statement of applicability, policy lifecycle, access reviews, internal audit, management review, security steering cadence. Third-party and subprocessor risk. … hostile reviewer. Precise, evidenced, and honest about what we don’t do. You know the difference between an answer and a deflection. Third-party risk in practice. You've built or run a vendor review process and held a subprocessor list accurate under contractual notice obligations. Evidence discipline. ...

constantly being updated with changes to technology and approaches to security. Participate in cyber incident response, governance reporting, penetration testing, control of the Risk Register and awareness training to uphold safety and compliance standards. Collaborate with Automation engineers to implement secure configurations and maintain system availability within … enterprise environment. Cyber incident response, management, escalation, investigation & 3rd party involvement. Computer architecture, digital logic, machine level representation of data Management of cyber security risk, tools and techniques. Familiarity with regulations, such as IEC 62443, NIS2 and Cyber Security Resilience Bill. Why Join Muller? Sourcing milk from over ...

into business processes. Monitor implementation and adoption, gathering feedback and recommending further improvements where required. Maintain project plans, action logs, progress records, milestones and risk registers. Coordinate internal resources and provide regular project updates. Produce clear documentation, including requirements, process maps, user guides, test evidence and training materials. Provide ...

overarching strategic objectives and benefits. Strong stakeholder engagement skills, including working confidently with senior leaders, partners and suppliers. Experience developing programme plans, roadmaps, risk registers and dependency maps. Ability to analyse complex information and provide clear reporting, insights and recommendations. Strong financial and commercial awareness, including forecasting, monitoring ...

overarching strategic objectives and benefits.* Strong stakeholder engagement skills, including working confidently with senior leaders, partners and suppliers.* Experience developing programme plans, roadmaps, risk registers and dependency maps.* Ability to analyse complex information and provide clear reporting, insights and recommendations.* Strong financial and commercial awareness, including forecasting, monitoring ...

other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks, including maintaining risk registers and tracking remediation. Lead and support internal and external security audits , including evidence gathering, control testing and remediation of findings. Manage technical security risks … within Data Protection Impact Assessments and policy exceptions. Support the vendor and third-party risk management programme, including assessment and ongoing monitoring of critical suppliers. Work with technical teams around identity and access management, including SSO and federated services . Provide security assurance for projects, systems and customer requirements. ...

Cyber Governance, Risk & Compliance Lead Salary: Up to £60k + car allowance + package Location: Leeds (Remote role with some travel) Why Apply? This is an opportunity to join a stable and growing organisation in a key Group-level cyber security role, working across a diverse portfolio of subsidiary … businesses. As Cyber Governance, Risk & Compliance Lead, you will play a central role in maintaining and developing the Group's cyber governance framework, supporting subsidiaries with security compliance, audit readiness and risk management. You will also play an important role in integrating newly acquired businesses into the Group ...

performance, development and continual improvement of the service throughout its lifecycle. You'll own the service definition and roadmap, oversee operational performance and risk, manage supplier relationships and ensure the service continues to meet the needs of its users and business stakeholders. This is a senior service management role … teams and senior stakeholders within a complex and highly secure environment. Key Responsibilities Own and continually develop the service definition, roadmap, backlog and service risk register Take end-to-end ownership of the service throughout its lifecycle, from initial development through live operation and eventual retirement Chair ...

completion. Support internal and external audits through evidence gathering, coordination and follow-up activities. Monitor compliance with security policies and control requirements. Governance, Risk and Compliance: Assist with risk assessments and the maintenance of information security risk registers and control monitoring. Monitor regulatory, legal and contractual requirements … security controls aligned to ISO 27001, Cyber Essentials Plus and NIST frameworks. Produce compliance reports, dashboards and management information for stakeholders. Third-Party Risk Management: Support supplier due diligence and assurance activities. Review supplier security documentation including certifications, policies and questionnaires. Track supplier remediation actions and risk treatment ...

design decisions. Work with technical teams to implement appropriate security controls around identity, access management, SSO and federated services . Oversee information security risk management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls … compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third-party/vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work ...

Agencies Please. Please note, BANES Council operates a policy of prior consideration for roles for any individual on the Council’s at-risk register (redeployee). This means should a redeployee express an interest in this role, providing they meet the essential criteria for the role they will ...

service delivery. Oversee capacity planning within the Telecoms Architecture, proactively identifying and mitigating potential risks through maintenance planning and defect resolution. Manage the Telecoms Risk Register and ensure all new technology aligns with contract SLAs through effective Acceptance into Live Service processes. Serve as the Network Management Center ...

Analytics Data Readiness Assessments, including data suitability, accessibility, quality, and governance considerations.Ability to identify, assess, and manage data-related risks, maintaining Data Risk Registers and mitigation plans.Experience mapping business capabilities to data assets through Capability-to-Data Models and traceability frameworks.Strong expertise in defining Future-State Data Architecture ...

Analytics Data Readiness Assessments, including data suitability, accessibility, quality, and governance considerations. Ability to identify, assess, and manage data-related risks, maintaining Data Risk Registers and mitigation plans. Experience mapping business capabilities to data assets through Capability-to-Data Models and traceability frameworks. Strong expertise in defining Future-State ...

leadership to the organisation, including advising the SLT and presenting to the Board on financial and business performance. Fulfil Company Secretarial responsibilities. Lead on Risk Register oversight for the organisation. Lead on supporting both the Audit and Risk Committee and the Strategy and Finance Committee. Spearhead ...

Analyst strengthens PCI Pal's central Information Security function by providing structured governance, risk and compliance analysis across audit, assurance, control management and strategic change. The role turns requirements, evidence, risks and delivery updates into accurate, traceable information that supports timely decisions by the GRC Lead and CISO. … tracking, while the Project Manager retains responsibility for project governance, planning and delivery coordination. Job requirements Relevant experience in GRC, information security compliance, risk management, internal audit or assurance. Working knowledge of at least one major framework, such as PCI DSS, ISO/IEC 27001, SOC 2 or NIST ...

established and growing international technology-led organisation is seeking a Group Information Security Manager to support and develop its cyber security, governance, compliance, and risk management capabilities across multiple European locations. This is a newly enhanced role offering the opportunity to influence security strategy, drive security best practice … Support the development and implementation of the Group-wide Information Security and Cyber Security strategy. Establish and maintain security policies, standards, governance frameworks, and risk management processes. Develop and maintain the Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident ...

1. Design and develop enterprise cyber security strategy and architecture a. Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses b. Identify risks associated with business processes, operations, information security programs and technology projects c. Identify and communicate current and emerging security threats … design assurance i. Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, hardware related to cyber risk security in order to better match business outcome objectives ii. Analyse technology environment, enterprise specifics, client requirements to set a collaboration design framework/ ...

Manager (EMEA) to join our growing team. Reporting to the Global Security Manager, you will be responsible for supporting and enhancing information security, compliance, risk management, and business resilience activities across our UK and European operations. This is an excellent opportunity for a security professional who enjoys balancing technical … security standards and accreditations including PCI DSS, ISO 27001, ISO 22301, Cyber Essentials Plus and IT Health Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. ...

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...