This role is pivotal in safeguarding the organisation’s reputation and ensuring regulatory compliance. You will work closely with process owners, auditors, and stakeholders to analyse, monitor, and address risk management and compliance issues, with a strong alignment to the Group Head of Audit. Key Responsibilities Administer and maintain ISO 27001 and ISO 22301 compliance programs. Oversee and configure … the GRC tool, ensuring it remains current and effective. Manage relationships with GRC solution providers. Conduct risk and vulnerability assessments, compliance reviews, and audits. Support and manage ISO 27001, ISO 22301, and PCI audits. Maintain a central repository for audit evidence. Develop and enhance the GRC framework in line with industry best practices. Collaborate with cross-functional teams to … identify and mitigate IT and business risks. Own and manage the IT RiskRegister and RoPA. Align risk assessments with the Group Risk function. Promote health and safety awareness and compliance across the organisation. Qualifications & Experience Experience in GRC, risk management, or compliance within IT or related fields. Familiarity with ISO 27001, ISO 22301, and More ❯
slough, south east england, united kingdom Hybrid / WFH Options
Morgan Philips Group
the Legal Team, you will be responsible for ensuring the organisation adheres to legal standards and internal policies across multiple jurisdictions. You will implement compliance programs, monitor adherence, provide risk-based legal advice, and help shape a compliance-focused culture. Key Accountabilities: Compliance and Governance Ensure the organisation adheres to corporate governance standards, codes of conduct and relevant laws … and impact on the business, providing timely advice to leadership and relevant stakeholders. Support the development and application of internal controls to ensure full compliance with all applicable Legal Risk Management Proactively Identify, assess, and mitigate legal and compliance risks across all the group companies. Advise on the legal and regulatory implications of strategic and operational decisions, supporting the … business in managing risk appropriately. Maintain legal riskregister and contribute to companywide risk review. Policy Oversight and Monitoring Where relevant implement and/or maintain key corporate policies owned by the legal team, including but not limited to anti-bribery and corruption, competition, whistleblowing, data protection and ethical conduct. Monitor adherence and manage internal reporting More ❯
compliance with UK Corporate Governance Code, Companies Act, and competition law. Maintain governance frameworks, statutory filings, and compliance controls. Support due diligence, KYC processes, and policy updates. Assist with risk management and regulatory reporting. Lead automation and streamlining of governance processes. Stakeholder Engagement Liaise with shareholders, senior management, and legal advisors. Ensure compliance sign-offs and facilitate effective communication … between key stakeholders. Build strong relationships with compliance, legal, and risk teams. Reporting & Risk Management Contribute to monthly reporting, maintain the corporate riskregister, and support implementation of mitigation strategies. Insurance Administer company insurance coverage and compliance in coordination with the risk team. People Management Manage team performance, workload, and development. Act as escalation point More ❯
the rollout of tools and templates to increase visibility, consistency, and accountability across the portfolio. Key Responsibilities Maintain, manage and track programme/project governance tools including RAID logs, risk registers, action trackers, and issue logs. Design, automate and improve reporting processes using tools such as Power BI , Microsoft Project , Excel , and other visualisation platforms. Collect, analyse, and interpret More ❯
slough, south east england, united kingdom Hybrid / WFH Options
Hawksworth
controls, Review and distribute threat intelligence alerts to relevant stakeholders, Monitor security alerts identified by SOC and CSIRT, work with the CERT team, Support and maintain ethe IT Security Riskregister, contribute to security reporting and tracking security risk indicators. Required: 5+ years in IT Infrastructure Security, preferably in Investment Banking Focused on Application Security Good Endpoint More ❯
they bring to the table, supporting one another as we continue to deliver for our customers. LI-KS1 Responsibilities: Provide support in proactive and effective oversight of the technology risk management frameworks, methodologies, processes, assurance, remediation, and reporting activities across the company. Manage and own the Technology Risk Register. Collaborate with technology and business stakeholders to identify, define … and prioritize pragmatic and efficient remediation activities related to risk and control issues. Facilitate the Risk acceptance process when Residual Risk exceeds appetite. Manage and continually improve the organization's risk profile. Provide subject matter expertise in Technology Risk to the business and communicate the risk environment through dashboards and KPIs. Additional Responsibilities: Use … consistent processes to identify potential risk events, quantify and document their probability and impact. Refer to domain experts for guidance on specialised risk areas such as architecture and environment. Work with stakeholders to implement agreed mitigation activities. Identify emerging risks, issues, and needs, and determine potential causes. Support the overall risk strategy to safeguard the organization's More ❯
Bracknell, Bracknell Forest, Berkshire, United Kingdom
Jam Management Consultancy ltd
key support to the Chief Information Security Officer (CISO) to nurture a culture of continuous improvement. Identifying opportunities to refine or enhance quality systems and business compliance practices. Certifications & Risk Management Taking ownership of certification activities such as ISO 9001, ISO 14001, ISO 22301, ISO 27001 and PCI-DSS. Coordinating internal and external audits, and ensuring all certifications remain … current. Managing internal Risk Registers and facilitating risk review meetings. Raising potential risks early and ensuring the business has time to respond before audit deadlines. Ensuring regular, clear communication across departments in preparation for audits. What you’ll bring: Previous experience managing ISO or other compliance certifications. A strong background in process governance, administration or quality assurance. A … relevant degree or equivalent experience. Proven ability to manage risk registers and compliance documentation. A practical, proactive mindset with strong attention to detail. Strong written and verbal communication skills. Confidence working across departments and engaging with auditors and certification bodies. A genuine passion for business improvement, security and compliance. Why this opportunity? Our client is a values-led organisation More ❯
slough, south east england, united kingdom Hybrid / WFH Options
Helix International Group Ltd
Company Overview Helix International Group is the parent company of a leading group of businesses operating in risk, compliance, safety software, and services for the built environment and workplace. Helix delivers market-leading risk, compliance, and safety solutions, creating business value for clients through product innovation, high client intimacy, tailored support services, and outsourcing solutions. Our mission is … and managing surveillance and recertification audits. Coordinate internal audits and spot checks across all standards and ensure effective corrective/preventive action processes are in place. Maintain and manage risk registers, compliance logs, document control processes, and policy updates. Work with leadership and key stakeholders to embed compliance practices in day-to-day operations. Deliver staff training and awareness … as guiding standards. Conduct a materiality assessment aligned with stakeholder expectations and business impact. Create a phased ESG framework that aligns with Helix’s core services, operational structure, and risk profile. Identify KPIs and reporting obligations across environmental performance, social value, and governance maturity. Partner with procurement, IT, HR, and client delivery functions to embed sustainable practices in operations More ❯