23 of 23 Permanent Risk Assessment Jobs in the East of England

Description:Head of Governance, Risk and Compliance (Information Security) Your impact Leonardo UK operates in a complex security, regulatory and defence environment. As Head of Governance, Risk and Compliance for the information security team, you will lead the function responsible for setting clear security standards, supporting proportionate risk … required to travel between Leonardo UK sites, with hybrid working supported where appropriate for the role. What you will do as Head of Governance, Risk and Compliance: Lead the Information Security Governance, Risk and Compliance function. Own and maintain UK Information Security standards, assurance arrangements and governance processes. ...

Description:Head of Governance, Risk and Compliance (Information Security) Your impact Leonardo UK operates in a complex security, regulatory and defence environment. As Head of Governance, Risk and Compliance for the information security team, you will lead the function responsible for setting clear security standards, supporting proportionate risk … required to travel between Leonardo UK sites, with hybrid working supported where appropriate for the role. What you will do as Head of Governance, Risk and Compliance: Lead the Information Security Governance, Risk and Compliance function. Own and maintain UK Information Security standards, assurance arrangements and governance processes. ...

assurance evidence are considered at the right stages.* Work with system owners, delivery teams, operational teams and Information Security colleagues to manage security risk through the system lifecycle.* Review security-relevant changes and provide informed advice on whether they remain within agreed security guardrails.* Support risk assessments … fully implemented.* Help ensure security evidence, control status and assurance activity are maintained and available for review.* Escalate material changes in cyber or information risk to the appropriate stakeholders.* Support audits, assurance reviews and continual improvement activity for highly classified environments.This aligns to the operating model, which describes ...

assurance evidence are considered at the right stages. Work with system owners, delivery teams, operational teams and Information Security colleagues to manage security risk through the system lifecycle. Review security-relevant changes and provide informed advice on whether they remain within agreed security guardrails. Support risk assessments … fully implemented. Help ensure security evidence, control status and assurance activity are maintained and available for review. Escalate material changes in cyber or information risk to the appropriate stakeholders. Support audits, assurance reviews and continual improvement activity for highly classified environments. This aligns to the operating model, which describes ...

assurance evidence are considered at the right stages. Work with system owners, delivery teams, operational teams and Information Security colleagues to manage security risk through the system lifecycle. Review security-relevant changes and provide informed advice on whether they remain within agreed security guardrails. Support risk assessments … fully implemented. Help ensure security evidence, control status and assurance activity are maintained and available for review. Escalate material changes in cyber or information risk to the appropriate stakeholders. Support audits, assurance reviews and continual improvement activity for highly classified environments. This aligns to the operating model, which describes ...

changes.Establish and evolve secure development standards, security design patterns, and engineering best practices.Serve as the primary technical authority for complex security architecture decisions and risk-based security trade-off discussions.Drive strategic security initiatives that improve security posture, development efficiency, and regulatory readiness across the organization.Anticipate emerging threats, industry trends … deployment, and maintenance processes.Lead threat modeling activities for critical systems, products, and architectures.Conduct and oversee advanced security assessments, vulnerability investigations, attack surface analyses, and risk evaluations.Design, implement, and review security controls, cryptographic protections, and system hardening mechanisms.Lead investigations of critical security issues and provide technical direction for remediation efforts.Guide ...

evolve secure development standards, security design patterns, and engineering best practices. Serve as the primary technical authority for complex security architecture decisions and risk-based security trade-off discussions. Drive strategic security initiatives that improve security posture, development efficiency, and regulatory readiness across the organization. Anticipate emerging threats, industry … maintenance processes. Lead threat modeling activities for critical systems, products, and architectures. Conduct and oversee advanced security assessments, vulnerability investigations, attack surface analyses, and risk evaluations. Design, implement, and review security controls, cryptographic protections, and system hardening mechanisms. Lead investigations of critical security issues and provide technical direction ...

Description: Head of Governance, Risk and Compliance(Information Security) Your impact Leonardo UKoperatesin a complex security, regulatory and defence environment. As Head of Governance, Risk and Compliancefor the information security team, you will lead the function responsible for setting clear security standards, supporting proportionate riskdecisionsand providing assurance across … areas and maybe requiredto travel between Leonardo UK sites, with hybrid working supported wherappropriate forthe role. What you will do as Head of Governance, Risk and Compliance: Lead the Information Security Governance, Risk and Compliance function. Own andmaintainUK Information Security standards, assurancearrangementsand governance processes. Help ensure security controls ...

maintaining complete, defensible records of data lineage, classification, approval, and access history.Support IT in enabling responsible AI practices including human oversight, explainability, traceability, bias assessment, and ethical use.Implement data quality management across the Azure platform — defining critical data elements, rule sets, monitoring, issue management, and remediation workflows.Establish data quality … hands-on expertise across metadata management, classification, glossary, lineage, and certified dataset governance in an Azure environment.AI governance — strong understanding of responsible AI, AI risk assessment, and AI control frameworks; ability to classify AI use cases by risk and define pre-go-live controls.Data governance strategy, frameworks ...

equipment failures and carry out improvement works based on agreed corrective actions. Lead small projects and continuous improvement works. Use a range of risk assessment techniques to ensure safety of plant, equipment and activities. Act as Permit Issuer for planned work and ensure that work is controlled … improvements. Experience in welding, machining, Pumps, Robotic Palletisers, ink jet printers, check weighers, metal detectors Experience of Permit to Work, EAP, Control of Work, Risk Assessment, HASAWA, PUWER, LOLER, COSHH. Project Management experience BOAS (Boiler Operation Accreditation Scheme) qualification (training provided if required) Skills & Behaviours Demonstrable application ...

definitions, KPIs, and semantic standards across domains. Define and operate governance controls for AI-enabled data consumption, including the AI use case register covering risk rating, approval status, required controls, and review dates; establish the control checklist required before any AI use case goes live. Define rules for what … readiness. Support responsible AI practices including human oversight, explainability, traceability, and appropriate use of AI-generated outputs; support AI/ML governance including model risk controls, data suitability checks, and bias and ethical considerations. Skills and Competencies Strong hands‐on expertise in Microsoft Purview: metadata management, classification, glossary, lineage ...

systems, cloud platforms, and mobile applications while driving compliance with leading industry standards. You’ll play a key role in strengthening product security—from risk analysis to DevSecOps integration—while collaborating closely with engineering, suppliers, and leadership. This is an opportunity to make a measurable impact in a customer … encryption, and workload isolation.Align projects with relevant industry standards (e.g., ISO/SAE 21434, IEC 62443).Risk ManagementLead product TARA activities and maintain risk tracking through the security case and register.Secure Development & DevSecOpsIntegrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define ...

Oversee HR policies, employee relations processes, disciplinary and grievance matters, absence management, onboarding, training and performance-related processes. Manage and maintain auditable systems, records, risk registers, process documentation and internal controls to support client audits and external accreditation requirements. Lead on ISO 9001 quality management processes, ensuring continuous improvement … information security requirements, ensuring appropriate controls are in place to protect company, client, candidate and worker data. Support the Directors with strategic compliance planning, risk management, operational governance and business improvement initiatives. Prepare for and manage client audits, supplier reviews, accreditation assessments and internal compliance checks. Work closely with ...

warnings that are not protected under the Exceptions Order 1975. Any offer of employment will be conditional upon a satisfactory DBS certificate and a risk assessment of any disclosed information. We are committed to fair recruitment and will consider disclosed information on a case-by-case basis ...

warnings that are not protected under the Exceptions Order 1975. Any offer of employment will be conditional upon a satisfactory DBS certificate and a risk assessment of any disclosed information. We are committed to fair recruitment and will consider disclosed information on a case-by-case basis ...

oversee work plans.Establish work plans, staffing requirements, and assign duties and responsibilities.Implement project communication plans and facilitate workshops, steering committees, and executive reporting.Perform risk assessment, maintain RAID logs, and implement mitigation plans.Monitor project activities, ensuring delivery to agreed scope, time, cost, and quality standards.Ensure project goals align with ...

warnings that are not protected under the Exceptions Order 1975. Any offer of employment will be conditional upon a satisfactory DBS certificate and a risk assessment of any disclosed information. We are committed to fair recruitment and will consider disclosed information on a case-by-case basis ...

various security systems and applications, including access control, CCTV, PSIM, and key management. This role ensures compliance with internal policies, legal, customer, and risk requirements, manages physical security audits, and investigations, system operation and maintenance, and troubleshoots security applications and technologies. You will act as subject matter expert, coordinate … Security Operations team, especially experience in coordinating responses to security incidents and managing security systems applications Extensive knowledge of physical security technology, risk assessment methodologies, investigations, regulations, applications, and network administration Solid project management skills to manage mid-scale (in-life) projects (experience in managing technical security projects ...

clear technical leadershipAct as the central authority for SDL regarding SoCs, guiding teams and driving consistent decision-makingProvide frameworks and mentorship for threat modeling, risk assessment, and security reviewsEnsure SDL coverage throughout the entire stack including hardware, software, and productionDevelop and mature security verification methodology for SoCsDefine metrics … direct authorityDemonstrated history of promoting consensus and influencing choices among architecture, building, verification, physical implementation, firmware, software, and product teamsExperience with threat modeling and risk assessmentFamiliarity with hardware and system security concepts such as secure boot, root of trust, and key managementUnderstanding of secure provisioning, manufacturing, and lifecycle managementExposure ...

e.g., reducing waste, accelerating reviews, improving incident response, increasing release confidence).Architect and ship AI/LLM-enabled workflow automation across the SDLC (e.g. risk assessment, automated build, test and deployment, intelligent test selection, change-impact analysis, auto-triage of build/test failures).Establish policies and guardrails … tradeoffs.Excellent written communication (architecture docs, decision records, operating procedures).Experience building AI-assisted developer tooling (e.g., CI insights, test intelligence, code review automation, release risk scoring, incident copilots).Experience implementing evaluation/monitoring for AI systems (quality metrics, drift, offline test sets, human feedback loops).Extensive experience with software ...

warnings that are not protected under the Exceptions Order 1975. Any offer of employment will be conditional upon a satisfactory DBS certificate and a risk assessment of any disclosed information. We are committed to fair recruitment and will consider disclosed information on a case-by-case basis ...

warnings that are not protected under the Exceptions Order 1975. Any offer of employment will be conditional upon a satisfactory DBS certificate and a risk assessment of any disclosed information. We are committed to fair recruitment and will consider disclosed information on a case-by-case basis ...

electronics deliverables across the full development lifecycle: concept, architecture, design, verification, compliance, release, and continuous improvement. Contribute to requirements definition, hazard analysis, and design risk assessments. Ensure adherence to EMC, safety, and regulatory standards relevant to scientific instrumentation and automation. Support the transition to manufacturing, including design for manufacture … development lifecycle in a quality‐driven environment (ISO 9001, ISO 13485, or similar). Comfortable with verification, design reviews, configuration control, interface management, and risk assessment. Experience collaborating with manufacturing partners and dealing with the realities of production hardware. Experience of clearly articulating requirements and design details. Qualifications Degree ...