1 to 25 of 71 Permanent Risk Register Jobs in London

7.5% employee contribution 15% employer contribution Life Assurance: Up to 8 x salary Closing Date: 1st October 2026 About the Role: The Cyber Risk Manager plays a critical role in ensuring Sizewell C's cyber risks are identified, understood, prioritised and effectively managed. Reporting directly to the Chief Information … Security Officer (CISO), you will lead the organisation's cyber risk management framework, maintain oversight of the cyber risk landscape and ensure risks are managed in line with regulatory requirements and business objectives. Operating at the intersection of technology, security and business risk, you will translate complex ...

role We're a well-funded startup using AI to decrease risk and grow margin in the architecture, engineering and construction industry. Our current focus is general contractors. When they bid to build a major project, such as a skyscraper or an airport, they price millions of pounds' worth … project risks, and treatments for them, by hand, and often inaccurately. During delivery, risk treatments that were suboptimal or never applied erode the margin. Despite billions in annual revenue, contractors only keep ~2%. Bite puts contractors' data to work at tender and through delivery, so the bid price ...

role We're a well-funded startup using AI to decrease risk and grow margin in the architecture, engineering and construction industry. Our current focus is general contractors. When they bid to build a major project, such as a skyscraper or an airport, they price millions of pounds' worth … project risks, and treatments for them, by hand, and often inaccurately. During delivery, risk treatments that were suboptimal or never applied erode the margin. Despite billions in annual revenue, contractors only keep ~2%. Bite puts contractors' data to work at tender and through delivery, so the bid price ...

governance. The Principal Engineer leads the development of security artefacts required to achieve system design maturity and contractually agreed readiness, including Security Cases, risk management activities, and support to design assurance and review gates. They work closely with internal engineering teams, transversal Whole Boat Product Security (WBPSec) stakeholders … across the platform. This is a delivery focused, milestone driven role requiring strong systems engineering awareness, stakeholder influence and the ability to apply pragmatic, risk based security solutions within programme constraints. Typical duties include : Programme Delivery & Governance Define, agree and deliver Product Security engineering activities in line with ...

operating effectiveness of the processes and controls in place for identifying, analysing and ensuring key risks are managed and are within Ki’s Risk Appetite (i.e. to examine, challenge, test and critique Ki’s Risk Management Process). Ensure that audits in the Annual Internal Audit Plan … using the Ki Internal Audit Procedures. Produce planning documentation for all audits using templates in place and in agreed formats. This includes preparing a Risk and Control Matrix, for all audits and supporting working papers to produce a comprehensive audit file. Conduct audit fieldwork in line with Ki Internal ...

ensuring controls are accurately documented, supported by appropriate evidence and aligned to organisational risks and regulatory requirements. Working closely with cyber security, digital and risk management teams, you will help ensure controls remain effective, auditable and fit for purpose. This is an excellent opportunity for a cyber security professional … with experience in controls governance, risk management or security assurance to contribute to the protection of critical national infrastructure. Key Responsibilities: Controls Library Management Maintain the cyber security controls library, ensuring records remain accurate, complete and up to date. Process additions, amendments and retirements of controls through established governance ...

evidence, and challenging suppliers. What you will own: 1. Third-party security assurance Run security due diligence on new suppliers, maintain initial questionnaire to risk sign-off, working with Procurement and Legal on security and data protection schedules. Maintain a supplier tiering model based on criticality … suppliers: certification expiry, subprocessor changes, breach notifications, SLA performance. Maintain the supplier and outsourcing registers, including preparation for the FCA's material third party register under PS26/2 (rules in force 18 March 2027). Track concentration risk and exit plans for critical suppliers. 2. Inbound ...

client, an essential services operator within the utilities and technology sectors, is seeking a Cyber Security Governance, Risk & Compliance Lead for a permanent position based in London with hybrid working. The role will support regulatory engagement, cyber resilience and compliance activities, helping to ensure alignment with NIS Regulations, NIS2 … frameworks Monitor emerging cyber security legislation, regulatory requirements and industry guidance, assessing their impact and recommending appropriate actions Maintain and review the Cyber Security Risk Register, ensuring threat scenarios, mitigations, treatment plans and governance arrangements remain current Support the governance and status reporting of the Cyber Security Roadmap ...

this role exists to set a consistent baseline and raise our security posture proactively rather than reactively. The Lead conducts security audits and risk assessments, sets and enforces baseline security standards, maintains our information security policy set, coordinates incident response, and supports data protection compliance in the jurisdictions where … network's systems and helps people across the network work securely. Core Responsibilities Security Governance, Audits, and Assessments Conduct regular security audits and risk assessments of network systems, applications and processes, and maintain a prioritized risk register Establish and maintain a security baseline across the network, aligned ...

Governance and Risk Lead About the role Reporting to Head of I&T GRC, Governance and Risk Lead will be responsible for driving information and cyber security awareness, delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and manufacturing site teams. … security and business stakeholder in relation to supplier information and cyber security due diligence and requirements. As the successful candidate you will also lead risk-based party security assurance, management, and continuous improvement activities. In addition, facilitate and coordinate IT risk management risk register, tools, process ...

Governance and Risk Lead****About the role**Reporting to Head of I&T GRC, Governance and Risk Lead will be responsible for driving information and cyber security awareness, delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and manufacturing site teams. … security and business stakeholder in relation to supplier information and cyber security due diligence and requirements. As the successful candidate you will also lead risk-based party security assurance, management, and continuous improvement activities. In addition, facilitate and coordinate IT risk management risk register, tools, process ...

## Information Security Risk AnalystApply: London Dorset Square: Full time: Posted 4 Days Ago: JR589Everything we do exists to find alpha, investment value the market has overlooked. We believe technology is a genuine source of that edge and core to how we find and act on conviction. Because … clients. Protecting that edge – our data, our platforms and the trust our clients place in us – is fundamental. As an Information Security Risk Analyst in our Security team, reporting to the Security Manager, you will play a critical part in how we do this: identifying, assessing and tracking information ...

secure way. You will lead the development and delivery of the information and cyber security strategy, shape the organisation’s security maturity, and ensure risk is managed in a balanced and proportionate way. You will be accountable for building trust with colleagues and stakeholders, re-establishing confidence … routes to “yes”, and position security as an enabler of delivery, innovation and great user experience. Developing and maintaining Ofgem’s Cyber strategy, associated risk register and forward work plan, addressing risks to business operations and corporate functions. Enabling leaders and all staff to be routinely briefed ...

London, Greater London | £80k - £90k per year Information Security Risk Analyst London/WFH to £90k Are you an Information Security professional with experience in risk assessment, security governance and control assurance? You could be progressing your career in an impactful role at a tech driven, global Asset … Manager with multiple billions of dollars under management. As an Information Security Risk Analyst you'll play a key role in implementing and strengthening security risk management, helping the business make informed decisions while maintaining robust security standards in a changing regulatory and technology landscape. You’ll assess ...

Power Platform roadmap(Aligning with internal Chanel Power Platform Roadmap). Recommend enhancements and optimisation opportunities and contribute to the solution roadmap. 6. Solution Risk & Governance Maintain the End-to-E t solution risk register and mitigation plans. Ensure consistent architectural guardrails across global teams and partners. … integrations, Power Platform, and Tier‐1 systems, working with stakeholders and system owners to align responsibilities, interfaces, and delivery expectations. End to End solution risk register and mitigation plans Contributions to solution roadmap and multi‐instance strategy You are energized by Working within a complex landscape global systems ...

strategy, execution and evolution of enterprise exposure management capabilities spanning vulnerability operations, exposure validation, aligning with secure development (SAST/SCA/DAST) and risk intelligence, with a relentless focus on prioritization, business impact, mitigation strategies and measurable risk reduction. The role partners closely with Corporate & Business Technology … Cloud Operations, Product, Platform Engineering, Risk Management, Privacy & Compliance, Managed Service Providers and Internal Audit stakeholders to ensure security findings are translated into actionable insight, aligned remediation priorities and demonstrably improved security outcomes across the enterprise. As a senior member of the Attack Surface Management leadership team, the Senior ...

Chip employer as an Information Security & Governance Lead . You will establish and maintain the organisation’s information security framework, technology governance and cyber risk management capabilities. Working closely with colleagues and external service providers, you will ensure security controls are effective, risks are managed and regulatory requirements … improve the information security framework, policies, standards and procedures. Ensure security controls are implemented and evidenced across technology services and suppliers. Own the technology risk register, facilitate risk assessments and track risk treatment plans. Oversee vulnerability management, coordinate penetration testing and monitor remediation. Support security incident ...

manages a large and complex portfolio of third-party service providers, managed service arrangements, and intra-company service agreements. The Vendor Performance, Governance and Risk Management function is responsible for ensuring these relationships are governed effectively, aligned to business objectives, managed within risk appetite, and compliant with internal … policies, contractual obligations, and regulatory requirements. This role works closely with Technology Delivery teams, Global Procurement Services, Third Party Risk Management (TPRM), Risk, Compliance, Legal, Audit, Finance, and vendor partners. The Officer role provides operational, administrative, and governance support across risk management, outsourcing oversight, Annual Intra-Company ...

work feels meaningful, you will feel at home at Ricoh. #RicohEurope What you will be doing We're looking for an IT Security Governance, Risk & Controls Analyst to help strengthen the security, governance and resilience of our European IT environment. This is an exciting opportunity for someone who enjoys … working across security governance, technology risk and controls , helping organisations understand their security posture and make informed decisions about risk. Working closely with infrastructure, cloud, identity and operational IT teams, you'll help develop and embed security policies, standards and controls, manage technology risks and support assurance activities across ...

collection sits with individual control owners; you monitor for gaps or failures and keep owners accountable, keeping Drata and the ISMS manual consistent. Governance & Risk Chair the Governance, Risk and Compliance Committee, owning the agenda and policy review cycle. Maintain the company risk register in Drata … report audit status, risk exposure, and control effectiveness to leadership and the board. Policy & Documentation Own the policy register in Drata, ensuring policies stay current and accurate, updating them in response to regulatory changes or operational changes, and advising leadership on required updates. Vendor & Third‐Party Risk ...

where teams actually work, through leading the thinking on the AI governance control plane programme, to running the review path for novel and high-risk AI work jointly with client risk and security leaders. The ideal candidate brings deep expertise in AI governance frameworks and controls, AI security … published, self-serve guardrails that let citizen developers and engineering teams move fast within known limits — with review reserved for the novel and high-risk — and act as the thought leader shaping the AI governance control plane programme. Good governance here is measured by how rarely people have ...

resilience of our European IT environment. This is a great opportunity for someone who enjoys working at the intersection of IT security, compliance, risk and data . You'll play a key role in turning security requirements and frameworks into practical controls, meaningful reporting and actionable insight that helps … data into meaningful insight. Monitor, measure and report on IT security compliance across key technology and operational domains. Own and maintain the IT Security Risk Register , ensuring risks are clearly documented, assessed and actively managed. Facilitate security and technology risk assessments , working with technical teams to identify ...

regulatory requirements. Working closely with the Senior Information Security Manager, Cyber Security Manager and wider business, you will take ownership of information security policies, risk management, data protection and business continuity. You will play a hands-on role in embedding security into everyday business processes, improving compliance and promoting … aware culture across the organisation. Key Responsibilities Develop, implement and maintain information security policies, procedures and governance frameworks. Manage information security risks, maintain the risk register and oversee remediation activities. Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus , alongside relevant contractual and regulatory requirements. Conduct risk ...

primary internal contact. Security Strategy & Roadmap: Define a clear, costed security strategy and sequenced improvement roadmap tailored to the evolving estate, threat landscape, and risk appetite. Risk & Assurance Stewardship: Architect a security-specific risk register and conduct regular, independent reviews of the control environment operated … follow the required outputs: Setup Phase (~First 3 months): Estimated at 1.5 days per week (approx. 17–19 days total) to deliver the initial risk assessment, strategy, certification recommendation, and incident playbooks. Transition Phase (Months 4–6): Tapering to approximately 2 days per month as the roadmap moves into ...

complete, current, and defensible when an auditor asks for it. Maintain ISMS documentation to the standard the Senior Manager sets: policies and procedures, the risk register, and records of corrective actions. Support internal audit and management review with the data and analysis they need. Audit Support Prepare evidence … diligence requests for review, keeping answers consistent with what we actually do. Prepare material supporting lender and investor due diligence on security and compliance. Risk and Third Parties Carry out risk assessments and vendor and third-party security reviews, and document the results. Maintain the exception register ...