18 of 18 Permanent Risk Register Jobs in the Midlands

join the Fearless? Job Description The Role: We are seeking a Technology GRC Analyst to support the continued development of Frasers Group's technology risk and assurance capability. In this role, you will identify, assess and monitor technology and cyber risks while providing assurance that key IT and business … operational resilience and ensure risks are managed in line with industry standards and regulatory requirements. You will play an important role in delivering technology risk assessments, controls testing, identity and access assurance, third-party governance and supply chain assurance activities across the Group, helping to embed a proactive risk ...

this role will embed security as an enabler. Security must be seamless, invisible and silent in enablement—delivering frictionless, secure user journeys while assuring risk, compliance and resilience. You will continue to embed security from the start of projects utilising SbD (Secure by Design) principles. In this fast-paced … . Chair the Cyber Security Assurance Board (CSAB) and manage the Security Assessment in Policing (SyAP) national submission and legal/ICO compliance. Risk Management & "Secure by Design": Embed risk-based decision‐making and Secure by Design (SbD) principles across all programmes. Govern the IT&D departmental risk ...

customers in identifying, assessing and managing cyber security and information assurance risks across complex digital, operational and high‐assurance environments. The role combines consultancy, risk assessment, security assurance, governance and stakeholder engagement. Work may span secure information exchange, cross-domain solutions, cloud services, networks, applications, data platforms and operational … systems. The postholder translates security obligations, business needs, threat information and technical evidence into clear risk‐based recommendations. The role suits a cyber security, risk, assurance or systems professional seeking broader customer‐facing responsibility across defence, government and critical national infrastructure. Key Responsibilities Conduct cyber security and information ...

provider, acting as the internal security practitioner against their outputs. The role also requires genuine compliance capability, you will contribute to internal audit and risk assessment cycles and support ISO 27001 compliance activity. You will provide ad-hoc expert input to the IT function where security judgement is needed … maintained to a defined standard Managing the vulnerability management programme, including coordination of internal and external penetration testing Conducting internal security audits and risk assessments, producing findings reports and tracking remediation Supporting ISO 27001 compliance activity, including contributing to control evidence and audit cycles Producing clear written outputs -- findings ...

Frasers Group is seeking a Technology GRC Analyst to support the ongoing development of its technology risk and assurance capability across the group’s global operations. You will identify, assess and monitor technology and cyber risks while ensuring IT and business controls are designed and operating effectively, collaborating with … multiple stakeholders. You will deliver risk assessments, controls testing and IAM assurance, maintain the risk register and contribute to supplier risk and #J-18808-Ljbffr ...

process industries. To establish and scale a safety-first OT and ICS testing capability that allows industrial clients to understand and reduce cyber risk in live operational environments, and to grow it into a differentiated, profitable service line that we cross-sell across LRQA Cyber. Working conditions: Hybrid … skilling and a leveraged delivery mix. Key health & safety responsibilities: Eliminate or minimise employee exposure to risks by regularly reviewing the health and safety risk register, applying appropriate controls, communicating results of risk assessments, and ensuring health and safety is considered in the planning and execution ...

that it works. Manage external IT providers and vendors, review new software before adoption and support the IT budget. Maintain a technology and cyber‐risk register and report clear KPIs to senior leadership. Person Specification Essential 5+ years’ hands‐on experience in cyber security, IT or platform engineering. ...

level communications during service-impacting events. Manage customer escalations through to successful resolution while maintaining strong stakeholder confidence. Develop and maintain service improvement plans, risk registers, and customer success strategies. Ensure accurate reporting of KPIs, SLAs, customer satisfaction metrics, and service performance indicators. Support contract renewals, service expansion opportunities ...

Travis Perkins plc is now hiring for a proactive and detail-oriented Governance, Risk, and Compliance (GRC) Infosec Manager (PCI) to join our central Information Security team. This is a high-visibility, specialised role focused on leading our Group-wide Payment Card Industry (PCI) compliance ecosystem. Reporting directly … will serve as the primary subject matter expert and point of contact for external Qualified Security Assessors (QSAs), while also contributing across wider cyber risk, third-party assurance, and data privacy governance. If you are a driven GRC professional with a strong grounding in PCI DSS standards, third-party ...

constantly being updated with changes to technology and approaches to security. Participate in cyber incident response, governance reporting, penetration testing, control of the Risk Register and awareness training to uphold safety and compliance standards. Collaborate with Automation engineers to implement secure configurations and maintain system availability within … enterprise environment. Cyber incident response, management, escalation, investigation & 3rd party involvement. Computer architecture, digital logic, machine level representation of data Management of cyber security risk, tools and techniques. Familiarity with regulations, such as IEC 62443, NIS2 and Cyber Security Resilience Bill. Why Join Muller? Sourcing milk from over ...

into business processes. Monitor implementation and adoption, gathering feedback and recommending further improvements where required. Maintain project plans, action logs, progress records, milestones and risk registers. Coordinate internal resources and provide regular project updates. Produce clear documentation, including requirements, process maps, user guides, test evidence and training materials. Provide ...

1. Design and develop enterprise cyber security strategy and architecture a. Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses b. Identify risks associated with business processes, operations, information security programs and technology projects c. Identify and communicate current and emerging security threats … design assurance i. Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, hardware related to cyber risk security in order to better match business outcome objectives ii. Analyse technology environment, enterprise specifics, client requirements to set a collaboration design framework/ ...

support senior consultants in ensuring robust cyber security across our projects. Day-to-day of the role: Support project-level security assurance and risk management activities. Gather and document control evidence and assurance artefacts. Maintain risk registers, actions, and remediation tracking. Support audits, reviews, and formal assurance processes. … implement agreed security controls. Assist with cloud and SaaS security assurance tasks. Ensure decisions, risks, and controls are clearly documented and traceable. Produce security risk assessments, risk positions, and pragmatic control recommendations across cloud, SaaS, and integration-heavy environments. Support remediation activity by working with delivery teams ...

support senior consultants in ensuring robust cyber security across our projects. Day-to-day of the role: Support project-level security assurance and risk management activities. Gather and document control evidence and assurance artefacts. Maintain risk registers, actions, and remediation tracking. Support audits, reviews, and formal assurance processes. … implement agreed security controls. Assist with cloud and SaaS security assurance tasks. Ensure decisions, risks, and controls are clearly documented and traceable. Produce security risk assessments, risk positions, and pragmatic control recommendations across cloud, SaaS, and integration-heavy environments. Support remediation activity by working with delivery teams ...

architecture, operating model and roadmap for how Reachdesk uses its systems. Own the SOC 2 Type II programme, the security policy set and the risk register as the accountable business owner. Own identity and access management, joiner, mover and leaver processes, and the device and endpoint estate across ...

support lifecycle awareness, operational planning, and service continuity. Routinely consult with pre-sales and account management about CIs approaching end of life and update risk registers as necessary. Maintain proactive engagement with internal delivery teams to ensure customer context is understood and reflected in the resolution of technical issues … with estate-specific context. Provide technical governance and oversight in the review of security and penetration test findings, collaborating with relevant teams to assess risk, prioritise remediation, and define actionable next steps aligned with security best practices and customer-specific requirements. Act as the technical operations representative in customer ...

Frasers Group is seeking a Technology GRC Analyst to advance its technology risk and assurance program. You will assess cyber risks, test ITGCs, and ensure controls operate effectively across enterprise systems and retail platforms. Collaborating with Technology, Internal Audit,Cyber Security and Supply Chain teams, you will maintain risk ...

systems in a production environment. Experience working within Agile development environments and coordinating multiple teams against fixed milestones. Experience producing release dashboards, status reports, risk registers and executive-level reporting. Strong understanding of release risk management, including technical, content, certification and schedule risks. Experience working with external stakeholders ...