1 to 25 of 31 Permanent Risk Management Jobs in Scotland

DESCRIPTION Join a role that's central to our technological resilience, offering a unique opportunity to shape the firm’s tech risk strategy and enhance industry compliance. As a Technology Risk and Controls Lead within our Cloud Foundational Services Function, you will be passionate about operational risk management and control solutions for computing environments. You will partner with one or more disciplines, lines of business, regions and locations to respond to evolving business requirements and emerging threats. You will leverage your expert knowledge of today’s ever-changing technology risk landscape and controls environment ...

Internal Audit – Third Party Risk, Vice President – Glasgow The Internal Audit Division (IAD) drives attention and resources to vulnerabilities by providing an independent and well‐informed view of the firm’s risk management, governance and internal control systems. In this Vice President role you will lead third … party risk assurance activities within the firm’s business audit function. What you’ll do in the role Formulate and lead a wide range of assurance activities to assess Third Party risks and the state of controls in place to mitigate them Proactively identify risk and emerging risk ...

operations. Purpose of the role The Head of Cyber Governance and Assurance is accountable for establishing and leading the Group-wide cyber governance, risk and assurance function across International Airlines Group (British Airways, Iberia, Vueling, Aer Lingus, LEVEL, IAG Cargo, IAG Loyalty, and IAG Transform). The role builds … risk‐led, threat‐informed and resilience‐focused assurance programme that integrates Cloud and IT Resilience/Disaster Recovery assurance, continuous KPI monitoring, vulnerability remediation assurance, and business continuity/crisis response readiness assurance. The Head of Cyber, Risk & Assurance is a senior leadership role within IAG Group Cyber ...

ecosystem. You will work across the end-to-end TM lifecycle, spanning global businesses, systems, controls, and processes, to design effective, risk-based TM controls and enhance existing controls where required. You will translate regulatory expectations, policy requirements, risk principles and control objectives into clear, practical and implementable … design solutions, that strengthen control effectiveness, support sustainable delivery and drive measurable Financial Crime risk reduction. This is a strong opportunity to join a team shaping the future design of Financial Crime controls across the bank. You will work on complex, high-impact issues, partner with experienced stakeholders across ...

Security Analyst is responsible for identifying, analysing, and tracking security risks across systems and applications. The role focuses on monitoring, investigation, vulnerability management, and supporting remediation activities to help protect the organisation's technology estate and information assets. Working within an established security governance framework, you will support security … operations, compliance activities, risk management, and continuous improvement initiatives across the business. Key Responsibilities: • Monitor and analyse security alerts from tools such as Microsoft Defender and other security monitoring platforms. • Identify vulnerabilities across systems, applications, and endpoints. • Investigate anomalies, trends, and suspicious activity, escalating security incidents in line ...

慨正橡扯 in Glasgow seeks a Technology Risk and Controls Lead to enhance the firm's tech risk strategy and compliance in cloud environments. This role requires expertise in risk management and the ability to lead teams in implementing effective control strategies. The ideal candidate will have … significant experience in technology risk management and be proficient in navigating complex regulatory landscapes. You will manage vital projects, ensuring compliance with legal and industry standards while keeping senior stakeholders informed. #J-18808-Ljbffr ...

responsibilities include: Define and deliver the organisation's cyber security strategy. Provide executive leadership on information and cyber security matters. Lead security governance, risk management and assurance activities. Oversee cyber resilience, incident response and security operations. Ensure compliance with recognised security frameworks, standards and regulatory requirements. Advise senior … Head of Information Security/Cyber Security . A proven track record of leading enterprise-wide cyber security programmes. Strong knowledge of cyber governance, risk management and compliance. Experience operating within large, complex and highly regulated environments. Excellent stakeholder management skills, with the ability to influence ...

process inefficiencies and recurring challenges, implementing practical improvements to strengthen execution. Drive consistency across delivery teams through effective planning, reporting, governance, estimation and dependency management practices. Coach and support delivery leaders, helping them navigate delivery challenges, manage stakeholder expectations and build high‐performing teams. Maintain robust delivery governance standards … ensuring appropriate controls are in place across planning, reporting, risk management, release readiness and operational handover. Build strong relationships with business and technology stakeholders to ensure delivery priorities remain aligned with strategic objectives. What will you bring to the role? We are seeking an experienced technology delivery leader ...

teams, championing automation, CI/CD and cloud-native delivery Oversee architecture and platforms across infrastructure, cloud, networks and AI systems Ensure cyber security, risk management and secure-by-design principles are embedded across all services Build, lead and develop high-performing teams across IT, DevOps, Cloud … GitHub Strong scripting and automation experience (Python, Bash, Terraform) Solid background in Linux administration, containerisation and orchestration technologies Proven experience leading cyber security, risk management and compliance (including ISO standards and Cyber Essentials Plus) Experience establishing and governing AI platforms, data engineering foundations and AI tooling at scale ...

temporary promotion opportunity for 6 months. Overview Reporting to the director of “Strategy, Delivery and Digital Transformation”, this interim role consolidates the management of technical teams and presents opportunities to deliver tangible business benefits. The Head of IT Services will lead delivery, performance and continual improvement of IT services … across the National Records of Scotland (NRS), ensuring services are secure, reliable, resilient, and user focused. Providing leadership across IT Service Management, Database, Applications and Infrastructure services, you will drive operational excellence, service performance and continuous improvement across the organisation. As a leader, you will provide direction for major ...

projects, objectives, and wider organisational goals. Key Responsibilities: * The Knowledge and Information Manager will provide leadership on and be responsible for the effective management, governance, and use of information across GBE and records management regulation. * Acting, in due course, as GBE's Data Protection Officer. * management … experience in leading and managing the development and maintenance of data systems; * in-depth knowledge and practical experience in data protection, information rights, records management, and information risk; * experience in an operational information governance management role in the public or private sector; * experience in managing multi-faceted ...

enterprise architecture, programme scope, fit-to-standard and Clean Core principles.Ensure deviations from standard, customisation requests and technical exceptions are assessed for business value, risk, complexity, operability and long-term maintainability.Provide clear recommendations on technical design decisions, trade-offs and risk positions to the Chief Architect, Programme Director … relevant governance forums.Ensure technical decisions are documented, traceable and reflected in solution design, delivery plans and risk management processes.Reinforce fit-to-standard behaviours and prevent unnecessary technical complexity or local divergence. Strong governance over fit-to-standard is identified as critical to S/4+ success, with differences ...

Group, VolkerStevin is an industry-leading civil engineering business, providing complex and innovative engineering solutions across a wide range of sectors including maritime, flood risk management, defence, energy, water and regeneration. Collaborating with, and drawing on the specialist skills of the group's business units we deliver … regular site visits to project locations. This is an excellent opportunity for an organised and proactive individual looking to develop their career within Information Management, BIM and digital project delivery. Experience within a secure or nuclear environment is not essential but would be advantageous. About the Role Reporting ...

technical expertise and leadership to guide cutting-edge projects, fostering growth and innovation in a dynamic environment. As a Lead Technical Program Manager in Risk Technology, you will drive the successful delivery of complex technology projects and programs that will help reach business goals across the firm. Leveraging your … adaptability skills will enable you to navigate through ambiguity and change, ensuring that technology initiatives align with business goals. With advanced communication and stakeholder management abilities, you will foster productive working relationships and influence decision-making to achieve mutually beneficial outcomes. As a subject matter expert, you will contribute ...

internal stakeholders across a wide range of disciplines, providing expert input and influencing the design of large, complex IT solutions How to apply risk methodologies, advising stakeholders on risk mitigation How to work with a wide range of security technologies, including new and emerging tech As a Security … clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research and innovation Identify security vulnerabilities in system architectures and articulate these in risk terms ...

boots on the ground" for security. Implement and manage security controls across our cloud environments (AWS) and internal IT systems. Identity & Access Management: Own the lifecycle of user access, from onboarding and MFA enforcement to regular access reviews. Vendor & Risk Management: Evaluate the security posture … supply chain and conduct internal risk assessments. Security Culture: Conduct security awareness training and act as the internal expert for all things privacy and security. Who you are We’re looking for a security professional who thrives in the "zero-to-one" phase of a startup. You are pragmatic ...

bridge the gap between business strategy and modern data platforms, helping to design, build and govern enterprise-wide analytical solutions that support regulatory reporting, risk management, customer insight, operational efficiency and strategic decision-making. Working closely with stakeholders across the business, you'll help establish data … initiatives including data lineage, quality, traceability and metadata management. Develop and maintain data models, business glossaries, process documentation and data dictionaries. Support regulatory reporting, risk analytics, customer insight and operational reporting initiatives. Identify opportunities for automation and improved business decision-making through data. Promote data literacy and champion best ...

security needs with useability and reducing user friction. Technical Mastery: Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management, security architecture, and best practices for safeguarding sensitive assets. Regulatory Compliance: Familiarity with UK legislation, standards, and protocols. Incident Management: Demonstrable ...

corporate functions across our network. Your efforts will touch lives all over the financial spectrum and across all our divisions: Global Finance, Corporate Treasury, Risk Management, Human Resources, Compliance, Legal, and within the Corporate Administrative Office. You’ll be part of a team specifically built to meet ...

benefits realisation working closely with senior stakeholders, technology teams, operational departments, suppliers and external partners, including the Home Office. You'll bring strong governance, risk management and stakeholder engagement skills to ensure every project is delivered on time, on budget, and to the standards our PMO expects. What ...

Ralliant’s purpose is simple: our precision technologies create the confidence to break through every day. Across our operating companies, we help customers reduce risk, ensure performance, and make mission-critical decisions with clarity—turning precision into progress.**What you will do...**You will lead Qualitrol’s software-enabled … assisted delivery, continuous integration, test-driven development, and systematic problem solving.You’ll partner across global business and technology teams to align priorities, manage delivery risk, and remove roadblocks. You’ll hire and develop top talent, keep teams engaged, and create the environment to consistently deliver on-time, high-quality ...

risks ambiguous projects through spikes and prototyping. Frontend Architecture: Architects scalable, evolvable React applications and component/data models that account for performance, state management, and long‐term maintenance. Ownership of Customer-Facing Experience: Comfortable taking a set of customer-facing pages from design handoff through to shipped, polished … optimizations, testing strategies (unit, integration, E2E/Cypress), and coding standards across the frontend stack. Frontend Strategy: Establishes frontend architecture patterns, including state management, performance budgets, accessibility, and comprehensive testing. Operational Maturity: Leads observability and frontend performance monitoring; defines SLOs where relevant, manages incident responses, and conducts blameless post ...

complex, scalable, and secure technology solutions. This requires emphasis on advanced Agentic AI systems, expertise in message-based technologies (e.g., Kafka, AMPS), strong management skills to coordinate across global regions and multiple applications. Deep proficiency across multiple technologies including Java and Python, along with ability to work with both … engineering excellence, and code quality across core languages and platforms. Governance: Establish documentation, review processes, and compliance controls for AI, messaging, and data systems. Risk management: Identify and mitigate technical and AI risks; build resilient and reliable systems. Global coordination & collaboration: Align product, business, and operations across regions ...

Infrastructure. Key Responsibilities Develop security requirements, architecture, and design for complex OT systems. Develop cyber security assessment approaches. Specify and implement a robust security risk management process. Support accreditation activities with the client and regulating authorities. Conduct security reviews and risk assessments in accordance with NCSC … you. Cyber Security work experience (with a significant focus on Operational Technology during that time). Practical experience of IT and OT cyber security risk/threat assessment approaches Understanding of design considerations with emphasis on operational safety and the availability/security of operating environments. Understanding of cyber ...

Security to lead its information security program across a distributed workforce in the US, Canada, UK and beyond. You will shape strategy, governance and risk management, while embedding security into business processes to enable growth. You’ll own incident response, risk assessments and vendor security, coordinating with ...