1 to 25 of 109 Permanent Risk Management Jobs in Scotland

services to all areas of the Scottish Power Renewables business to ensure they are available, secure, compliant, and operating within agreed service levels and risk acceptance. Support services are provisioned in accordance with the Iberdrola Global Group standard processes and procedures and using the Group Operational Support Tools (Service … Management Toolset, Monitoring, Alerting, Service Console etc.) applicable to OT. Where no Global Group standard processes, procedures and tools exist for OT, the necessary policies, technologies and processes must be identified and incorporated within the UK Renewables CoE to maintain the integrity and availability of systems. This role should ...

where it mattersmost . Connect to your opportunity The Global ServiceNow Center of Excellence is seeking a highly skilled and experienced ServiceNow Risk and Governance Risk Compliance Solutions Architect (GRC) to lead the architecture of enterprise solutions across ServiceNow, with particular emphasis on Risk Management and Policy and Compliance Management. The ideal candidate will combine deep ServiceNow platform expertise with practical knowledge of governance, risk, controls, audit and regulatory compliance processes. This role requires strong architecture leadership, excellent written and verbal communication skills, and the ability to work effectively with risk, compliance ...

Responsibilities Information risk analysis and oversight Support the analysis of information risks, including AI and other emerging technologies, information and cyber security, technology and data privacy risks in accordance with the risk management framework. Assist in developing the quality and efficiency of risk analysis and monitoring … including the associated risk management framework, policies and procedures. Support the identification, assessment, monitoring and reporting of risks arising from the firm's adoption and use of AI and other emerging technologies, in line with the firm's risk appetite and governance frameworks. Assurance and technical support ...

practice focuses on ensuring secure business outcomes for our clients, providing Cybersecurity advisory and transformation consulting in areas such as security strategy, risk management, human risk management, data and identity security, secure intelligent industry, Gen-AI risk, and security operations modernisation.##Our security specialists and innovators … meet industry standards and are resilient to threats. This includes overseeing tailored implementations, guiding teams, and aligning security strategies with each client’s unique risk landscape and regulatory obligations.* **Security Architecture** – Improving the security posture of the Enterprise and/or applications through the assessment, design or implementation ...

secure way. You will lead the development and delivery of the information and cyber security strategy, shape the organisation’s security maturity, and ensure risk is managed in a balanced and proportionate way. You will be accountable for building trust with colleagues and stakeholders, re-establishing confidence … routes to “yes”, and position security as an enabler of delivery, innovation and great user experience. Developing and maintaining Ofgem’s Cyber strategy, associated risk register and forward work plan, addressing risks to business operations and corporate functions. Enabling leaders and all staff to be routinely briefed on strategic ...

Edinburgh | Hybrid A well-established financial services organisation operating in the Investment Management world is looking for an experienced Senior Cyber Security Risk Manager to join its security function and take a leading role across cyber risk, assurance and security governance. Operating within a complex and regulated … environment, the organisation continues to invest significantly in its technology and security capabilities. This is a broad position offering exposure across technical security, enterprise risk, security assurance and the assessment of new technology. You’ll work closely with security leadership, technology teams and stakeholders across the wider organisation ...

lead technical programs within Data Center Operations and across the functions that support the data center lifecycle. Your scope will span data center infrastructure management (DCIM), telemetry, asset management, lifecycle platforms, and their dependencies on procurement, inventory, financial systems, and IT. You will connect workstreams into integrated plans … functional dependencies, and drive accountability from discovery through rollout and stabilization. The Technical Program Manager owns the integrated execution plan, delivery cadence, dependency and risk management, and readiness coordination. Business owners and the DC PMO own business requirements, approvals, and change management; Product Management owns product ...

with group quality procedures. Ensuring that audit work is of a high standard considering the senior level of recipients of reports. Influence business area management groups to improve governance, risk management and internal control processes. Perform proactive risk assessment and engage with senior SP stakeholders … ensure assigned audit works are focused on the highest risk areas. Provide advice to the business on how to improve and strengthen the business control environment. Form opinions on the adequacy of management processes and controls, providing robust independent assurance and recommendations to senior management for improvement ...

cyber security. Our Technology & Cyber Assurance team is expanding as we help our clients respond to new risks and help identify their cyber risk exposure whilst taking advantage of new opportunities presented by technological and business change. Managing risk and establishing effective controls are at the heart … both good governance and competitive advantage. Our team offers unrivalled depth of experience in providing governance, risk, control and assurance solutions to our clients in the financial services, corporate and public sector. We design, implement and assure business process, technology and cyber security controls to manage the risks ...

love to hear from you. Working as part of the IT team, you will play a key role in cyber security operations, vulnerability management, cyber risk management, endpoint security and infrastructure security across our on-premises and cloud environments. You will help protect systems, data and users … effective technology services across the organisation. What You'll Be Doing Monitoring and responding to cyber security threats, vulnerabilities and incidents. Supporting cyber risk management, compliance and security assurance activities. Managing and improving endpoint security using Microsoft Intune and related technologies. Supporting the secure operation of Windows Server ...

range of benefits to support your finances, wellbeing and family. Working Pattern: Permanent | Full Time | Flexible First options available The role The Risk & Controls Manager (Cyber & Technology) supports the development, implementation and continuous improvement of SSE's cyber and technology risk and control framework. The role helps ensure … that proportionate and effective risk management is embedded across IT, operational technology (OT), digital, data, cloud and third-party enabled services, taking account of the differing operational, safety, resilience and regulatory contexts across SSE businesses. Working with the Senior Technology Risk & Controls Manager and the wider Cyber ...

someone who enjoys solving complex challenges and making a visible impact across the organisation. What you’ll be doing Defining and leading the configuration management strategy, governance framework, and operating model to ensure controlled, compliant, and effective configuration delivery at scale. Managing and optimising the end-to-end configuration … party vendors to ensure configuration changes are delivered safely, efficiently and in line with organisational standards. Providing leadership and expert guidance on configuration readiness, risk, feasibility, sequencing and implementation approaches across complex change initiatives. Driving continuous improvement by analysing performance metrics, defects and trends to enhance quality, reduce rework ...

operationalise them. Provision of ongoing support for the continued effectiveness of analytics and modelling solutions to users. Demonstrate conformance to all Barclays Enterprise Risk Management Policies, particularly Model Risk Policy. Ensure all development activities are undertaken within the defined control environment. Assistant Vice President Expectations To advise … meet required outcomes. Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues. Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda. Take ownership for managing risk and strengthening controls in relation ...

data processing frameworks, such as Spark Exposure to fraud detection, anti-money laundering, anomaly detection, or graph and network-based modelling Awareness of model risk management, governance, and regulatory controls within financial services You may be assessed on the key critical skills relevant for success in the role … such as risk and controls, change and transformation, business acumen, strategic thinking, and digital and technology, as well as job-specific technical skills. This role will be located at our Glasgow office, with a hybrid working model requiring a minimum of 3 days per week in the office. Purpose ...

each other and customers in meaningful ways. Moody's is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we're advancing AI to move from insight to action-enabling intelligence that not only understands complexity but responds to it. We decode … risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity. Skills and Competencies Proven experience leading complex transformation ...

teams to ensure successful customer adoption of NXP solutions. Responsibilities Lead strategic customer programmes across major European automotive customers, acting as the primary programme management interface between the customer and NXP. Drive successful customer adoption and deployment of NXP SDV, vehicle compute, networking and processor solutions from concept through … production. Develop trusted relationships with customer engineering, programme, purchasing and management stakeholders. Coordinate global cross-functional teams including engineering, applications, product management, quality, sales and business line organisations to deliver customer commitments. Lead programme reviews, risk management, issue resolution and escalation activities to maintain customer satisfaction ...

Purpose Statement: Lead and manage the IT Governance, Risk, and Compliance (GRC) team, driving the development, maintenance, and execution of the GRC framework, ensuring compliance with global regulations and industry standards, and maturing the organization's overall cybersecurity posture. Key Job Accountabilities: IT Governance, Risk, and Compliance Program … Essentials +, SOC 2, GDPR, CMMC Level 2,3) Develop, maintain, and socialize IT and cybersecurity policies, standards, and procedures across the organization. Oversee risk mitigation and the IT risk register, lead risk assessments. Develop, and oversee IT control effectiveness. Experience with IT Control design review ...

performance support to enhance system utilization.Managing iterative rollouts, pilot programs, and phased adoption plans to deliver sustained behavioural change.Ensuring strong program governance and risk management throughout the transformation journey.Collaborating with cross-functional teams to align technical capabilities with business objectives.As part of your role, you will contribute … change and system utilization.Familiarity with agile and hybrid delivery models for large-scale implementations.Experience managing iterative rollouts and phased adoption strategies.Strong program governance and risk management capabilities.Excellent communication and stakeholder management skills, with the ability to lead business readiness and adoption activities.SC Eligibility- All candidates need ...

well established global technology company with a strong base in Edinburgh. This is a senior role within the Information Security team, focused on governance, risk and compliance, with responsibility for helping shape and continually improve the organisation’s security framework across a global environment. You’ll take ownership … areas, including ISO 27001, security risk assessments, third-party risk, audit and control effectiveness. There is also an interesting element around the governance and responsible use of AI, helping the business understand and manage the security and data risks that come with emerging technologies. The Company: This ...

asset owners, cyber security specialists and senior stakeholders, you will help translate cyber security requirements and recognised industry standards into effective assurance activities, supporting risk management, regulatory compliance and continuous improvement. This is a consultancy role suited to someone with a strong background in OT cyber security assurance … validation, ensuring assurance findings are supported by clear and appropriate documentation. Identify and assess cyber security risks across operational systems and infrastructure, providing practical, risk-based recommendations and supporting mitigation planning. Produce clear, actionable assurance reports, communicating technical findings, risks and recommendations to both technical and non-technical audiences. ...

successful delivery of large-scale and complex technology programmes. The successful candidate will have a minimum of 15 years' experience within project and delivery management , with a strong track record of managing major programmes across both application and infrastructure environments. This is a senior delivery role requiring excellent leadership … financial management, stakeholder engagement and programme control capabilities. Key Responsibilities Lead the successful delivery of large and complex technology programmes. Manage programmes with a labour value of £10m+ and delivery teams of 100+ people . Oversee delivery across both application and infrastructure environments. Provide strategic leadership across multiple workstreams ...

accessible and functioning correctly 24/7 to meet the expectation of our customers. This role is fundamental to maintaining the BT Network Management Systems Security posture. As a business we need to be proactive in identifying security issues, highlight concerns and reduce risk. This works in tandem with … ability to react quickly and effectively when operations are threatened by issues outside of BT’s risk appetite. Ensuring the security of BT’s complex architecture, applications and services in-line with the expectations of our customers is a prime objective of our business. Appraising the risk ...

applicable global regulations Partner with commercial teams to navigate complex security and compliance negotiations, removing deal blockers and standardising processes Own third-party supplier risk management, identifying and mitigating vendor risk across the supply chain Contribute to the implementation of additional frameworks and standards such as NIST … technology company ISO 27001 Lead Implementer or Lead Auditor certification — essential In-depth, hands‐on knowledge of ISO 27001 implementation and ongoing certification management A strong track record of managing global data protection compliance including GDPR and CCPA Familiarity with general compliance obligations such as Modern Slavery ...

technical aspects. * Inspections (on/offshore) as part of a multi-discipline team, completing reports and issuing different levels of enforcement depending on the risk present. * Electrical, Control & Instrumentation based inspections covering topics such as; Functional Safety Management, EX Equipment, Fire & Gas systems, Process Control & ESD systems etc. … safety-related Control & Instrumentation (C&I) engineering and Operational Technology (OT) cyber security within the UK offshore major hazard oil & gas industry, including the management of risks associated with safety-critical systems. You will demonstrate deep knowledge of offshore engineering and industrial cyber security standards, providing authoritative advice ...

Python-based valuation platform. You will contribute to the design and delivery of high-quality software solutions that support the valuation and risk management of financial instruments. This is an individual contributor role requiring strong Python software engineering skills, experience working with complex codebases, and an appreciation … Python-based valuation platform. You will contribute to the design and delivery of high-quality software solutions that support the valuation and risk management of financial instruments. This is an individual contributor role requiring strong Python software engineering skills, experience working with complex codebases, and an appreciation ...