as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CISA (Certified Information Systems Auditor) are highly desirable. Strong knowledge of security frameworks (e.g., ISO 27001, COBIT), security technologies, tools, and best practices across EU, UK, and USA Proficiency in risk management processes, vulnerability assessments, and incident response strategies. Current technical and hands-on experience with security More ❯
as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CISA (Certified Information Systems Auditor) are highly desirable. Strong knowledge of security frameworks (e.g., ISO 27001, COBIT), security technologies, tools, and best practices across EU, UK, and USA Proficiency in risk management processes, vulnerability assessments, and incident response strategies. Current technical and hands-on experience with security More ❯
and internal governance standards. Drive continuous improvement in risk data quality, reporting processes, and analytics capabilities. The Requirements: Skills: Strong knowledge of risk management frameworks (eg, NIST, ISO 27001, COBIT) andcontrol environments. Deep understanding of IT general controls, cyber security principles, andtechnology risk domains. Proven experience in risk analytics, data visualization, and reporting (eg, using Power BI, Tableau More ❯
Hemel Hempstead, Hertfordshire, South East, United Kingdom
NTT Global Data Centers EMEA UK ltd
degree or equivalent in InformationTechnology or Computer Science degree or related field. Information Security certifications such as ISO 27001 Lead Auditor/Implementer, CISM, CISA, CRISC, CISSP, CEH, COBIT or equivalent preferred. Fluent in English, Multilingual skills are an advantage. Skilled proficiency in conducting risk assessments, analyzing security controls, and policy management. Excellent communication and interpersonal skills for collaborating More ❯
regulatory requirements, including cross-industry regulations (e.g., GDPR, Data Protection Act) and industry-specific regulations Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including 800-53 and Cybersecurity Framework Knowledge of OneTrust risk management toolset or similar preferred Proven ability to communicate with technical teams to elicit More ❯
regulatory requirements, including cross-industry regulations (e.g., GDPR, Data Protection Act) and industry-specific regulations Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including 800-53 and Cybersecurity Framework Knowledge of OneTrust risk management toolset or similar preferred Proven ability to communicate with technical teams to elicit More ❯
regulatory requirements, including cross-industry regulations (e.g., GDPR, Data Protection Act) and industry-specific regulations Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including 800-53 and Cybersecurity Framework Knowledge of OneTrust risk management toolset or similar preferred Proven ability to communicate with technical teams to elicit More ❯
data models and reporting frameworks. Ensure alignment of analytics and reporting outputs with enterprise risk management andcontrol frameworks. Strong knowledge of risk management frameworks (e.g., NIST, ISO 27001, COBIT) andcontrol environments. Deep understanding of IT general controls, cyber security principles, andtechnology risk domains. Proven experience in risk analytics, data visualization, and reporting (e.g., using Power BI, Tableau More ❯
information, information governance, digital risk and quality management environment (A) Evidence of professional development (A) Prince 2 trained at Foundation or Practitioner level (A) ITIL Service Management Foundation (A) CoBIT or similar (A) CISPP, HCISPP or similar (A) Desirable Member of a professional body (e.g. BCS) (A) Experience, Knowledge and Skills Essential Extensive experience as a senior manager in the More ❯
degree or relevant industry qualifications (e.g., CISA, CRISC, CISM) Strong academic background and mathematical acumen Experience with industry standard IT risk management frameworks (e.g., NIST, ISO 27001, Cyber Essentials, COBIT, COSO) 10+ years' experience in the IT Risk sector (Risk Management, External Audit, Internal Audit), preferably with a strong understanding of the insurance industry Excellent Microsoft Office skills, in particular More ❯
/or existing IT General Controls from across access, change, and operations domains drawing on experience to do so independently and/or with minimal support. Working knowledge of COBIT/ITIL Frameworks Comfortable performing IT Risk Assessments across a variety of IT domains. Strong analytical and problem-solving skills, being able to decipher sometimes complex information, analyse and report More ❯
from time to time. What we're looking for: Qualified to degree level or time served experience. CISA, CRISC or similar professional qualifications but training will be provided ITIL, COBIT, SOX knowledge - Desirable 2-3 years of experience working within an IT control testing programme Experience working in an external audit team within a Big 4 or similar corporate environment More ❯
technologyrelated regulations e.g. Ops Res, GDPR, DORA, SOx etc Demonstrate experience of technology risk profiling, assessments, scenarios, metrics and reporting. Demonstrate knowledge of Risk Frameworks and certifications including Cobit, NIST, ISO27001 Financial services experience 5+ (not exclusively Insurance) Demonstrate a level of seniority - this is a new role and will require the candidate to plan and implement the IT More ❯
warrington, cheshire, north west england, united kingdom
JSS Search
technologyrelated regulations e.g. Ops Res, GDPR, DORA, SOx etc Demonstrate experience of technology risk profiling, assessments, scenarios, metrics and reporting. Demonstrate knowledge of Risk Frameworks and certifications including Cobit, NIST, ISO27001 Financial services experience 5+ (not exclusively Insurance) Demonstrate a level of seniority - this is a new role and will require the candidate to plan and implement the IT More ❯
bolton, greater manchester, north west england, united kingdom
JSS Search
technologyrelated regulations e.g. Ops Res, GDPR, DORA, SOx etc Demonstrate experience of technology risk profiling, assessments, scenarios, metrics and reporting. Demonstrate knowledge of Risk Frameworks and certifications including Cobit, NIST, ISO27001 Financial services experience 5+ (not exclusively Insurance) Demonstrate a level of seniority - this is a new role and will require the candidate to plan and implement the IT More ❯
were looking for: 5+ years in tech risk, IT audit, cyber/digital resilience (FS sector) Strong knowledge of FCA/PRA Operational Resilience, DORA, ISO/NIST/COBIT Experience managing multi-workstream projects & producing board-level deliverables Excellent communicator with proven leadership skills Professional certifications (CISA, CRISC, CISM etc.) and cloud/AI knowledge are a bonus. This More ❯
were looking for: 5+ years in tech risk, IT audit, cyber/digital resilience (FS sector) Strong knowledge of FCA/PRA Operational Resilience, DORA, ISO/NIST/COBIT Experience managing multi-workstream projects & producing board-level deliverables Excellent communicator with proven leadership skills Professional certifications (CISA, CRISC, CISM etc.) and cloud/AI knowledge are a bonus. This More ❯
working within an ERP environment where ITGCs, and access/application controls are subject to routine audits Solid understanding of IT risk management principles , andcontrol frameworks (e.g., SOX, COBIT, COSO). Proven track record of handling or advising on secure and compliant solutions within large-scale Oracle Cloud ERP implementations. Hands-on experience with user access provisioning, SoD frameworks More ❯
sectors (eg, pharmaceuticals). IT Process Knowledge: Solid understanding of common IT processes, structures, and departmental functions. Risk Framework Proficiency: Working knowledge of recognized Risk Management Frameworks (eg, NIST, COBIT preferred). Stakeholder Engagement: Proven ability to communicate and influence effectively at all levels, including senior IT management. Data & Reporting Skills: Experience in developing risk dashboards, analytics, and performance metrics. More ❯
assessment and risk assessment The ability to influence senior leaders and collaborate across business, technology, and vendor teams Relevant qualifications and ideally certifications such as CISSP, CRISC, CGEIT, CISM, COBIT, SABSA, TOGAF (Security), or equivalent. You'll join our Digital Security and Risk Team - a close-knit group of passionate professionals who thrive on collaboration, creativity, and making a real More ❯
infrastructure, SDLC, and operational resilience frameworks. Proven experience of working in Agile framework and banking domain. Must have experience in SQL Experience with governance tools and methodologies (e.g., ITIL, COBIT, TRMF). Familiarity with AI technologies and their infrastructure requirements. Excellent documentation, stakeholder engagement, and analytical skills. More ❯
frameworks and third-party risk management. Excellent stakeholder management and communication skills. Professional qualifications such as CIPS, CPSM, CTPE , or familiarity with SFIA are desirable. Experience with ITIL or COBIT is a plus. If you have the above and are looking to secure a pivotal role within the firm facing off to senior stakeholders across the business (including C-Level More ❯
frameworks and third-party risk management. Excellent stakeholder management and communication skills. Professional qualifications such as CIPS, CPSM, CTPE , or familiarity with SFIA are desirable. Experience with ITIL or COBIT is a plus. If you have the above and are looking to secure a pivotal role within the firm facing off to senior stakeholders across the business (including C-Level More ❯
for example data catalogue (e.g. Collibra, Alation etc), data quality (e.g. Collibra, Anomalo etc). Able to demonstrate an in-depth understanding of data governance frameworks (e.g., DAMA-DMBOK, COBIT) and standards (e.g., ISO/IEC 27001, GDPR). Knowledge of applying data management principles to practical scenarios, with a good understanding of data quality, governance & protection best practices. Experience More ❯
take their career to the next level. Key responsibilities/Experience Hands-on experience implementing NIST CSF (not just reviewing or auditing) Strong knowledge of frameworks like ISO 27001, COBIT, etc. The ability to connect and translate across frameworks Proven stakeholder engagement and influencing skills Experience in a complex, multi-stakeholder environment A proactive, practical mindset - ready to 'do the More ❯