1 to 25 of 27 Permanent Risk Analyst Jobs in the UK excluding London

Group Information Security Risk Analyst Department: Governance & Risk Employment Type: Permanent - Full Time Location: Manchester, UK Description The Group Information Security Risk Analyst will play a key role within Arrow's Group Information Security Function by maintaining the Information Security Risk Framework, delivering high … quality risk assessments and reporting, engaging with stakeholders to drive remediation activities, and ensuring a proportionate and risk-based approach is applied across a diverse range of business sectors. The role will also support wider Information Security activities including third-party security assurance, due diligence reviews, responses ...

Responsibilities Information risk analysis and oversight Support the analysis of information risks, including AI and other emerging technologies, information and cyber security, technology and data privacy risks in accordance with the risk management framework. Assist in developing the quality and efficiency of risk analysis and monitoring, including … associated risk management framework, policies and procedures. Support the identification, assessment, monitoring and reporting of risks arising from the firm's adoption and use of AI and other emerging technologies, in line with the firm's risk appetite and governance frameworks. Assurance and technical support Assist with ...

Harvey Nash is now inviting two candidates to apply for the role of Cyber Risk Analyst . Initial 6 month contracts Hybrid to Glasgow (2 - 3 days a week onsite) £600 - £700 a day/Umbrella only Start date mid November We are seeking experienced Cyber Risk … cyber resilience programme across multiple operational sites. Working closely with Operations, Engineering, IT and Cyber Security teams, you will take ownership of existing cyber risk assessment outputs, analysing findings and ensuring they are translated into tangible actions and deliverable work packages. This is a highly analytical role focused ...

Arrow Global Group is seeking a Group Information Security Risk Analyst in Manchester to maintain the risk framework, deliver high-quality risk assessments, and drive remediation activities across the group and portfolio companies. You will engage with stakeholders to ensure risk-based approaches are applied ...

improve people’s lives and have committed to delivering £60m worth of support over the next three years. The Role: As a Cyber Security Risk Analyst, you’ll help Nominet understand and manage cyber and information security risk across our infrastructure, services, suppliers and data. Security … business, you’ll assess controls, track remediation and turn complex security information into clear, practical advice. In doing so, you’ll help build a risk-aware culture where colleagues understand security risks and their responsibilities. This role will suit someone who enjoys detailed analysis, exercises sound judgement and communicates ...

Nominet is seeking a Cyber Security Risk Analyst to help understand and manage cyber and information security risk across our infrastructure, services, suppliers and data. You’ll identify risks, assess controls, and ensure treatment plans are in place, building a risk-aware culture with clear records … practical guidance. You’ll collaborate with technology, operations, procurement and business teams, communicating findings clearly and supporting proportionate risk responses. #J-18808-Ljbffr ...

Technology Solutions Technology Control Office (\"TCO Europe\") is responsible for providing governance, oversight, and challenge to ensure that technology services operate within TD's risk appetite and comply with applicable enterprise standards, regulatory and audit obligations, and internal control requirements.. The TCO Europe Specialist is required to work closely … with both the local and international technology, business and governance teams to strengthen the control environment, manage technology risk and resilience, support regulatory compliance initiatives, and drive the remediation of identified control gaps, audit findings, and regulatory actions. The team plays a key role in enhancing operational resilience capabilities ...

Balfour Beatty is seeking a Risk Systems Analyst to support and enhance risk management systems, data and reporting capabilities across the Group Risk function. You’ll partner with risk champions and IT teams to translate business needs into system improvements and robust testing. Key duties … include maintaining monthly risk reporting, developing the Risk Library, and identifying trends to inform half-year and full-year reporting. #J-18808-Ljbffr ...

Frasers Group is seeking a Technology GRC Analyst to support the ongoing development of its technology risk and assurance capability across the group’s global operations. You will identify, assess and monitor technology and cyber risks while ensuring IT and business controls are designed and operating effectively, collaborating … with multiple stakeholders. You will deliver risk assessments, controls testing and IAM assurance, maintain the risk register and contribute to supplier risk and #J-18808-Ljbffr ...

SUMMARY: In this role, you will liaise with IT and other business representatives to ensure project pipelines are understood and reflected in IT Risk & Security's resource planning. You will participate in skills development activities for information security personnel, continuously improve security aspects of operating processes, and perform information … security risk assessments of technology-enabled projects on a periodic schedule. JOB RESPONSIBILITIES: Service Delivery Perform information security risk assessments of technology-enabled projects with standard levels of complexity against applicable industry-standard or firm-specific control frameworks Conduct vendor reviews, define security requirements, facilitate security testing ...

About the Role Are you early in your IT or cybersecurity career and looking to step into the fast-growing field of Governance, Risk, and Compliance (GRC)? You don’t need prior Governance, Risk and Compliance (GRC) experience to thrive in this role, just a solid grasp … team. In this role, you will act as a key liaison between technical and business teams, helping build, maintain, and monitor our IT policies, risk management frameworks, and security compliance standards. Whether your background is in IT Support 1st/2nd line, you hold a relevant degree ...

Information Security Risk and Compliance Analyst LET’S CUT STRAIGHT TO IT At Severn Trent, our people are at the heart of everything we do.We’rein the top 5% of utility companies worldwide for employee engagement, andwe’reequally proud of our strong Glassdoor score — reflecting how much … protecting the business, its people, and customers from these daily threats, and we have an opportunity for you to join us as anInformation Security Risk and Compliance Analyst. Working within the Technology team the Information Security Compliance Analyst plays a key role identifying, measuring and reporting ...

Delta Capita is seeking a proactive Business Analyst in Sheffield on a contract basis (6-12 months) to transform reporting processes and drive dashboard enhancements. You will gather requirements, map workflows, and coordinate migration from manual reports to a central dashboard, supporting risk, control, and cyber security considerations. … will work with Risk and Control and cross-functional teams, using Jira/Confluence to track deliverables, and you will train teams on new tools and #J-18808-Ljbffr ...

Location: Hybrid/High Wycombe, UK job type: Permanent/Full-time Sector and subsector: IT | Cybersecurity Salary: Competitive salary Security Awareness Analyst (Human Risk) Location: Saepio HQ, High Wycombe, Bucks Hours: Hybrid, Full Time, no overnight work - (Mon – Thurs 9am–6pm, Fri 9am-5pm) About the role … have an exciting opportunity for you to join our managed services team, in this role, you will help customers reduce human cyber risk through Security Awareness Training, phishing simulations and user education programmes. Working with industry-leading platforms such as KnowBe4 and other Human Risk Management tooling ...

Vulnerability Management Analyst at Baker McKenzie will analyze and prioritize security vulnerabilities across the firm’s technology stack, partnering with technology teams to drive remediation efforts and minimize cyber risk. You will operate as SME in the vulnerability program, perform scans, validate fixes and monitor advisories. Candidates should have ...

KPMG Jamaica Extended Support Services (KJESS) is seeking an IT Risk & Security professional to liaison with IT and business reps, ensuring project pipelines are understood and reflected in security planning. You will participate in skills development, improve operating processes, and perform periodic information security risk assessments of technology ...

Severn Trent Plc is seeking an Information Security Risk and Compliance Analyst based in Coventry to protect our critical national infrastructure and support governance, risk and compliance across a complex technology environment. You will work with the Information Security team to identify, measure and report on information … security compliance and risk, driving gap analysis and remediation with internal and external partners. #J-18808-Ljbffr ...

Harvey Nash Group is seeking two Cyber Risk Analysts for a major resilience programme. The role is a 6-month contract with hybrid working in Glasgow (2–3 days onsite). Daily rate £600–£700 umbrella only, with mid-November start. You will own cyber risk assessment outputs ...

Saepio, based in High Wycombe, is seeking a Security Awareness Analyst (Human Risk) to join its managed services team. You will onboard customers to Security Awareness Training, run phishing simulations, and drive user education programmes to reduce human cyber risk. You will collaborate with KnowBe4 and other tooling ...

Interface Recruitment is seeking an IT Contract Reviewer to join our Information Security team in Leeds. The role focuses on preparing client responses to questionnaires and bid documents from an information security and IT perspective. ...

Frasers Group is seeking a Technology GRC Analyst to advance its technology risk and assurance program. You will assess cyber risks, test ITGCs, and ensure controls operate effectively across enterprise systems and retail platforms. Collaborating with Technology, Internal Audit,Cyber Security and Supply Chain teams, you will maintain … risk registers, manage evidence for audits, and drive continuous GRC improvements across a global retail ecosystem. #J-18808-Ljbffr ...

Vitality is seeking an Information Security Analyst to safeguard member data and support our information security program. You will advise across the business, help maintain ISO 27001, and perform risk assessments across processes and systems. You will contribute to security training, policy development, and due diligence on third ...

seeking an entry-level GRC enthusiast in Livingston, UK to kickstart your IT/cybersecurity career. You will help build and monitor IT policies, risk management frameworks and security compliance standards in a fast-growing GRC environment. You’ll work as a liaison between technical and business teams, gaining ...

Baillie Gifford & Co in Edinburgh seeks an information risk professional to analyse information risks, including AI and emerging technologies, and support risk assurance across security, privacy and data controls. You will contribute to governance reporting, collaborate across departments, and build capability in information security and technology risk while translating complex issues into clear risk insights for both technical and non-technical stakeholders. #J-18808-Ljbffr ...

E.ON UK is seeking a Senior Cyber Security Analyst to independently manage operational cybersecurity activities across the organisation. You will own incident response, risk assessments, vulnerability management and the implementation of security controls to keep systems secure and compliant. You will help maintain regulatory compliance and strengthen security ...