1 to 25 of 36 Remote/Hybrid Permanent Risk Assessment Jobs

success is a strong culture where people are encouraged to be present, bold and curious, allowing them to achieve their individual goals. Information Security Risk Manager Munich Re is seeking a highly skilled Information Security Risk Manager (ISRM) to act as the Information Security Subject Matter Expert … teams across three entities, offering high visibility across the organisation. You will provide independent oversight, challenge, and expert guidance on Information Security and Cyber risk, working across multiple UK-regulated entities operating within a global Group structure, with dotted-line reporting into Munich Re's Group IRM function ...

business community. Please do not contact the recruiter directly. Profile Summary To provide independent second line oversight and challenge of the firm's operational risk framework, with a focus on Technology, Algorithmic Trading/Model Risk, Data and Third-Party Risk. The role supports the identification, assessment, monitoring and reporting of operational risks across EMEA entities, ensuring compliance with regulatory expectations and driving improvements in operational resilience and risk insight. Duties and Responsibilities Technology & Cyber Risk: Provide oversight and challenge of IT, cyber security, data and end-user computing risks, including review of control ...

Senior Technical Security Risk Consultant Location: Remote with occasional UK travel Contract Type: Permanent & Full-time Security Clearance: Active SC clearance required Salary: Competitive + Benefits About the Role As a Technical Cyber Risk Consultant, you will work closely with clients across government, defence and regulated sectors. … will operate as a trusted advisor, working alongside senior stakeholders and technical teams to deliver pragmatic, risk-led outcomes. Key Responsibilities Provide expert advice on cyber risk management frameworks including ISO 27005 and NIST RMF Lead risk identification, assessment and treatment across applications, infrastructure and digital ...

mitigate identified cyber risks, aligning them with business objectives and regulatory requirements. Work closely with IT and UK business units to ensure that risk mitigation actions are practical and do not unnecessarily hinder business operations. Engage with senior leadership, including the UK Chief Operating Officer (COO), to provide regular … updates on the organization's cyber risk posture. Collaborate with key business units and external stakeholders to ensure an aligned approach to risk management across the enterprise. Provide detailed risk reporting to the UK Risk Committee and relevant Board governance bodies. Ensure that Cyber & IT risk ...

allowing for personalized product recommendations. Marketing Campaigns : Use AI to target customers with tailored marketing campaigns based on their transaction history and preferences. 5. Risk Management Risk Assessment : AI can analyze market trends and economic indicators to provide early warnings about potential risks. Compliance Monitoring : Automate compliance … checks and monitoring to ensure adherence to regulations and reduce the risk of non-compliance penalties. 6. Operational Efficiency Process Automation : Use robotic process automation (RPA) to handle repetitive tasks such as data entry, account reconciliation, and report generation. Workflow Optimization : AI can optimize workflows by identifying bottlenecks ...

working closely with the Information Governance lead and DPO. They ensure compliance with the Data Security and Protection Toolkit (DSPT) aligned with the Cyber Assessment Framework (CAF) and delivery of the NHS Cyber Security Strategy to 2030 and full participation in the regional "Defend as One" model. The role … possess deep technical and governance expertise across areas such as threat detection, vulnerability management and incident response, with the ability to translate complex technical risk into clear, articulate, actionable information for senior executives and boards with assurance and confidence. They will demonstrate a thorough understanding of national and international ...

automation, capacity planning and monitoring tools including introducing such tooling. Threat Landscape: Deep understanding of common networking attack vectors and defense‐in‐depth strategies. Risk & Compliance: Board understanding of risk assessment methodologies, control frameworks (ISO 27001, NIST CSF, CIS Controls). Skills Analytical & Detail‐Oriented: Keen … anomalies; precise documentation and follow‐through. Communication: Clear written and verbal communication—translating technical detail into business‐friendly risk insights. Collaboration: Works well with Infrastructure, Application, and Business teams; influences without authority. Self‐Motivation: Proactive ownership; drives tasks to completion with minimal supervision. Process Discipline: Organizes workload, meets deadlines ...

Requirement 4 Provide security assurance support for complex programmes, service transitions, and higher-classification environments in line with SoR Requirement 1 Contribute to risk management activities, including RAID logs and programme risk registers Coordinate Security Improvement Plans and support the implementation of security controls Engage with programme teams … Assist in maintaining consistent assurance practices across multiple workstreams and programmes Relevant Experience Minimum 5 years' experience in security assurance, cyber security governance, or risk management roles Strong understanding of: JSP453 JSP440 DEFSTAN 05-138 Experience working within Defence environments or programmes Demonstrable experience supporting security assurance activities within ...

seeking a Cyber Security Advisor on an initial 8 contract Service Location: Glasgow (Hybrid) Essential Skills Experience of cyber security analysis and assessment, including threat identification, risk assessment, evaluation of technical controls, and assessment against industry standards Experience of engaging, advising and influencing at all levels ...

organisation employs circa 70 people and punches well above its weight in terms of commercial reach and industry influence. The Opportunity As Business Continuity, Risk, Compliance and Resilience Lead, you will design, implement and own an integrated framework that strengthens IT security and operational resilience across the business. This … practitioner role you will be the person writing the plans, running the exercises, carrying out the assurance work and managing supplier risk directly. There are no direct reports; this role suits someone who gets things done themselves rather than directing others to do it, and who is energised ...

directly. About the job you’re considering Job Location Salisbury Onsite 5 days per week We are seeking a DV Cleared skilled Security Governance, Risk and Compliance Consultant to support an internal consultancy initiative aimed at aligning contractual security requirements with recognised industry frameworks such as NIST … controls, identifying gaps and weaknesses, assessing the risks associated with non-compliance, and recommending appropriate mitigation strategies. This position requires a strong understanding of risk management, regulatory compliance, and the ability to translate complex requirements into practical, actionable solutions. Your role Security Requirements Alignment: Translate contractual and regulatory security ...

from the outset rather than retrofitted. Threat Modelling - Lead and facilitate threat modelling exercises (e.g. STRIDE), identifying vulnerabilities and defining mitigations early in delivery Risk Assessment - Identify, assess, and mitigate security risks across systems, applications, and infrastructure Security Assurance - Provide governance and assurance across projects, ensuring compliance with … complex environments Strong practical experience applying Secure by Design principles in modern architectures Hands-on experience conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public ...

design across complex AI systems and data pipelines. You’ll define and deliver AI security strategies, develop reference architectures, and provide expert guidance on risk management, data protection, and ethical AI governance. You’ll also play a key role in client engagement, helping shape proposals, define solutions, and drive … alongside deep technical expertise. Key areas of focus Define and implement enterprise-level AI/ML security strategies, policies, and architectures. Lead on AI risk assessment, threat modelling, and mitigation planning. Ensure compliance with GDPR, the EU AI Act, and international security frameworks (ISO 27001, NIST, TOGAF, SABSA ...

design across complex AI systems and data pipelines. You’ll define and deliver AI security strategies, develop reference architectures, and provide expert guidance on risk management, data protection, and ethical AI governance. You’ll also play a key role in client engagement, helping shape proposals, define solutions, and drive … alongside deep technical expertise. Key areas of focus Define and implement enterprise-level AI/ML security strategies, policies, and architectures. Lead on AI risk assessment, threat modelling, and mitigation planning. Ensure compliance with GDPR, the EU AI Act, and international security frameworks (ISO 27001, NIST, TOGAF, SABSA ...

Ireland) is a leading specialist provider of engineering, technology and structural warranty insurance solutions, plant and equipment inspection services and engineering-based risk management activities in the UK and Ireland. HSB (UK and Ireland) consists of the parent company HSB Engineering Insurance Limited (HSBEIL) together with … Warranty. Collectively, HSB is the UK and Ireland's only group of companies solely focused on providing specialist engineering and technology insurance solutions, alongside risk-focused inspection services and assessments to its customers. This opportunity sits within MD Insurance Services (MDIS) , supporting its Data & Analytics capability. Why Join ...

exposure across multiple projects, allowing you to work at the forefront of product security within complex and mission-critical systems. Key Responsibilities Conduct security risk assessments and vulnerability analysis across projects. Develop and maintain project security plans, policies, and supporting documentation. Ensure security deliverables meet customer, regulatory, and business … areas: Product, project, or cyber security within engineering-led environments. Security frameworks and standards such as NIST 800-series, NCSC guidance, or equivalent. Security risk assessment and assurance methodologies. Secure by Design (SbD) implementation and security documentation production. Information Assurance, Cyber Security, or Systems Security Engineering. You will ...

secure network operations (SN). In doing so, you will contribute to the detection and resolution of security incidents as well as to risk assessment and management in order to achieve the protection objectives (availability, integrity, confidentiality) through appropriate measures in the first line of defense In addition … audits by accredited auditors as well as with internal audits Another important part of your work is supporting system and process owners with documentation, risk and criticality analysis, and quality assurance You will regularly coordinate with the decentralized ISMB-SN on relevant topics such as ISMS operations, risks, security ...

best practice in Security Operations for Services, People, Policy and Process, Technology and Physical layers. Understanding of common threats and mitigation techniques. Proficiency in risk assessment and vulnerability management. Knowledge of OnPrem architectures & design Understanding of security best practices (least privilege, encryption). Understanding how to design scalable … possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security ...

security standards. Participate in sourcing and contract management for projects involving highly sensitive data or critical infrastructure, maintaining strict adherence to confidentiality protocols and risk mitigation strategies. Continuously monitor the market for emerging technology vendors, startups, and innovative suppliers to contribute fresh ideas and maintain a competitive edge … aptitude for building consensus around shared objectives. In-depth knowledge of data privacy regulations (such as GDPR), recognised cybersecurity standards (e.g., ISO 27001), vendor risk assessment methodologies, and best practices for mitigating third-party risks. Professional certification such as CIPS (Chartered Institute of Procurement & Supply), CPSM (Certified Professional ...

designing, implementing, and maintaining comprehensive security architectures for telecommunications networks. The role emphasizes UK Telecommunications Security Act (TSA) compliance, network node security, and risk mitigation across complex telecom infrastructures , including secure protocol interfaces and API exposure (HTTPS/SBI, SIP/signaling protocols), and leading high-performing security teams. … Responsibilities Security Architecture Design UK TSA Compliance Network Node Security Protocol & Interface Security Threat Landscape Management Risk Assessment & Mitigation 5G/6G Security Team Leadership & Delivery Your Profile 8-12+ years in telecommunications network security architecture UK TSA & Regulatory Compliance : Telecom Network Architecture : Telecom Security Requirements : Base ...

Security Operations for Services, People, Policy and Process, Technology and Physical layers. Cybersecurity Fundamentals Understanding of common threats and mitigation techniques. Proficiency in risk assessment and vulnerability management. Knowledge of OnPrem architectures & design including: Security controls and detection tools, Networking and Secure network architectures Understanding of security best … possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security ...

small, high‐impact team and act as both a strategic advisor and hands‐on leader, helping the business navigate evolving regulatory requirements while balancing risk with commercial outcomes. The ideal candidate will bring strong privacy leadership experience, with the ability to translate complex regulation into practical, scalable approaches that … support business growth. Responsibilities Lead and shape Trainline’s global privacy strategy, advising the business on compliance and risk ensuring alignment with business goals and regulations (UK GDPR, EU GDPR, ePrivacy) and emerging frameworks Act as the appointed DPO, fulfilling statutory obligations and acting as the primary contact point ...

refresh, software currency, resilience improvements and decommissioning activity* Act as a senior technical authority for Infrastructure platforms, supporting deep expertise during incidents, change design, risk management and assurance activities* Lead major change initiatives, ensuring high‐quality change execution through CAB, effective risk assessment, and robust implementation planning … strategy, lifecycle management and technical roadmaps* Experience managing complex change and incident scenarios, including senior collaborator engagement* Solid understanding of resilience, security, and operational risk within financial services or comparable regulated industries**And any experience of these would be great*** Experience with Unisys systems* Financial services, payments, mortgages ...

data product releases Willingness to learn and passionate about new innovations and techniques Experience of defect management, triage, and understands how to take a risk assessment based approach (i.e., figuring out what the likelihood and impact of a bug is) Strong analytical problem-solving skills and looking beyond ...

each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. … decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence. If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates ...