with the latest cybersecurity threats, trends, and regulatory changes, proactively advising clients on necessary adjustments to their security strategies. Produce detailed and accurate reports on penetration testing findings, including risk levels, remediation steps, and strategic recommendations. EXPERIENCE: Minimum of 4+ years of experience in cybersecurity, specifically in penetration testing and Incident Response, vulnerability management, and risk assessment. Public More ❯
implementation. Expertise in voice systems (Unclassified, Secure, TDM, VoIP). Experience supporting government clients in secure environments (NIPRNET, SIPRNET). Proficiency in network security, including change order review and risk assessment. Strong understanding of cabling standards and termination techniques. Experience managing technical teams in a government environment. Desired Skills and Experience ITIL Foundation certification. Network certifications (e.g., Network+, CCNA More ❯
DUTIES AND RESPONSIBILITIES The Risk Management Specialist (RMS) is a professional who is responsible for identifying, assessing and evaluating potential risks that may hinder the organization's objectives. RMS develop and implement risk management policies and procedures to minimize the impact of potential risks. The RMS coordinates with various departments and stakeholders to ensure compliance with regulations and … standards utilizing the five basic principles of risk management: 1. Identify the Risk 2. Analyze the Risk 3. Evaluate the Risk or RiskAssessment 4. Treat the Risk 5. Monitor and Review the Risk Additional responsibilities will include to develop and implement risk management policies and procedures; analyze and evaluate potential … risks and hazards, and develop strategies to mitigate them; conduct risk assessments and identify areas of potential risk; develop and implement risk mitigation plans and ensure timely implementation; collaborate with other departments to identify and manage risks associated with their activities; ensure compliance with regulatory requirements and industry standards related to risk management; monitor and report More ❯
EU Lead Risk & Assurance, Amazon Payments Europe Job ID: Amazon Payments Europe S.C.A. This position will be responsible for leading the Risk and Assurance functions within our organization, operating as a key member of the senior leadership team and reporting directly to the Chief Compliance Officer. The role combines oversight of enterprise risk management with strategic leadership … of our assurance activities, serving as a critical second line of defense partner to the business. The Snr Manager, Risk and Compliance will drive the maturation of our risk management capabilities while preparing for and executing the integration of the Assurance function. This leader will be responsible for developing and implementing an integrated risk and assurance framework … that scales with our growing organization and meets regulatory expectations. Key job responsibilities • Lead and develop a team of risk professionals (currently 5 members) and prepare for the integration and leadership of the Assurance function, creating a unified and effective second line organization. • Design and implement a comprehensive risk management framework, including riskassessment methodologies, control More ❯
Job description: Members of the ISSO team support our work on assessment and authorization (A&A) of critical systems, detection of adversary behavior, and improving the defensive posture of our customer's information systems. The successful candidate will use various tools and methodologies to evaluate the state of systems and applications for vulnerabilities, verify protection against adversary intent, and … stakeholders, developers, and external teams including customer security managers (ISSMs), organizational leadership, and key personnel. Identify requirements for documentation associated with system categorization, the System Security Plan, and systems riskassessment as required under NIST 800-53/53A. Assess system compliance with NIST requirements, identifying weaknesses and evaluating planned remedial actions based upon those requirements. Support control … implementation assessment and reporting and monitoring processes using cyber security and assessment management systems. Understanding of perimeter controls (firewalls), access control mechanisms, and network architectures. Strong understanding of methodologies for researching and documenting software and hardware vulnerabilities. Skilled in cross-team collaboration and effective communication to fulfill specific accreditation requirements. Strong verbal and written communication/cooperation within More ❯
between system owners and security personnel. • Manage the complete lifecycle of security controls, ensuring effectiveness and compliance. • Maintain continuous oversight of system security documentation. • Conduct vulnerability scans as per riskassessment guidelines. • Develop and manage POAMs in response to security vulnerabilities. • Coordinate system owner approvals for corrective or mitigation actions. • Monitor security controls to maintain ISs' ATO status. … advanced degree in Computer Science, Cybersecurity, or related cyber discipline. • Minimum of 7 years' experience as an ISSO at a cleared facility to include the following: • Experience with developing Assessment packages for Determination. • Experience with Briefing Executive level officers. • Experience with security tools such as Tenable Nessus/Security Center, eMASS or similar applications. • IAT Level III Preferred Qualifications … Certified Information System Security Professional, Certified Governance Risk and Compliance Clearance Requirements: • Active Top-Secret clearance with SCI eligibility More ❯
ambitious, forward-thinking leader to head the Biosafety, Non-Clinical & Emerging Technologies team. The role will suit an experienced clinician, academic or regulatory specialist with expertise in pre-clinical assessment, toxicology, genomics or in vitro diagnostics, and an interest in protecting patient safety. This role presents a unique opportunity to lead a dynamic, cross-disciplinary group focused on the … cutting-edge intersection of medicines, devices, and evolving therapeutic modalities. The post holder will lead the integration of scientific, clinical, and technical expertise to deliver high-quality benefit-risk assessments and ensure effective matrix working across the Benefit-Risk Evaluation functions, the wider Safety and Surveillance Group, and Agency lifecycle group. The role is pivotal in ensuring timely … toxicology: support for toxicological, genotoxicity, carcinogenicity and reproductive toxicity assessments in the safety of medicines, including in silico modelling to enhance safety evaluations. Biological safety, and sterilisation and decontamination assessment: underpinning both post-market surveillance and clinical investigations for medical devices. Pharmacogenomics for pharmacovigilance: co-ordinate policy on the integration of pharmacogenomics with pharmacovigilance to support personalised medicine, ensuring More ❯
Project-Program Management Associate Professional Services Consultant Location: London, United Kingdom Contract Type: Regular Schedule: 35 hours/week Job ID: R90491 About the Business : LexisNexis Risk Solutions is a key partner in riskassessment, offering solutions in Anti-Money Laundering, Identity Verification, Fraud Prevention, and Customer Data Management. Learn more at About our Team : You will … technical training, and transfer knowledge. Responsibilities : Manage project scope and requirements changes, ensuring customer satisfaction. Plan, develop, and install Fircosoft products according to client needs. Understand compliance and sanctions risk management and relate it to products and services. Analyze customer use cases and apply best practices. Deliver, install, and configure Fircosoft applications, providing technical training. Identify client product needs … and troubleshoot during implementation. Requirements : Project management skills and experience. Technical implementation expertise. Broad technical knowledge. Stakeholder management skills. Learn more about the LexisNexis Risk team. We are committed to fair and accessible hiring. If you need accommodations, please contact us. Beware of scams: we do not ask for money or banking details from applicants. Read our privacy policy More ❯
Colorado Springs, Colorado, United States Hybrid / WFH Options
OSAAVA Services
are seeking Cybersecurity Software Evaluators to assess and analyze the security of software applications used in high-security government environments. This role involves conducting cyber evaluations, security testing, and risk assessments on software applications to ensure compliance with Department of Defense (DoD) cybersecurity standards. This position is initially for a few months with the potential for long-term employment … experience in cybersecurity, penetration testing, or software security evaluation. • Certifications such as CISSP, CEH, OSCP, or GIAC GWEB are highly preferred. • Experience with secure coding practices and software vulnerability assessment tools (e.g., Nessus, Burp Suite, Fortify, SonarQube). • Familiarity with secure software development lifecycle (SSDLC) methodologies. • Strong knowledge of encryption protocols, authentication mechanisms, and network security. • Ability to work … security teams to enhance software security postures. Preferred Qualifications: • Experience conducting cybersecurity assessments in DoD or government environments. • Understanding of container security and DevSecOps principles. • Familiarity with threat modeling, riskassessment frameworks, and security controls testing. • Knowledge of cloud security best practices (AWS, Azure, GovCloud). Work Environment & Requirements: • Location: Colorado Springs, CO - On-site presence required. • Potential More ❯
a forward-thinking team. As the Technology Resilience Analyst , you will ensure Primark's Technology systems and processes are resilient against disruptions. This role will focus on resilience testing, riskassessment, mitigation strategy development, and compliance with business continuity and disaster recovery standards. What You'll Get The world is changing and it's important we support our … scope failure modes. Assist with test execution, including test plans and communication plans. Produce test completion reports (including lessons learnt) and identify gaps and risks in the recovery capabilities. RiskAssessment and Mitigation: Conduct technology resilience risk assessments to identify potential vulnerabilities and threats. Monitor emerging risks in the technology resilience landscape and recommend appropriate actions. Documentation More ❯
for someone who thrives in fast-paced, international environments and is passionate about keeping financial services ethical, transparent, and accountable. 🔍 What You’ll Do Design and deliver a global, risk-based compliance monitoring programme aligned with our regulatory obligations Conduct thematic reviews , identify gaps or weaknesses, and recommend practical improvements Maintain a dynamic monitoring plan and compliance riskassessment that reflects the firm’s risk appetite Prepare reports for senior management highlighting key findings, risk trends, and remediation status Manage and mentor a team of compliance professionals, ensuring consistency and quality in review work Work closely with local compliance teams, marketing, internal audit, and risk functions to drive compliance culture Track and assess More ❯
City of London, London, United Kingdom Hybrid / WFH Options
fs talent
for someone who thrives in fast-paced, international environments and is passionate about keeping financial services ethical, transparent, and accountable. 🔍 What You’ll Do Design and deliver a global, risk-based compliance monitoring programme aligned with our regulatory obligations Conduct thematic reviews , identify gaps or weaknesses, and recommend practical improvements Maintain a dynamic monitoring plan and compliance riskassessment that reflects the firm’s risk appetite Prepare reports for senior management highlighting key findings, risk trends, and remediation status Manage and mentor a team of compliance professionals, ensuring consistency and quality in review work Work closely with local compliance teams, marketing, internal audit, and risk functions to drive compliance culture Track and assess More ❯
Role is based in Farnborough - 1/2 days on site per week For more details please call me on or email WHAT WILL THE SECURITY ARCHITECT BE DOING? Risk Management within a Defence and Security Sector; Security/Cyber architectures are proportionate to the GSC of the systems; Security architectures are delivered in conjunction with other IT Architects … of a serious criminal record, a right to work and live in UK and, preferably, a record of 5 years' UK residency), SKILLS andamp; EXPERIENCE DESIRED: Able to perform Risk management using industry approved methodologies (such as NIST 800-53). Identification of suitable risk management activities (technical, physical, or procedural) to treat/mitigate the identified risks … that merit consideration when conducting various activities in the field of cyber security; Creation of security documentation to support the development of a system, these could include: security Aspects, RiskAssessment, Risk Management, Security Policies, Security Test Plans/Results, Evaluation documents; Knowledge of JSP 604/453 and creation if assurance artefacts; and High standards in More ❯
Sex Offender treatment at the Delaware Department of Corrections facilities. SEX OFFENDER TREATMENT PROGRAM CLINICIAN ESSENTIAL FUNCTIONS: Performs group therapy interventions and individual treatment planning for clients. Performs Sexual RiskAssessment Interviews and writes Sexual Risk and Needs Assessments. Completes Discharge Summaries for client's post-treatment participation. Assists in planning and implementing the goals and objectives … OFFENDER TREATMENT PROGRAM CLINICIAN PREFERRED EXPERIENCE: Experience providing clinical therapy to individuals who have engaged in sexual offending behavior or individuals who have experienced sexual harm. Experience with Sexual Risk Tools such as Static99r, STABLE-2007, and ISORA. Experience with implementing Cognitive Behavioral Therapy in a therapeutic setting. If preferred experience is not met, applicant must be licensed and More ❯
Sex Offender treatment at the Delaware Department of Corrections facilities. SEX OFFENDER TREATMENT PROGRAM CLINICIAN ESSENTIAL FUNCTIONS: Performs group therapy interventions and individual treatment planning for clients. Performs Sexual RiskAssessment Interviews and writes Sexual Risk and Needs Assessments. Completes Discharge Summaries for client's post-treatment participation. Assists in planning and implementing the goals and objectives … OFFENDER TREATMENT PROGRAM CLINICIAN PREFERRED EXPERIENCE: Experience providing clinical therapy to individuals who have engaged in sexual offending behavior or individuals who have experienced sexual harm. Experience with Sexual Risk Tools such as Static99r, STABLE-2007, and ISORA. Experience with implementing Cognitive Behavioral Therapy in a therapeutic setting. If preferred experience is not met, applicant must be licensed and More ❯
systems that support us in achieving excellent outcome KPI's. Boston Place also has a 5/5 inspection rating from the HFEA. Key Responsibilities: • Establishing and managing quality, risk and governance strategies within the clinic and its satellites • Maintaining the HFEA licence • Developing and monitoring the quality policy, quality objectives and quality indicators • Internal and external auditing, user … QMS Qualifications and Training: • Degree or equivalent post graduate diploma and/or experience • Recognised management qualification and/or healthcare experience • Using and managing Quality Management Systems and Risk Management processes and practice, including riskassessment and incident investigation • Conducting and preparing for audit • Experience in using QMS software • Document control experience • Proven competency in managing More ❯
to Line and Project Managers. Documentation: Complete and submit all required paperwork within SLA. Technical Tasks: Fault finding, installation of metalwork, fibre and cable pulling, copper termination, and testing. Risk Management & Safety: Manage RiskAssessment and Method Statement documentation, and maintain SHEQ standards. Skill Development: Develop fault diagnosis skills using OTDR and Ethernet/OSA testing. Vendor More ❯
and input from key stakeholders Develop a set of key performance indicators and embed these within the department Manage the IT budget and identify cost saving initiatives Security and Risk Management Develop policies and procedures that Achieve certification for the company against appropriate security standards and conform to industry recommended practices Undertake effective risk management and report regularly … and resolving problems Health and Safety Ensure the health, safety and well-being of all team members is protected by personal example Foster a culture of safe working and risk awareness within the team Escalate any safety related matters that cannot be resolved within the team Engage with the riskassessment of line processes and team tasks More ❯
certification artefact production aligned to EASA and UK CAA expectations. Lead the development and review of cybersecurity documentation, including the PSecAC (Airworthiness Security Process Plan), PASRA (Preliminary Aircraft Security RiskAssessment), ASAM (Aircraft Security Architecture Model), and Security Verification Methods. Provide input into the AWSP frameworks, including the tailoring of compliance checklists, activity outcomes, and document templates. Ensure … traceability between security risk assessments, controls, and compliance objectives across the aircraft systems and software architecture. Coordinate the development of cybersecurity methods and processes, contributing to their alignment with recognised standards. Engage with DAG's internal stakeholders, including engineering, safety, and systems integration teams, to embed cybersecurity into the design and certification lifecycle. Act as the primary technical interface More ❯
certification artefact production aligned to EASA and UK CAA expectations. Lead the development and review of cybersecurity documentation, including the PSecAC (Airworthiness Security Process Plan), PASRA (Preliminary Aircraft Security RiskAssessment), ASAM (Aircraft Security Architecture Model), and Security Verification Methods. Provide input into the AWSP frameworks, including the tailoring of compliance checklists, activity outcomes, and document templates. Ensure … traceability between security risk assessments, controls, and compliance objectives across the aircraft systems and software architecture. Coordinate the development of cybersecurity methods and processes, contributing to their alignment with recognised standards. Engage with DAG's internal stakeholders, including engineering, safety, and systems integration teams, to embed cybersecurity into the design and certification lifecycle. Act as the primary technical interface More ❯
certification artefact production aligned to EASA and UK CAA expectations. Lead the development and review of cybersecurity documentation, including the PSecAC (Airworthiness Security Process Plan), PASRA (Preliminary Aircraft Security RiskAssessment), ASAM (Aircraft Security Architecture Model), and Security Verification Methods. Provide input into the AWSP frameworks, including the tailoring of compliance checklists, activity outcomes, and document templates. Ensure … traceability between security risk assessments, controls, and compliance objectives across the aircraft systems and software architecture. Coordinate the development of cybersecurity methods and processes, contributing to their alignment with recognised standards. Engage with DAG's internal stakeholders, including engineering, safety, and systems integration teams, to embed cybersecurity into the design and certification lifecycle. Act as the primary technical interface More ❯
certification artefact production aligned to EASA and UK CAA expectations. Lead the development and review of cybersecurity documentation, including the PSecAC (Airworthiness Security Process Plan), PASRA (Preliminary Aircraft Security RiskAssessment), ASAM (Aircraft Security Architecture Model), and Security Verification Methods. Provide input into the AWSP frameworks, including the tailoring of compliance checklists, activity outcomes, and document templates. Ensure … traceability between security risk assessments, controls, and compliance objectives across the aircraft systems and software architecture. Coordinate the development of cybersecurity methods and processes, contributing to their alignment with recognised standards. Engage with DAG's internal stakeholders, including engineering, safety, and systems integration teams, to embed cybersecurity into the design and certification lifecycle. Act as the primary technical interface More ❯
Fluent in English - both written and spoken Demonstrable experience as a Security Architect or similar role Strong knowledge of security standards, protocols, and best practices Experience with threat modelling, riskassessment, and incident response Familiarity with security tools (e.g., Snyk, OWASP ZAP) Excellent communication and collaboration skills Self-learner and ability to execute tasks without supervision Ability to … maintain the highest level of professionalism Activities Assess and design secure system architectures Define and enforce security policies and best practices Conduct threat modelling and risk assessments Collaborate with development teams to ensure secure coding practices Review and recommend security tools and technologies Respond to security incidents and perform root cause analysis Acquired Experiences and Demonstrable Skills Potential skills More ❯
certification artefact production aligned to EASA and UK CAA expectations. Lead the development and review of cybersecurity documentation, including the PSecAC (Airworthiness Security Process Plan), PASRA (Preliminary Aircraft Security RiskAssessment), ASAM (Aircraft Security Architecture Model), and Security Verification Methods. Provide input into the AWSP frameworks, including the tailoring of compliance checklists, activity outcomes, and document templates. Ensure … traceability between security risk assessments, controls, and compliance objectives across the aircraft systems and software architecture. Coordinate the development of cybersecurity methods and processes, contributing to their alignment with recognised standards. Engage with DAG's internal stakeholders, including engineering, safety, and systems integration teams, to embed cybersecurity into the design and certification lifecycle. Act as the primary technical interface More ❯
Managing Safely certification. Relevant crane/service lift training or equivalent experience. Procedural Frameworks The role operates within a structured procedural environment, including but not limited to: Lifting Operations RiskAssessment Accident & Incident Reporting Emergency Response PUWER Compliance Working at Height Document Control CoSHH Assessment Contractor and Project Procurement Management of Change More ❯