Milton Keynes, Buckinghamshire, England, United Kingdom
Altitude-Recruitment Limited
meet you. An experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatorycompliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and … GDPR compliance while supporting commercial teams with tender responses and client security assurance. Core Responsibilities: Strategic (30%) Define technical security architecture and standards across multi-cloud SaaS platforms Embed security into product development lifecycle and roadmap planning Conduct threat modelling and risk assessments for new features and system changes Evaluate and recommend security technologies and tools Operational (40%) Manage … AWS infrastructure Coordinate security incident response and vulnerability remediation Oversee security monitoring, alerting, and detection capabilities Manage vulnerability assessment and penetration testing programs Maintain identity and access management controls Compliance & Assurance (30%) Maintain ISO27001 certification and manage audit cycles Ensure PCI/DSS compliance for payment processing systems Manage GDPR compliance across all products and operations Complete More ❯
meet you. An experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatorycompliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and … GDPR compliance while supporting commercial teams with tender responses and client security assurance. Core Responsibilities: Strategic (30%) Define technical security architecture and standards across multi-cloud SaaS platforms Embed security into product development lifecycle and roadmap planning Conduct threat modelling and risk assessments for new features and system changes Evaluate and recommend security technologies and tools Operational (40%) Manage … AWS infrastructure Coordinate security incident response and vulnerability remediation Oversee security monitoring, alerting, and detection capabilities Manage vulnerability assessment and penetration testing programs Maintain identity and access management controls Compliance & Assurance (30%) Maintain ISO27001 certification and manage audit cycles Ensure PCI/DSS compliance for payment processing systems Manage GDPR compliance across all products and operations Complete More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Novatus Global
Novatus Global is a Series B scale-up RegTech SaaS provider and boutique advisory firm, helping financial institutions manage their most complex regulatory requirements. We combine deep consulting expertise with cutting-edge SaaS solutions, enabling clients to strengthen compliance, enhance resilience, and drive sustainable growth. Our flagship SaaS platform, En:ACT (short for Enabling A ccurate Compliance in Transaction reporting ), is a market-leading solution for regulatory transaction reporting and reconciliation across global regimes. En:ACT automates reporting, reconciles data across systems, and maps errors directly to regulatory rules, helping firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 30 firms worldwide, the platform is scalable … proven, and designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services across Risk & Compliance (including Transaction Reporting and Operational Resilience), ESG, Strategy, Data, and Operations. Unlike larger consultancies, we embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch More ❯
Leeds, Yorkshire, United Kingdom Hybrid / WFH Options
Stott and May
security (AWS, GCP, Azure), container security, and zero-trust networks. Harden DevSecOps pipelines to ensure secure software delivery. Collaborate with engineering teams to integrate security by design into products. Compliance & Risk Management Ensure regulatorycompliance with GDPR, SOC2, ISO, PCI-DSS, and crypto-specific frameworks. Lead risk assessments for third-party vendors and service providers. Work with … legal and compliance teams on KYC/AML security for crypto services. Essential Skills & Experience 15+ years of progressive experience in Information Security, with a minimum of 7-8 years focused on cybersecurity. Proven track record in cybersecurity strategy, team leadership, and incident management. Deep knowledge of blockchain protocols, smart contracts (Solidity, Rust), cryptography, and custody systems. Strong expertise … to gain buy-in and drive adoption of security best practices across diverse teams. Collaboration & teamwork: Strong team player able to work effectively with cross-functional teams (development, operations, compliance, audit). Leadership & mentorship: Experience leading security initiatives, guiding junior team members, and fostering a culture of continuous learning. Adaptability & resilience: Ability to thrive in fast-paced, evolving environments More ❯
Birmingham, West Midlands, England, United Kingdom Hybrid / WFH Options
TXP Technology x People
a 6-month contract. This role is integral to ensuring that the complete lifecycle of records - from creation and storage through to timely disposition - complies with all relevant legal, regulatory, and business retention requirements across the UK bank. Key Responsibilities: Ensure data retention controls are effectively designed, implemented, and operating to mitigate data and compliance risks. Lead the … report on key data quality metrics and data storage control indicators , identifying areas for improvement. Support the development and execution of data retention strategies and policies , ensuring adherence to regulatory and operational standards. Collaborate with Legal, Compliance, Risk, and IT teams to ensure consistent application of data retention requirements across the enterprise. Skills & Experience: Proven experience in data … retention, records management, or data governance within a banking or financial services organisation. Strong understanding of data lifecycle management , regulatory retention schedules , and data risk controls . Familiarity with UK and global banking regulations related to data management and privacy (e.g., GDPR, FCA requirements). Excellent stakeholder management and governance skills, with experience leading forums or working groups. Strong More ❯
Sunbury-On-Thames, London, United Kingdom Hybrid / WFH Options
BP Energy
and Baku. The key areas of focus for Information Technology (IT) Audit include the following digital risk areas: Cyber security with a focus on network and platform infrastructure security Compliance with cyber and technology regulations, payment card industry standards Development, deployment and maintenance of critical IT systems Risk management over enduring and emerging technology The role represents an excellent … and cyber security risks. Expected behaviours : Role modelling conformance with the bp requirements and processes Role modelling bps Who We Are beliefs Contributing to HSSE management, Diversity & Inclusion, Ethics & Compliance and other management activities within Internal Audit. What you will need to be successful: Education: Suitably qualified professional with degree, or similar educational background, or extensive relevant work experience. … The ability to navigate the organisation with tact and manage relationships at different levels including senior leaders# Desirable Criteria: Audit experience including network and infrastructure security, payment card industry compliance, IT general controls, cyber security and regulatorycompliance Why join us? At bp, we support our people to grow in a diverse and exciting environment. We believe More ❯
sunbury, south east england, united kingdom Hybrid / WFH Options
BP Energy
and Baku. The key areas of focus for Information Technology (IT) Audit include the following digital risk areas: Cyber security with a focus on network and platform infrastructure security Compliance with cyber and technology regulations, payment card industry standards Development, deployment and maintenance of critical IT systems Risk management over enduring and emerging technology The role represents an excellent … and cyber security risks. Expected behaviours : Role modelling conformance with the bp requirements and processes Role modelling bps Who We Are beliefs Contributing to HSSE management, Diversity & Inclusion, Ethics & Compliance and other management activities within Internal Audit. What you will need to be successful: Education: Suitably qualified professional with degree, or similar educational background, or extensive relevant work experience. … The ability to navigate the organisation with tact and manage relationships at different levels including senior leaders# Desirable Criteria: Audit experience including network and infrastructure security, payment card industry compliance, IT general controls, cyber security and regulatorycompliance Why join us? At bp, we support our people to grow in a diverse and exciting environment. We believe More ❯
guildford, south east england, united kingdom Hybrid / WFH Options
BP Energy
and Baku. The key areas of focus for Information Technology (IT) Audit include the following digital risk areas: Cyber security with a focus on network and platform infrastructure security Compliance with cyber and technology regulations, payment card industry standards Development, deployment and maintenance of critical IT systems Risk management over enduring and emerging technology The role represents an excellent … and cyber security risks. Expected behaviours : Role modelling conformance with the bp requirements and processes Role modelling bps Who We Are beliefs Contributing to HSSE management, Diversity & Inclusion, Ethics & Compliance and other management activities within Internal Audit. What you will need to be successful: Education: Suitably qualified professional with degree, or similar educational background, or extensive relevant work experience. … The ability to navigate the organisation with tact and manage relationships at different levels including senior leaders# Desirable Criteria: Audit experience including network and infrastructure security, payment card industry compliance, IT general controls, cyber security and regulatorycompliance Why join us? At bp, we support our people to grow in a diverse and exciting environment. We believe More ❯
london, south east england, united kingdom Hybrid / WFH Options
Novatus Global
Novatus Global is a Series B scale-up RegTech SaaS provider and boutique advisory firm, helping financial institutions manage their most complex regulatory requirements. We combine deep consulting expertise with cutting-edge SaaS solutions, enabling clients to strengthen compliance, enhance resilience, and drive sustainable growth. Our flagship SaaS platform, En:ACT (short for Enabling Accurate Compliance in … Transaction reporting), is a market-leading solution for regulatory transaction reporting and reconciliation across global regimes. En:ACT automates reporting, reconciles data across systems, and maps errors directly to regulatory rules, helping firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 30 firms worldwide, the platform is scalable, proven, and … designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services across Risk & Compliance (including Transaction Reporting and Operational Resilience), ESG, Strategy, Data, and Operations. Unlike larger consultancies, we embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch in More ❯
slough, south east england, united kingdom Hybrid / WFH Options
Novatus Global
Novatus Global is a Series B scale-up RegTech SaaS provider and boutique advisory firm, helping financial institutions manage their most complex regulatory requirements. We combine deep consulting expertise with cutting-edge SaaS solutions, enabling clients to strengthen compliance, enhance resilience, and drive sustainable growth. Our flagship SaaS platform, En:ACT (short for Enabling Accurate Compliance in … Transaction reporting), is a market-leading solution for regulatory transaction reporting and reconciliation across global regimes. En:ACT automates reporting, reconciles data across systems, and maps errors directly to regulatory rules, helping firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 30 firms worldwide, the platform is scalable, proven, and … designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services across Risk & Compliance (including Transaction Reporting and Operational Resilience), ESG, Strategy, Data, and Operations. Unlike larger consultancies, we embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch in More ❯
london (city of london), south east england, united kingdom Hybrid / WFH Options
Novatus Global
Novatus Global is a Series B scale-up RegTech SaaS provider and boutique advisory firm, helping financial institutions manage their most complex regulatory requirements. We combine deep consulting expertise with cutting-edge SaaS solutions, enabling clients to strengthen compliance, enhance resilience, and drive sustainable growth. Our flagship SaaS platform, En:ACT (short for Enabling Accurate Compliance in … Transaction reporting), is a market-leading solution for regulatory transaction reporting and reconciliation across global regimes. En:ACT automates reporting, reconciles data across systems, and maps errors directly to regulatory rules, helping firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 30 firms worldwide, the platform is scalable, proven, and … designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services across Risk & Compliance (including Transaction Reporting and Operational Resilience), ESG, Strategy, Data, and Operations. Unlike larger consultancies, we embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch in More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Novatus Global
Novatus Global is a Series B scale-up RegTech SaaS provider and boutique advisory firm, helping financial institutions manage their most complex regulatory requirements. We combine deep consulting expertise with cutting-edge SaaS solutions, enabling clients to strengthen compliance, enhance resilience, and drive sustainable growth. Our flagship SaaS platform, En:ACT (short for Enabling A ccurate Compliance in Transaction reporting ), is a market-leading solution for regulatory transaction reporting and reconciliation across global regimes. En:ACT automates reporting, reconciles data across systems, and maps errors directly to regulatory rules, helping firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 30 firms worldwide, the platform is scalable … proven, and designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services across Risk & Compliance (including Transaction Reporting and Operational Resilience), ESG, Strategy, Data, and Operations. Unlike larger consultancies, we embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch More ❯
Novatus Global is a Series B scale-up RegTech SaaS provider and boutique advisory firm, helping financial institutions manage their most complex regulatory requirements. We combine deep consulting expertise with cutting-edge SaaS solutions, enabling clients to strengthen compliance, enhance resilience, and drive sustainable growth. Our flagship SaaS platform, En:ACT (short for Enabling A ccurate Compliance in Transaction reporting ), is a market-leading solution for regulatory transaction reporting and reconciliation across global regimes. En:ACT automates reporting, reconciles data across systems, and maps errors directly to regulatory rules, helping firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 30 firms worldwide, the platform is scalable … proven, and designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services across Risk & Compliance (including Transaction Reporting and Operational Resilience), ESG, Strategy, Data, and Operations. Unlike larger consultancies, we embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch More ❯
A leading financial institution is currently seeking a Regulatory Business Analyst and Product Owner to join their London-based Finance team . This role will support the delivery of regulatory change programmes and automation initiatives, with a focus on prudential reporting and compliance across multiple jurisdictions. Job Details:Start date: ASAP Duration: Initial 12 months Rate … 795pd Inside IR35 via Umbrella Location: London Hybrid: 4 days in the office, 1 day remote Key Requirements: Proven experience leading and delivering regulatorycompliance programmes/projects, within a financial institution. Strong understanding of Basel III, UK Basel 3.1, CRD V/VI, CRR, IFR , and regulatory reporting requirements. Experience working in a reporting or control More ❯
business goals. Develop and maintain programme roadmaps, milestone plans, and risk registers; manage dependencies, issues, and change control processes. Collaborate with cross-functional teams including engineering, product, finance, and compliance to define scope, deliverables, and success metrics. Drive regulatorycompliance and support audit readiness by managing documentation, evidence collation, and stakeholder communication. Facilitate Steering Committee and Executive … to navigate ambiguity and drive clarity. Experience in global delivery models, managing distributed teams across geographies and time zones. Desirable Qualifications: PMP, PRINCE2, or SAFe Agile certification. Experience in regulatory reporting, liquidity stress testing, or Smartstream Real-Time Cash Management is a plus. Exposure to AI/ML-driven innovation in financial services is advantageous. More ❯
Management Analyst to lead the delivery of our data management strategy and ensure confidence in our information assets. This is a key role where your expertise will directly support regulatorycompliance and data integrity across the organisation. As the business lead for Statistical Data Returns (SDRs), youll ensure all regulatory and statutory submissions are accurate, consistent, auditable … work closely with business owners, data stewards, and IS teams to embed trusted, validated, and well-governed data across Stonewater. What were looking for: Experience of managing statutory and regulatory data returns in the social housing sector, specifically SDR. A strong understanding of social housing regulation, data definitions, and compliance standards. Expertise in data governance, BI/MI … frameworks, master data management, metadata, and reference data hierarchies. Proficiency in data validation, cleansing technologies, and lineage tracking. Familiarity with ETL/integration pipelines and validation of outputs for regulatory purposes. Excellent written and verbal communication skills, able to interpret regulatory guidance and influence business stakeholders. Experience of leading forums, stewardship groups, and cross-functional collaboration. A high More ❯
is a cutting-edge startup pioneering generative image and video models. Our team, which invented Stable Diffusion, Stable Video Diffusion, and FLUX.1, is currently seeking a strong security and compliance to work closely with our team in building and implementing world class security and ensuring regulatorycompliance across the business. The Role: Own and evolve the company … wide security strategy across infrastructure, application, and corporate environments Lead our global compliance programs (e.g., ISO 27001, SOC 2) ensuring we meet regulatory and customer trust requirements. Build and maintain relationships with auditors, ensuring smooth audit processes Address AI-specific compliance requirements around data usage, model governance Build a comprehensive security program that scales with our AI … security decisions aligned with business objectives Establish security as a competitive advantage while maintaining development velocity Ideal Experience: 5+ years of experience in security roles (Security Officer, Security Engineer, Compliance & Security Manager) Deep understanding of infrastructure security, application security, and cloud security Experience performing security operations or investigations involving large scale Kubernetes environments Track record of successfully managing complianceMore ❯
new product development and sustaining engineering for life-supporting technologies. As a Senior Systems Engineer, youll be at the forefront of shaping technical architecture, optimising engineering processes, and ensuring regulatorycompliance across complex systemsparticularly in ventilator platforms. This is a fantastic opportunity to make a tangible impact in a regulated, high-reliability environment. Key Responsibilities Lead the definition … system requirements and design documentation. Drive engineering governance activities including Critical Design Reviews (CDRs). Collaborate with V&V teams to support defect triage, issue resolution, and validation. Monitor regulatory changes and ensure compliance with standards such as IEC 60601 and ISO 14971. Conduct risk management activities including FMEA and hazard analysis. Champion continuous improvement across engineering tools More ❯
and champions the idea that the sum is greater than its parts, we want to hear from you. Job Overview As General Counsel, you will oversee all legal and compliance matters at InfoSum, ensuring the company operates within applicable laws and regulations while supporting business objectives. You will provide strategic legal guidance to senior leadership, manage risk, and support … continued growth through sound legal and regulatory practices. This role requires a balance of legal expertise, business acumen, and the ability to navigate a fast-paced, evolving technology landscape. Responsibilities Provide expert legal counsel to senior leadership and key stakeholders on a broad range of legal matters, including corporate governance, regulatorycompliance, commercial contracts, employment law, and … align with business goals and mitigate risk. Ensure InfoSum remains compliant with applicable data privacy laws (e.g., GDPR, CCPA) and industry regulations. Work closely with the Product, Engineering, and Compliance teams to assess and address legal risks associated with new products, features, and partnerships. Lead and manage legal aspects of mergers, acquisitions, and strategic partnerships. Establish and maintain InfoSum More ❯
needed to get the job done, grow with us, and help challenge the status quo. Job Overview: As General Counsel, you will be responsible for overseeing all legal and compliance matters at InfoSum, ensuring that the company operates within the framework of application laws and regulations while supporting business objectives. You will provide strategic legal guidance to senior leadership … manage risk, and ensure InfoSum's continued growth through sound legal and regulatory practices. This role requires a balance of legal expertise, business acumen, and the ability to navigate a fast-paced, evolving technology landscape. Core Responsibilities: Provide expert legal counsel to senior leadership and key stakeholders on a broad range of legal matters, including corporate governance, regulatorycompliance, commercial contracts, employment law, and intellectual property. Oversee all commercial contract negotiations, ensuring terms align with business goals and mitigate risk. Ensure InfoSum remains compliant with applicable data privacy laws (e.g., GDPR, CCPA) and industry regulations. Work closely with the Product, Engineering, and Compliance teams to assess and address legal risks associated with new products, features More ❯
continuously developing relationship with I Squared Capital - a global infrastructure investment fund manager - who acquired Arriva in 2024. We are looking for a Head of Information Security Governance, Risk, Compliance (GRC) & Awareness to join our Information Security Team on a full-time, permanent basis, based from either our Doxford office, Sunderland or Lacon House, London. Reporting to the Group … Chief Information Security Officer, the Head of InfoSec GRC & Awareness is responsible for leading the governance, risk, and compliance functions within the Information Security domain. This role ensures that the organisation maintains a robust security posture through the development and enforcement of policies, standards, and awareness initiatives. The role is pivotal in aligning security practices with business objectives and … regulatory requirements. This position oversees the continuous improvement of security policies and standards, including technical standards, ensuring adherence across the enterprise. The role is accountable for measuring cyber maturity and driving compliance with internal and external requirements. It also includes oversight of the development and implementation of a comprehensive Operational Technology (OT) compliance framework, ensuring alignment with More ❯
GAAP) or International Financial Reporting Standards (IFRS). Financial Processes : In-depth understanding of core financial processes (Budgeting, Forecasting, reporting, Accounts Payable, Accounts Receivable, Tax, Treasury, Risk Management). RegulatoryCompliance Knowledge : They must be well-versed in financial regulations and compliance requirements, ensuring that all financial practices adhere to legal standards. Analytical and Problem-Solving Skills More ❯
GAAP) or International Financial Reporting Standards (IFRS). Financial Processes : In-depth understanding of core financial processes (Budgeting, Forecasting, reporting, Accounts Payable, Accounts Receivable, Tax, Treasury, Risk Management). RegulatoryCompliance Knowledge : They must be well-versed in financial regulations and compliance requirements, ensuring that all financial practices adhere to legal standards. Analytical and Problem-Solving Skills More ❯
GAAP) or International Financial Reporting Standards (IFRS). Financial Processes : In-depth understanding of core financial processes (Budgeting, Forecasting, reporting, Accounts Payable, Accounts Receivable, Tax, Treasury, Risk Management). RegulatoryCompliance Knowledge : They must be well-versed in financial regulations and compliance requirements, ensuring that all financial practices adhere to legal standards. Analytical and Problem-Solving Skills More ❯
GAAP) or International Financial Reporting Standards (IFRS). Financial Processes : In-depth understanding of core financial processes (Budgeting, Forecasting, reporting, Accounts Payable, Accounts Receivable, Tax, Treasury, Risk Management). RegulatoryCompliance Knowledge : They must be well-versed in financial regulations and compliance requirements, ensuring that all financial practices adhere to legal standards. Analytical and Problem-Solving Skills More ❯