real problems. After your successful graduation from the Product Academy, you will transition into a full-time member of the Wise Product team! Job Description About the Third Party Risk Senior Lead: The Third Party Risk Senior Lead aligns into the wider Third Party Risk Team, and is responsible for leading and partnering with Internal Wise teams … Third Parties, Banking Services and IntraGroup Arrangements. This senior position involves strategizing, implementing, and overseeing the TPRM program in alignment with industry standards and regulatory expectations. The Third Party Risk Senior Lead contributes to developing, maintaining, and enhancing the comprehensive TPRM framework and policies to ensure alignment with industry best practices, regulatory requirements, and the Wise's Enterprise Risk management framework. This role involves leading and growing both global and regional specific resources, providing strategic support, and fostering a culture of third-party risk awareness throughout the organisation. The Senior Lead needs to work in close coordination with the rest of the TPRM Leadership team, and the Third Party Management team at large. The Senior Lead provides More ❯
Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management. As a Tech Risk & Controls Lead in Cybersecurity and Technology Controls, you will be responsible for identifying and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise … regulatory, legal, and industry standards. By partnering with stakeholders such as Product Owners, Business Control Managers, and Regulators, you will contribute to reporting a comprehensive view of the technology risk posture and its impact on the business. Your advanced knowledge of risk management principles will enable you to drive innovative solutions and manage a diverse team in a … dynamic risk landscape. We are seeking a Regulatory and Industry RiskAssessment Lead with a deep background in audit, regulatory, and industry risk assessments to join our growing Technology Risk and Controls organization. This role will serve as the primary assessment lead, interfacing with internal and external auditors, compliance and risk teams, and More ❯
leading provider of operations management consulting services with a purpose of saving lives and creating a sustainable future. dss + enables companies to build organisational and human capabilities, manage risk, improve operations, achieve sustainability goals and operate more responsibly. By leveraging its DuPont heritage, deep industry and management expertise and diverse team, dss + consultants are on the ground … required to make their vision a reality, in a practical actionable way. What will you do? As a Senior Operations Consultant with expertise on Process Hazard Analysis (PHA) and RiskAssessment & Management, you will lead specific workstreams within a wider Process Safety Management (PSM)/Operational Risk Management (ORM) transformation program, aiming at identifying, designing, and implementing … effective solutions within the area of expertise. You will provide subject matter expertise and lead project teams to help clients establishing and implementing robust RiskAssessment and Process Hazard Analysis programs and, in particular, building organizational capabilities to sustain performance. The ideal candidate must have strong expertise and proven experience in PHA and RiskAssessment Programs More ❯
a Cyber Audit AVP where you will collaborate with cross-functional teams to provide independent and reliable Cyber Security audit assurance to executive management and the Board on governance, risk management, and control effectiveness. In this role, you will contribute to audit planning and execution, riskassessment, control evaluation, and issue resolution. You’ll deliver high-quality … audit observations and support the development of actionable recommendations to improve business processes. To Be Successful You Should Have Experience With Below Risk and control assessment experience (within an audit or control function responsible for testing driven assurance) covering Cyber Security. Experience in developing and executing assurance testing approaches in some of the following areas: data security (including … cryptography), security configuration, network security, cyber incident response, vulnerability management, cyber threat management, information risk management, data leakage protection, identity & access management, cyber resilience. Knowledge of new and emerging technology, cyber security, and cyber resilience risks. Relevant professional qualifications (e.g. CISA, CISM, CISSP or other relevant technical qualification; and/or relevant graduate degree). Practical understanding of relevant More ❯
systems within the private credit sector. This senior role plays as an interlink between business operations and technology, with the ultimate goal to enhance investment decision-making, portfolio management, riskassessment, and operational efficiency. The ideal candidate will have a promising career development and growth. Responsibilities: Monitor industry trends, evaluate competitor offerings, and stay abreast of regulatory changes … functionalities that will enhance business processes and systems, assess the impact of changes, and work with IT colleagues on technical solution design. Work in strategic contact with investment teams, risk managers, business leaders, and operations teams to identify their needs and translate them into actionable requirements. Simplify the private credit platform as much as possible while ensuring it is … in private credit, asset management, or financial services, with a focus on technology platforms and operations. Technical Proficiency: Hands-on experience with loan origination systems, portfolio management tools, or risk management platforms (e.g., LoanIQ, WSO Web). Industry Knowledge: Detailed understanding of the operational, financial, and legal requirements of private credit funds, including closed-ended funds, semi-liquid funds More ❯
systems within the private credit sector. This senior role plays as an interlink between business operations and technology, with the ultimate goal to enhance investment decision-making, portfolio management, riskassessment, and operational efficiency. The ideal candidate will have a promising career development and growth. Responsibilities: Monitor industry trends, evaluate competitor offerings, and stay abreast of regulatory changes … functionalities that will enhance business processes and systems, assess the impact of changes, and work with IT colleagues on technical solution design. Work in strategic contact with investment teams, risk managers, business leaders, and operations teams to identify their needs and translate them into actionable requirements. Simplify the private credit platform as much as possible while ensuring it is … in private credit, asset management, or financial services, with a focus on technology platforms and operations. Technical Proficiency: Hands-on experience with loan origination systems, portfolio management tools, or risk management platforms (e.g., LoanIQ, WSO Web). Industry Knowledge: Detailed understanding of the operational, financial, and legal requirements of private credit funds, including closed-ended funds, semi-liquid funds More ❯
the International Consumer Bank, you will be part of a flat-structure organization. You will lead and build an enhanced control framework, supporting a continuous and integrated approach to risk assessment. Together, we ensure top-down risk analysis, real-time control issue detection, escalation, root cause analysis, and remediation. Job Responsibilities: Design and implement control frameworks to ensure … compliance with regulatory requirements and internal policies. Collaborate with Product business stakeholders to identify potential risks and develop mitigation strategies. Conduct comprehensive risk assessments for product development and change initiatives. Monitor and evaluate the effectiveness of existing controls, recommending improvements as necessary. Provide training and guidance on control processes and risk management practices. Contribute to the Compliance and … Operational Risk Evaluation (CORE) program. Partner with control colleagues across the firm to establish and maintain business relationships. Support consistent operational risk practices and control programs. Review, analyze, and manage program-related data and key metrics. Contribute to cross-departmental initiatives like awareness programs and trainings. Required Qualifications, Capabilities, and Skills: Minimum 3 years of experience in Operational More ❯
systems within the private credit sector. This senior role plays as an interlink between business operations and technology, with the ultimate goal to enhance investment decision-making, portfolio management, riskassessment, and operational efficiency. The ideal candidate will have a promising career development and growth. Responsibilities: Monitor industry trends, evaluate competitor offerings, and stay abreast of regulatory changes … functionalities that will enhance business processes and systems, assess the impact of changes, and work with IT colleagues on technical solution design. Work in strategic contact with investment teams, risk managers, business leaders, and operations teams to identify their needs and translate them into actionable requirements. Simplify the private credit platform as much as possible while ensuring it is … in private credit, asset management, or financial services, with a focus on technology platforms and operations. Technical Proficiency: Hands-on experience with loan origination systems, portfolio management tools, or risk management platforms (e.g., LoanIQ, WSO Web). Industry Knowledge: Detailed understanding of the operational, financial, and legal requirements of private credit funds, including closed-ended funds, semi-liquid funds More ❯
deliver greener and smarter rail solutions. About the team The successful candidate will be joining the Fleet function, a small multi-disciplinary team that supports corporate and project governance, risk management and audits of Train Operating Companies, suppliers and internal Porterbrook processes. The team is part of the Operations Directorate reporting to the Chief Operating Officer. Key Responsibilities Role … security best practice. Responsibilities Specific Management of the Fleet cyber security strategy in line with TS 50701 & IEC 62443-3-2 Introduce, then keep updated, a cyber security baseline assessment for each fleet platform Cyber security riskassessment of asset modifications Promotion of cyber security best practice throughout our engineering teams Supporting our customers with their cyber … resilient to cyber failure/compromise, working in collaboration with the supply chain Ensure that the Management of Change Procedure and all changes take full account of cyber security risk Determine Fleet cyber security requirements for both new train procurement and existing fleet upgrades General Engagement with industry bodies on emerging cyber security guidance Supplier/product assessmentMore ❯
so they are always in search of the best people to join our ever-growing talented team. Responsibilities: Design and maintain a robust technology control testing framework aligned with risk management standards (e.g., NIST, ISO 27001, COBIT, ITIL). Develop and update testing methodologies, ensuring they address key risks related to IT infrastructure, cybersecurity, cloud services, and software development. … Establish and maintain control testing policies and procedures that align with regulatory and internal governance requirements. Ensure the control testing framework integrates seamlessly with the broader Operational Risk Management Framework (ORMF). Maintain a comprehensive control library, mapping controls to risks and business objectives. Plan and execute detailed control testing activities across IT operations, systems, and processes, including: Cybersecurity … e.g., GDPR compliance, data backups). Incident management processes and disaster recovery testing. Test both the design and operating effectiveness of IT controls. Prioritise control testing activities based on risk assessments, focusing on high-risk areas such as payment systems, customer data protection, and regulatory reporting. Document and communicate control deficiencies to relevant stakeholders. Work with technology teams More ❯
Rochester, England, United Kingdom Hybrid / WFH Options
Locke and McCloud
want to hear from you. Key Responsibilities: Develop and implement security solutions for Microsoft Azure and M365 environments. Ensure compliance with regulatory requirements, including PCI and FCA standards. Conduct risk assessments using established frameworks and methodologies. Configure and manage security-related controls, systems, and applications. Lead and manage compliance and security programs across technical infrastructure and applications. Respond effectively … controls, and compliance programs. Preferred certifications: Microsoft Azure (AZ-500), M365 (MS-500), CISSP, CCSP, or CompTIA Security+. Vendor certifications for firewall, antivirus, and networking solutions. Strong understanding of riskassessment frameworks and methodologies. Technical expertise in security tools and applications. Excellent analytical and problem-solving skills. Proactive, tenacious, and team-oriented approach. Strong interpersonal skills to build More ❯
Tunbridge Wells, England, United Kingdom Hybrid / WFH Options
Locke and McCloud
want to hear from you. Key Responsibilities: Develop and implement security solutions for Microsoft Azure and M365 environments. Ensure compliance with regulatory requirements, including PCI and FCA standards. Conduct risk assessments using established frameworks and methodologies. Configure and manage security-related controls, systems, and applications. Lead and manage compliance and security programs across technical infrastructure and applications. Respond effectively … controls, and compliance programs. Preferred certifications: Microsoft Azure (AZ-500), M365 (MS-500), CISSP, CCSP, or CompTIA Security+. Vendor certifications for firewall, antivirus, and networking solutions. Strong understanding of riskassessment frameworks and methodologies. Technical expertise in security tools and applications. Excellent analytical and problem-solving skills. Proactive, tenacious, and team-oriented approach. Strong interpersonal skills to build More ❯
Darlington, England, United Kingdom Hybrid / WFH Options
Gespreksleider Jacobs
department. They lead the security engagement for all projects ensuring that the department's security design standards are adhered to. This challenging role incorporates aspects of security architecture, cyber risk management and cyber security policy. As a Principal Security Architect, you will also provide an 'out-reach' to advise on security requirements and solutions to enable technical teams to … DBT to identify new opportunities for exploiting emerging technologies and support the development of architectures, patterns and approaches to support their safe use in accordance with the department's risk appetites. At all times your goal is to help ensure delivery of systems that meet the desired business outcomes with security decisions and controls being proportionate to the risk appetite. You will build effective partnerships with diverse teams across multiple locations and technologies and effectively communicate security and risk implications across technical and non-technical stakeholders. You will manage the Security Architecture team, covering critical review architecture referencing NCSC (National Cyber Security Centre ) guidelines and to guide and mentor others throughout DBT. Main responsibilities You will: Interact More ❯
Birmingham, England, United Kingdom Hybrid / WFH Options
Gespreksleider Jacobs
department. They lead the security engagement for all projects ensuring that the department's security design standards are adhered to. This challenging role incorporates aspects of security architecture, cyber risk management and cyber security policy. As a Principal Security Architect, you will also provide an 'out-reach' to advise on security requirements and solutions to enable technical teams to … DBT to identify new opportunities for exploiting emerging technologies and support the development of architectures, patterns and approaches to support their safe use in accordance with the department's risk appetites. At all times your goal is to help ensure delivery of systems that meet the desired business outcomes with security decisions and controls being proportionate to the risk appetite. You will build effective partnerships with diverse teams across multiple locations and technologies and effectively communicate security and risk implications across technical and non-technical stakeholders. You will manage the Security Architecture team, covering critical review architecture referencing NCSC (National Cyber Security Centre ) guidelines and to guide and mentor others throughout DBT. Main responsibilities You will: Interact More ❯
Maidstone, England, United Kingdom Hybrid / WFH Options
Locke and McCloud
want to hear from you. Key Responsibilities: Develop and implement security solutions for Microsoft Azure and M365 environments. Ensure compliance with regulatory requirements, including PCI and FCA standards. Conduct risk assessments using established frameworks and methodologies. Configure and manage security-related controls, systems, and applications. Lead and manage compliance and security programs across technical infrastructure and applications. Respond effectively … controls, and compliance programs. Preferred certifications: Microsoft Azure (AZ-500), M365 (MS-500), CISSP, CCSP, or CompTIA Security+. Vendor certifications for firewall, antivirus, and networking solutions. Strong understanding of riskassessment frameworks and methodologies. Technical expertise in security tools and applications. Excellent analytical and problem-solving skills. Proactive, tenacious, and team-oriented approach. Strong interpersonal skills to build More ❯
implement remedial actions and improvements • Produce and maintain relevant regulatory compliance policies and departmental procedures • Strengthen the compliance infrastructure within the UK business to ensure the business makes informed risk-based decisions regarding new opportunities, markets, local initiatives and product and service offerings and that appropriate compliance processes and controls are developed, documented and implemented • Review and assess new … in line with required deadlines • Experience of maintaining regulatory status with periodic filings and event-driven filings, e.g., change of control and/or incident updates • Contribute to annual riskassessment and various risk management activities • Produce regular MI for management and other internal stakeholders • Act as an escalation point for regulatory compliance queries from other business … Self-starter who is flexible and able to work in a matrix management environment • Strong business acumen and solutions orientated who can work independently • Ability to demonstrate thought leadership • Risk management and internal controls focused • Must be able to work on complex issues of significant importance • Ability to juggle substantial competing demands and adapt to evolving priorities a must More ❯
the second line’s perspective to support the compliant growth of Wise Platform’s business. Advising on scalable solutions to enhance Wise Platform’s onboarding and ongoing monitoring processes. Risk Management Review global MI and KRIs for Wise platform and perform trend analysis to identify emerging risks. Review and approve product risk assessments from a group perspective and … coordinate regional reviews as needed to provide a single feedback from second line compliance. Create and review Wise Platform risk frameworks, including onboarding flows, partner risk assessments models, ongoing monitoring frameworks and risk tolerance frameworks and thresholds aligning to Wise’s overall risk strategy and across all Wise Platform integration types. Financial crime advisory to first … issues) and collaborate closely with all impacted regions on the remediation plan and second line review confirming effective remediation. Document and maintain issues and incidents in Audit Board with riskassessment, remediation plan and status updates. Regional Collaboration Provide support to regional Wise Platform Compliance Officers in respect of External stakeholder management (e.g. Banking Partners); and Regulatory, audit More ❯
Birmingham, England, United Kingdom Hybrid / WFH Options
Prior Labs
Job Description: Job Title Information Technology (IT) Auditor - Investment Banking Location Birmingham Corporate Title Assistant Vice President The Group Audit (GA) function takes a proactive, risk-based and independent approach to assist the Bank's business and infrastructure functions to identify key control weaknesses. You will be joining the global GA Investment Banking Application & Innovation Technology team reporting into … the effectiveness of internal IT controls supporting Innovation and Investment Banking areas including Fixed Income & Currencies, Electronic Trading, Origination and Advisory in accordance with GA methodology and the established riskassessment framework Conduct technology assessments, continuous monitoring and complete all work assignments on a timely basis - including planned audits, finding validations, and ad-hoc projects Prepare, coordinate and … and audit management, facilitate tracking and closure validation of findings Stay abreast of business/industry changes and their effect on the team's audit plan, GA methodology and risk assessments Pro-actively develop and maintain professional working relationships with colleagues, the business and respective support areas. Contribute to departmental projects and initiatives Your skills and experience Experience in More ❯
you will be accountable for the planning, execution, and delivery of the portfolio of projects within one of three product lines (Control of Work, Master Data Management or Advanced RiskAssessment). You will acquire a deep understanding of Sphera’s systems and capabilities to provide solutions to a variety of business and technical challenges. This position is … Programme Manager is the single escalation point and overall accountable person for their assigned portfolio of projects. This role reports directly into the VP of Client Services for Operational Risk Management, and can require reporting and communication through to Sphera’s Executive Leadership Team on occasion. The Portfolio/Programme Manager, along with other colleagues and peers, will also … policies and procedures; instil continuous improvement practices on teams. Maintain an attitude of commitment and exhibit responsibility for the needs of portfolio projects and external customers. Identify risks, perform risk analysis, effectively manage risks; proactively raise prioritization and scheduling trade-off decisions, escalating and identifying alternate options as appropriate; establish & follow Risk Management processes. Work with other Portfolio More ❯
products and services in almost 100 countries, united by a promise to be forever caring. Our solutions provide a range of benefits, from infection prevention and protection of at-risk skin, to improved patient outcomes and reduced care costs. Convatec's revenues in 2023 were over $2 billion. The company is a constituent of the FTSE 100 Index (LSE … implement improvements in key processes for greater efficiency and data-driven decision making. Complaint Management: Support execution and maintain procedures for complaint activities such as product investigations, ad hoc risk reviews, return process, intake process and product monitoring across all franchises. Execute quality engineering activities for all post-market product surveillance, including collection, analysis, and evaluation of product safety … processes as needed. Present complaint trend analyses to stakeholders in a timely and accurate manner while supporting root cause investigations. Design & Development Support: Maintain a current understanding of product risk profiles and reportable product harms/malfunctions. Provide risk-based input to project teams and participate in design control activities, including failure mode identification and historical complaint analysis. More ❯
for AI/ML models, data pipelines, and related infrastructure. Develop security policies and procedures specific to AI systems. Evaluate and select security tools and technologies for AI environments. RiskAssessment and Management: Conduct thorough risk assessments to identify vulnerabilities and threats specific to AI systems. Develop and implement risk mitigation strategies for AI-related security More ❯
existing portfolio, are designed, implemented, and tested with robust security controls from the inception phase. The position involves managing multi-functional teams, driving security design review initiatives (including project risk assessments, control design reviews, and penetration testing), and ensuring adherence to security standards in various development environments. The ideal candidate must demonstrate exceptional business insight, stakeholder management skills, and … ACCOUNTABILITIES Leadership and Management: Lead and manage a team of experienced security design assurance professionals. Provide coaching and direction to senior managers and team members throughout the lifecycle, including risk mitigation discussions and service portfolio improvements. Build relationships and collaborate with senior leaders and professionals across the group and in operating companies to provide quality security services. Collaborate with … solutions meet security standards, baselines, and architecture patterns, and follow relevant regulations. Identify control gaps and facilitate discussions with product/business owners to implement interim compensatory measures and risk management processes. Manage DevSecOps pipelines, including risk assessments, triaging, tool onboarding, developer feedback, and ongoing service management to ensure continuous delivery. Oversee multi-cloud build-out/operations More ❯
requirements. Provide leadership and direction to the information security team. Stay abreast of industry best practices, emerging threats, and regulatory changes, specifically those relevant to the UK financial sector. Risk Management: Conduct regular risk assessments to identify and evaluate potential security threats, taking into account the specific risks faced by UK financial institutions. Develop and implement risk … compliance with relevant industry standards (e.g., PCI DSS, ISO 27001) and UK-specific guidelines. Conduct security awareness training for employees, tailored to the UK financial services context. Third-Party Risk Management: Assess and manage security risks associated with third-party vendors and service providers, ensuring compliance with UK data protection and outsourcing regulations. Ensure vendors comply with security requirements … and managing security posture in cloud environments. Strong analytical and problem-solving abilities. Deep understanding of security technologies and architecture, including cloud security and AWS-specific services. Knowledge of riskassessment methodologies and incident response procedures, tailored to the UK financial services context. Ability to develop and implement security policies and procedures in line with UK regulations. Experience More ❯
Liverpool, England, United Kingdom Hybrid / WFH Options
Acorn Group
Monday to Friday, 37.5 hours per week - 9:00 AM – 5:30 PM What you will be doing: Work with all parties across the business to identify and assess risk and ensure mitigations are tracked to completion. Support the development and maintenance of information security policies, standards and procedures in line with regulatory frameworks and industry standards. Support third … party risk management processes. Work with Security Operations and IT teams to provide oversight of vulnerability assessments and remediation activities. Conduct security architecture reviews for new systems and services. Evaluate technical security controls and recommending improvements. Support the implementation of security tools and technologies. Provide oversight of the security incident management process. Provide security metrics for interested parties at … within all levels of the Group. Provide support for internal and external security audits. What we are looking for: Minimum 3 years' experience in information security roles. Experience with riskassessment methodologies. Excellent analytical and problem-solving skills with attention to detail. Strong communication skills with the ability to explain complex security concepts to non-technical stakeholders. Knowledge More ❯
fifty years and through innovation, interpretation, and professional insight, Verisk has replaced uncertainty with precision to unlock opportunities that deliver significant and demonstrable impact. From our historic roots in riskassessment, we’ve grown to provide analytic insights that help transform industries focused on some of the world’s most critical areas. Today, the insurance industry relies on … what’s possible, embracing challenges, and pushing boundaries Underwriting Solutions — provides underwriting and rating solutions for auto and property, general liability, and excess and surplus to assess and price risk with speed and precision Claims Solutions — supports end-to-end claims handling with analytic and automation tools that streamline workflow, improve claims management, and support better customer experiences Property … offers property estimation software and tools for professionals in estimating all phases of building and repair to make day-to-day workflows the most efficient Extreme Event Solutions — provides risk modeling solutions to help individuals, businesses, and society become more resilient to extreme events. Specialty Business Solutions — provides an integrated suite of software for full end-to-end management More ❯