1 to 25 of 3,633 Risk Management Jobs in England

across a portfolio of government-facing projects delivered by a leading consultancy. This role is ideal for professionals with experience in Information Assurance, Governance, Risk, Compliance, Quality Assurance, or Operational Resilience who are passionate about maintaining high standards of security, compliance, quality, and resilience within complex and regulated environments. … supporting assurance programmes, monitoring compliance with policies and standards, maintaining governance controls, and driving continuous improvement initiatives. Working closely with delivery, security, operations, risk, and quality teams, you will help ensure services remain compliant, resilient, and aligned to client and organisational objectives. The successful candidate will be expected ...

network, cloud, endpoint and application layers Lead security architecture reviews and technical security assessments Develop security standards, reference architectures and design patterns Identity & Access Management Architect and implement enterprise IAM, MFA and Single Sign-On solutions Design Conditional Access and Privileged Access Management (PAM) capabilities Lead identity governance … administration initiatives Develop secure authentication and authorisation frameworks Ensure access management aligns with Zero Trust and least privilege principles Cyber Threat & Risk Management Assess cyber threat landscapes and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat ...

Support governance activities through architectural assurance and security guidance. Conduct design reviews and provide recommendations relating to security risks and control effectiveness. Security Controls & Risk Management Define, document, and oversee the implementation of cloud security controls. Identify security risks within cloud environments and recommend mitigation strategies. Conduct security … assessments and architecture reviews to validate security and compliance requirements. Support threat modelling activities and risk assessments for new and existing services. Cloud Security Operations Support the transition of cloud solutions into operational security environments. Ensure operational teams have the controls, monitoring capabilities, and processes required to manage secure ...

security technologies, and ensure alignment with industry frameworks such as NIST 800‐207. The role requires extensive experience in security architecture, cloud security, identity management, and enterprise risk management, combined with strong stakeholder engagement and leadership skills to drive security transformation programmes across the organisation. Qualification … Certified Information, Systems Security Professional (CISSP), and/or Information Systems Security Architecture Professional (ISSAP) CESG Certified Cyber Professional (CCP) in Security Architecture or Risk Management Additional cloud security qualifications such as Microsoft Azure, AWS, GoogleAdvanced degree in a relevant field is a plus, CISSP, CISM, CISA ...

technologies, Agile delivery methodologies, and enterprise-scale technology implementations. This role requires a commercially aware technology leader with strong programme governance experience, excellent stakeholder management skills, and the ability to build trusted relationships with clients while supporting the growth of the consultancy. Key Responsibilities Lead the delivery of multiple … cross-functional technical teams. Strong knowledge of Agile, Scrum, PRINCE2 and hybrid delivery methodologies. Experience managing project budgets, forecasting and financial reporting. Strong stakeholder management skills with the ability to influence senior executives. Strong programme and project management experience with expertise in governance, planning, budgeting, forecasting, resource management ...

areEnterprise Technology Risk Management (ETRM) organization is part of Enterprise Risk Management organization in State Street Corporation (SSC). ETRM as Second Line of Defence (SLOD) is responsible for thought leadership, oversight, monitoring, and advisement around the discovery and remediation of Technology Risk and Cybersecurity … Risk. Who we are looking forWe seek a seasoned Technology and Cyber Risk Management Leader with over 10 years of experience in the financial services or technology sectors. The role will report to the EMEA Head of Enterprise Technology Risk Management. The ideal candidate will excel ...

diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout … levels of the client organization, generating results that allow our clients to thrive. What You'll Do As the Global Digital Enterprise Risk Manager, you will help strengthen BCG's Enterprise Risk Management (ERM) program with a primary focus on IT Services & Cyber Risk and Data ...

empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. The Threat and Vulnerability Management Team Lead is responsible for defining, developing, and leading the strategic direction for safeguarding the organisation's infrastructure and applications. This is achieved … Solutions (DES) department of the Technology Division. The role is part of the Digital Engineering Services & Solutions (DES) department, which encompasses Infrastructure and Service Management across EMEA Bank, International Securities, and the 15+ countries in which these entities operate. The position is responsible for leading the Threat and Vulnerability ...

Cyber Security Specialist to support the protection of the organisation's information assets, systems, and services. The role will work across security operations, governance, risk management, compliance, incident response, and security awareness to help maintain a robust and resilient security posture. The successful candidate will collaborate with … business stakeholders, third-party suppliers, and senior management to identify and mitigate cyber risks while ensuring compliance with relevant standards and regulatory requirements. What you'll do: Security Operations Monitor security alerts and events from security monitoring platforms and managed SOC providers. Investigate and respond to security incidents, coordinating ...

Cyber Security Specialist to support the protection of the organisation's information assets, systems, and services. The role will work across security operations, governance, risk management, compliance, incident response, and security awareness to help maintain a robust and resilient security posture. What you'll do: Security Operations Monitor … events from security monitoring platforms and managed SOC providers. Investigate and respond to security incidents, coordinating containment, eradication, and recovery activities. Support vulnerability management activities, including remediation tracking and reporting. Assist with threat intelligence gathering and analysis. Governance, Risk & Compliance Support the maintenance and continual improvement ...

cyber controls are consistently designed, implemented, and operating effectively across all regions, legal entities, and technology platforms. Working closely with the Group CISO, Technology, Risk, Compliance, cyber and IT service areas and Audit functions, this role provides assurance that Apex’s technology control environment meets regulatory expectations, supports operational … entities, internal and external. Key Responsibilities Technology Control Framework & Strategy Define and maintain Apex’s global technology control framework, aligned to the Group’s risk appetite, cyber strategy, Apex Gold Standard and regulatory obligations. Establish clear control standards, policies, and minimum requirements covering infrastructure, applications, cloud, identity, data ...

technological partner for the core business operations of its clients worldwide. It stands at the forefront of key sectors including Transport, Defence, Air Traffic Management and Space, alongside advanced Information Technology services delivered through Minsait, and cutting-edge capabilities in Sovereign AI, Cybersecurity, and Cyberdefence via IndraMind. The company … global benchmark in innovative transportation and mobility solutions. It is recognised as one of the world's top three companies in public transportation management systems. Indra's technology supports the daily journeys of over 78 million people, helping to reduce more than 10 million tonnes of CO2 emissions annually ...

security standards, reference architectures and design patternsIdentity & Access ManagementArchitect and implement enterprise IAM, MFA and Single Sign-On solutionsDesign Conditional Access and Privileged Access Management (PAM) capabilitiesLead identity governance and administration initiativesDevelop secure authentication and authorisation frameworksEnsure access management aligns with Zero Trust and least privilege principlesCyber Threat … Risk ManagementAssess cyber threat landscapes and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDevelop cyber resilience and business continuity frameworksCloud & Security SolutionsDesign cloud security architectures across Azure ...

modernization blueprints, and technology standards. Ensure alignment between business capabilities, operating models, and technology platforms. Guide large-scale modernization initiatives including ERP, CRM, asset management, and operational platforms. Drive interoperability between IT and OT environments. Enterprise Applications TransformationLead modernization strategies across enterprise platforms including: SAP (S/4HANA … Oracle Utilities,SalesforceMicrosoft DynamicsServiceNow Work & Asset Management platformsCustomer Information Systems (CIS)Enterprise Asset Management (EAM)Grid & Operations platformsDrive application rationalization and modernization initiatives. Establish API-first and event-driven integration strategies. Promote composable architecture and platform engineering practices. Cloud Native & Platform EngineeringDefine cloud transformation strategies leveraging AWS, Microsoft ...

manages a large and complex portfolio of third-party service providers, managed service arrangements, and intra-company service agreements. The Vendor Performance, Governance and Risk Management function is responsible for ensuring these relationships are governed effectively, aligned to business objectives, managed within risk appetite, and compliant with … internal policies, contractual obligations, and regulatory requirements. This role works closely with Technology Delivery teams, Global Procurement Services, Third Party Risk Management (TPRM), Risk, Compliance, Legal, Audit, Finance, and vendor partners. The Officer role provides operational, administrative, and governance support across risk management, outsourcing oversight ...

summary The Assistant Director of Cyber Security, Governance, Compliance & Risk provides senior leadership and strategic direction for the organisation's cyber security function. The post holder is accountable for developing, implementing, and continuously improving a comprehensive, outcome-focused cyber security programme that protects the confidentiality, integrity, availability, safety, privacy … organisation and wider GM system. As the lead expert and highest point of escalation, you will own the end-to-end cyber governance, risk management, and compliance agenda. This includes formulating and maintaining the overarching cyber strategy, policies, standards, and control frameworks (aligned to short-, medium-, and long ...

system development and operational lifecycle, ensuring security requirements are identified and implemented from concept through disposal. Conduct security architecture reviews, threat assessments, and technical risk analysis for classified environments. Support the development and maintenance of system security documentation, security architectures, and security operating procedures. Lead and coordinate system accreditation … activities for classified and sensitive systems. Develop and maintain accreditation artefacts including Risk Management and Accreditation Documentation Sets (RMADS), Security Cases, Security Management Plans, and supporting evidence. Work with Accreditors, Security Controllers, and customer security representatives to obtain and maintain Authority to Operate (ATO) approvals. Ensure continued ...

system development and operational lifecycle, ensuring security requirements are identified and implemented from concept through disposal. Conduct security architecture reviews, threat assessments, and technical risk analysis for classified environments. Support the development and maintenance of system security documentation, security architectures, and security operating procedures. Lead and coordinate system accreditation … activities for classified and sensitive systems. Develop and maintain accreditation artefacts including Risk Management and Accreditation Documentation Sets (RMADS), Security Cases, Security Management Plans, and supporting evidence. Work with Accreditors, Security Controllers, and customer security representatives to obtain and maintain Authority to Operate (ATO) approvals. Ensure continued ...

Manager is responsible for the overall execution of Trayport’s Information Security Governance, Risk and Compliance programme under the guidance of the Head of Information Security. The role will primarily entail managing policies & standards incl. Training & Awareness deliverables, performing risk assessments, tracking of security risks of the Information … Security Office and organisation as well as maintaining and managing the ISO27001 certification and ensuring there is appropriate governance & reporting on outputs and risk posture to stakeholder groups. Primary Responsibilities Execute the UK and EU GRC Strategy, ensuring compliance with GDPR, UK Data Protection Act 2018, and other regional ...

programme implementations, architect integrated defence-in-depth solutions, and ensure compliance with stringent MOD security requirements. This role demands exceptional expertise in security architecture, risk management and defence security standards. Key Responsibilities Security Strategy & Architecture Design holistic security architectures incorporating people, process and technology security Develop enterprise-wide … application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident ...

cyber controls are consistently designed, implemented, and operating effectively across all regions, legal entities, and technology platforms.Working closely with the Group CISO, Technology, Risk, Compliance, cyber and IT service areas and Audit functions, this role provides assurance that Apex’s technology control environment meets regulatory expectations, supports operational resilience … entities, internal and external.**Key Responsibilities****Technology Control Framework & Strategy*** Define and maintain Apex’s global technology control framework, aligned to the Group’s risk appetite, cyber strategy, Apex Gold Standard and regulatory obligations.* Establish clear control standards, policies, and minimum requirements covering infrastructure, applications, cloud, identity, data ...

Manager is responsible for the overall execution of Trayport's Information Security Governance, Risk and Compliance programme under the guidance of the Head of Information Security. The role will primarily entail managing policies & standards incl. Training & Awareness deliverables, performing risk assessments, tracking of security risks of the Information … Security Office and organisation as well as maintaining and managing the ISO27001 certification and ensuring there is appropriate governance & reporting on outputs and risk posture to stakeholder groups. Primary Responsibilities Execute the UK and EU GRC Strategy, ensuring compliance with GDPR, UK Data Protection Act 2018, and other regional ...

solutions that support the firm’s commercial goals by responsibly harnessing artificial intelligence and machine learning to develop new products, improve productivity, and enhance risk management. As a Lead Technical Program Manager at JPMorganChase within CDAO, you will lead complex, cross-functional technology programs that impact experiences across … teams to deliver innovative solutions aligned to strategic goals. Your exceptional communication and influencing skills will foster productive stakeholder relationships, ensuring alignment and effective risk management. In this pivotal role, you will also contribute to new policies and processes that shape the future of our technology landscape. Job responsibilities ...

with internal teams across Bridewell. Your core focus will be leading complex data governance, compliance and business transformation programmes, helping clients improve their governance, risk management and information management capabilities. You will provide leadership across the full programme lifecycle, from strategy and roadmap development through to delivery … operating model design, service development, technology implementation and organisational change. Defining strategic roadmaps and implementation plans that enable clients to improve governance, compliance, information management and risk management capabilities. Managing project delivery activities across multiple workstreams, ensuring delivery milestones, risks, dependencies and customer objectives are effectively managed. ...

Trust** (DT) practice focuses on ensuring secure business outcomes for our clients, providing Cybersecurity advisory and transformation consulting in areas such as security strategy, risk management, human risk management, data and identity security, secure intelligent industry, Gen-AI risk, and security operations modernisation.##For this role … Essentials to clients, ensuring their systems and processes meet industry standards and are resilient to threats and tailoring it to our client’s environment, risk profile, and regulatory requirements.* **Generative AI –** Enabling the secure design and adoption of Gen AI for business, IT and/or security functions ...