London, South East, England, United Kingdom Hybrid / WFH Options
Montpellier Resourcing
bonus and benefits Hybrid working available (3 days in the office) Our client, a dynamic and rapidly growing UK-based EMI FinTech Payments firm, is seeking an experienced Enterprise Risk Analyst to support their Head of Risk. This is a focused Enterprise Risk Analyst role dedicated entirely to the Second Line of Defence (2LOD), centred on embedding the … firm’s Governance, Risk, and Compliance (GRC) model. You will be instrumental in the day-to-day operation of the ERM framework, ensuring risk is managed consistently and strategically across the entire business. Duties of the Enterprise Risk Analyst to include: RiskRegister Management: Own the central RiskRegister , ensuring all key risks … Strategic, Financial, Operational, and Compliance) are accurately identified, assessed, and maintained. Risk Assessment Cycle: Facilitate and manage the formal Risk and Control Self-Assessment (RCSA) process across all business units. Control Framework: Maintain and evolve the company’s Risk Control Framework , ensuring controls are effective and aligned with the established risk appetite. Residual Risk Analysis More ❯
New Malden, England, United Kingdom Hybrid / WFH Options
Northrop Grumman UK
have within the community. So, what’s your possible? Salary: £60,000 - £71,000 Opportunity: This is more than just a job; it’s a mission. As the PMO Risk Manager at Northrop Grumman you will be responsible for leading risk management in a portfolio of complex projects delivering technology solutions to UK Defence. In line with departmental … procedures, you will develop, maintain and execute a robust risk management framework, enabling the adoption of risk management best practice across the department’s portfolio to ensure delivery of value to our customers. Our UK Defence business is a Sovereign software and systems centre of excellence. As well as developing and supporting UK wide and internationally deployed multi … Royal Navy. We pioneer – with fierce curiosity, dedication, and innovation, we seek to solve the world’s most challenging problems. Responsibilities: Develop, embed and manage an effective and robust risk management framework Working with Project and Programme Management colleagues to agree and assist with the management of programme, project and portfolio risks, ensuring a holistic risk management strategy More ❯
london, south east england, united kingdom Hybrid / WFH Options
Northrop Grumman UK
have within the community. So, what’s your possible? Salary: £60,000 - £71,000 Opportunity: This is more than just a job; it’s a mission. As the PMO Risk Manager at Northrop Grumman you will be responsible for leading risk management in a portfolio of complex projects delivering technology solutions to UK Defence. In line with departmental … procedures, you will develop, maintain and execute a robust risk management framework, enabling the adoption of risk management best practice across the department’s portfolio to ensure delivery of value to our customers. Our UK Defence business is a Sovereign software and systems centre of excellence. As well as developing and supporting UK wide and internationally deployed multi … Royal Navy. We pioneer – with fierce curiosity, dedication, and innovation, we seek to solve the world’s most challenging problems. Responsibilities: Develop, embed and manage an effective and robust risk management framework Working with Project and Programme Management colleagues to agree and assist with the management of programme, project and portfolio risks, ensuring a holistic risk management strategy More ❯
london (new malden), south east england, united kingdom Hybrid / WFH Options
Northrop Grumman UK
have within the community. So, what’s your possible? Salary: £60,000 - £71,000 Opportunity: This is more than just a job; it’s a mission. As the PMO Risk Manager at Northrop Grumman you will be responsible for leading risk management in a portfolio of complex projects delivering technology solutions to UK Defence. In line with departmental … procedures, you will develop, maintain and execute a robust risk management framework, enabling the adoption of risk management best practice across the department’s portfolio to ensure delivery of value to our customers. Our UK Defence business is a Sovereign software and systems centre of excellence. As well as developing and supporting UK wide and internationally deployed multi … Royal Navy. We pioneer – with fierce curiosity, dedication, and innovation, we seek to solve the world’s most challenging problems. Responsibilities: Develop, embed and manage an effective and robust risk management framework Working with Project and Programme Management colleagues to agree and assist with the management of programme, project and portfolio risks, ensuring a holistic risk management strategy More ❯
in Computer Science, Cybersecurity, or a related field. *Postgraduate qualification in an IT-related subject. *Professional certifications such as CISSP, CompTIA Security+, or equivalent. *Experience with governance frameworks and risk management tools. Key Responsibilities *Operate and maintain security systems including firewalls, antivirus, intrusion detection/prevention, and authentication platforms. *Monitor system logs and network traffic to identify suspicious activity … forensic investigations. *Develop and maintain security protocols, policies, and procedures. *Conduct vulnerability assessments and recommend mitigation strategies. *Deliver cybersecurity awareness training and guidance to staff. *Maintain the information security riskregister and support audit processes. *Collaborate with IT and operational teams to ensure secure system configurations. *Assist in compliance with frameworks such as the Data Security Protection Toolkit. … proud to be an equal opportunities employer. Keywords IT Security Specialist, Cybersecurity Analyst, SOC Analyst, Azure Security, Information Security, Firewalls, Intrusion Detection, Antivirus, ITIL, CISSP, Security Compliance, Vulnerability Management, RiskRegister, Public Sector IT, Hybrid Role, Manchester Jobs, Security Awareness Training More ❯
ISO27001, IT Risk, IT Compliance, IT Controls, IT Audit, Policy. Governance, Security, Surrey area Your new company A specialist organisation in the Health/Medical sector offers hybrid working in this role based in North Surrey area. Your new role You will be working in the Risk team and will design, implement & maintain the Information Security Management System … ISMS) in accordance with ISO27001 in a company that manages highly sensitive data. You will support the firm's governance, addressing areas of risk and supporting plans to address these risks, including the compilation of business continuity plans (BCP). You will work closely with colleagues in IT to enhance the technology & control frameworks regarding information security compliance & cyber … threat security. Risk & Compliance You will lead the development, implementation, and continuous improvement of our Information Security Management System (ISMS) in line with ISO 27001 and other regulatory standards. Assessing security posture, identifying vulnerabilities, and developing mitigation strategies to manage enterprise-wide information security risks. Maintaining and enhancing the organisation's riskregister and heat map, ensuring More ❯
Fetcham, Surrey, United Kingdom Hybrid / WFH Options
Hays Technology
IT Risk and Policy (GRC) Analyst Permanent - Up to 38k + strong benefits Location: Hybrid - Leatherhead Your new company A leading construction and development company in Surrey is currently looking for an IT Risk and Policy (GRC) Analyst to come in and support the existing IT Risk & Policy Manager with the day-to-day tasks involved with … role is full-time, with a hybrid working pattern, usually around 2/3 days a week in the office. Your new role You will be supporting the IT Risk & Policy Manager across a broad variety of work, with the ability to gain a lot of different experience across multiple areas. The Analyst is responsible for managing IT risks … and governance aspects, with a focus on standards and regulations, whilst ensuring collaboration across the business to ensure strong IT practices are put in place. Ensuring that all IT risk and IT audit actions are highlighted, monitored, and escalated where appropriate. Maintaining the suite of IT policies and procedures. Providing support to the Privacy Team in ensuring GDPR compliance. More ❯
Leatherhead, Surrey, South East, United Kingdom Hybrid / WFH Options
Hays
IT Risk and Policy (GRC) Analyst Permanent - Up to £38k + strong benefits Location: Hybrid - Leatherhead Your new company A leading construction and development company in Surrey is currently looking for an IT Risk and Policy (GRC) Analyst to come in and support the existing IT Risk & Policy Manager with the day-to-day tasks involved with … role is full-time, with a hybrid working pattern, usually around 2/3 days a week in the office. Your new role You will be supporting the IT Risk & Policy Manager across a broad variety of work, with the ability to gain a lot of different experience across multiple areas. The Analyst is responsible for managing IT risks … and governance aspects, with a focus on standards and regulations, whilst ensuring collaboration across the business to ensure strong IT practices are put in place. Ensuring that all IT risk and IT audit actions are highlighted, monitored, and escalated where appropriate. Maintaining the suite of IT policies and procedures. Providing support to the Privacy Team in ensuring GDPR compliance. More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Nscale
business units including the senior leadership, corporate, commercial and operational teams to achieve key strategic objectives focusing on growth and operational excellence as well as driving the fundamental governance, risk and compliance frameworks and standards that underpin Nscale’s business. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their … assessments and liaise with teams across the business to ensure these are actioned. You engage with the commercial legal, procurement, security and other teams to ensure proper third party risk management of suppliers and customers including due diligence (DD) and support other members of the team to implement contractual controls (privacy, AI and cyber provisions, DPAs, data transfer compliance … of DSARs, complaints or regulatory enquiries, e.g. from the ICO or other data regulators. You support the Legal & Compliance team on Board and executive reporting. You maintain our functional riskregister, partner with other members of the team to engage with a range of stakeholders on enterprise risk management and provide tactical SME support to key stakeholders More ❯
business units including the senior leadership, corporate, commercial and operational teams to achieve key strategic objectives focusing on growth and operational excellence as well as driving the fundamental governance, risk and compliance frameworks and standards that underpin Nscale’s business. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their … assessments and liaise with teams across the business to ensure these are actioned. You engage with the commercial legal, procurement, security and other teams to ensure proper third party risk management of suppliers and customers including due diligence (DD) and support other members of the team to implement contractual controls (privacy, AI and cyber provisions, DPAs, data transfer compliance … of DSARs, complaints or regulatory enquiries, e.g. from the ICO or other data regulators. You support the Legal & Compliance team on Board and executive reporting. You maintain our functional riskregister, partner with other members of the team to engage with a range of stakeholders on enterprise risk management and provide tactical SME support to key stakeholders More ❯
teams, and external vendors to deliver a best-fit solution. Facilitate business process mapping and re-engineering to align with Epicor’s capabilities and best practices. Establish governance frameworks, risk registers, and quality assurance processes to ensure project control and transparency. Manage stakeholder relationships at all levels, including executive sponsors and department heads, ensuring effective communication and change readiness. More ❯
East Midlands, England, United Kingdom Hybrid / WFH Options
Rayner Personnel
make sure everyone is aligned. Collaborate with teams across the business (and directly with customers) to bring clarity, focus, and momentum. Build and manage detailed project plans, timelines, and risk registers. Run engaging project sessions — from kick-offs and stand-ups to retrospectives and reviews. Report progress and insights clearly to senior leadership, keeping communication sharp and transparent. Coordinate More ❯
london, south east england, united kingdom Hybrid / WFH Options
Network Rail
aspects are actively driven. Document actions and follow up with individuals in between meetings. Escalate where appropriate. Report progress of the STB to other governance meetings. Regional IT Governance & Risk: Develop the regional IT delivery processes, in line with the DDaT Guardrails, to ensure all IT delivery in the Region complies with this National standard, Own and coordinate the … review of the Regional IT riskregister, ensuring mitigation actions are implemented and issues are escalated to the STB andother relevant regional governance meetings. Essential Job Skills, Experience and Qualifications Excellent communication skills and the ability to develop relationships with a wide range of key stakeholders up to Director and Executive level Demonstrable experience in leading the formulation More ❯
Cyber Security Lead to drive cybersecurity across a family of independent specialist schools. You will take ownership of protecting staff, students, and data, coordinating with multiple MSPs, managing cyber risk, monitoring threats, and embedding robust security practices across the organisation. Key Responsibilities: Act as the central point for all cybersecurity matters and incident response. Maintain the cybersecurity riskregister and lead Cyber Essentials certification. Oversee Microsoft 365 and Google Workspace security, including vulnerability management, patching, MFA, and email security. Coordinate security audits, penetration tests, and third-party application reviews. Manage and monitor MSP performance, ensuring consistent security standards. Promote cybersecurity awareness, provide guidance, and support staff training. Report on cyber incidents, risks, and improvements to senior More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Sanderson
Cyber Security Lead to drive cybersecurity across a family of independent specialist schools. You will take ownership of protecting staff, students, and data, coordinating with multiple MSPs, managing cyber risk, monitoring threats, and embedding robust security practices across the organisation. Key Responsibilities: Act as the central point for all cybersecurity matters and incident response. Maintain the cybersecurity riskregister and lead Cyber Essentials certification. Oversee Microsoft 365 and Google Workspace security, including vulnerability management, patching, MFA, and email security. Coordinate security audits, penetration tests, and third-party application reviews. Manage and monitor MSP performance, ensuring consistent security standards. Promote cybersecurity awareness, provide guidance, and support staff training. Report on cyber incidents, risks, and improvements to senior More ❯
Lancaster, Lancashire, England, United Kingdom Hybrid / WFH Options
Butler Rose
to agreed timescales, budgets, and quality standards. Coordinate internal teams, suppliers, and third parties to ensure resources are effectively allocated. Maintain accurate project documentation, including action logs, progress updates, risk registers, and communication plans. Monitor and report on project progress, escalating issues or risks as needed. Schedule and attend internal and external meetings, recording and following up on key More ❯
Stoke Gifford, Gloucestershire, United Kingdom Hybrid / WFH Options
Synoptix
and follow-on as well as competitive bids simultaneously. Collaborate with business development to shape bid strategies and ensure alignment with delivery capabilities. Develop bid timelines, resource plans, and risk registers to support successful submissions. Stakeholder & Customer Engagement: Build and maintain strong relationships with internal and external stakeholders. Act as the primary point of contact for customers, ensuring expectations … are managed and met. Facilitate regular updates and stakeholder reviews. Change & Risk Management: Lead change control processes, ensuring scope, cost, and schedule impacts are assessed and communicated. Identify, assess, and mitigate project risks and issues proactively. Conflict Resolution: Navigate and resolve conflicts across teams, stakeholders, and suppliers with diplomacy and fairness. Foster a collaborative environment that encourages open communication More ❯
Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Synoptix Limited
and follow-on as well as competitive bids simultaneously. Collaborate with business development to shape bid strategies and ensure alignment with delivery capabilities. Develop bid timelines, resource plans, and risk registers to support successful submissions. Stakeholder & Customer Engagement: Build and maintain strong relationships with internal and external stakeholders. Act as the primary point of contact for customers, ensuring expectations … are managed and met. Facilitate regular updates and stakeholder reviews. Change & Risk Management: Lead change control processes, ensuring scope, cost, and schedule impacts are assessed and communicated. Identify, assess, and mitigate project risks and issues proactively. Conflict Resolution: Navigate and resolve conflicts across teams, stakeholders, and suppliers with diplomacy and fairness. Foster a collaborative environment that encourages open communication More ❯
Bristol, Stoke Gifford, Gloucestershire, United Kingdom Hybrid / WFH Options
Synoptix
and follow-on as well as competitive bids simultaneously. Collaborate with business development to shape bid strategies and ensure alignment with delivery capabilities. Develop bid timelines, resource plans, and risk registers to support successful submissions. Stakeholder & Customer Engagement: Build and maintain strong relationships with internal and external stakeholders. Act as the primary point of contact for customers, ensuring expectations … are managed and met. Facilitate regular updates and stakeholder reviews. Change & Risk Management: Lead change control processes, ensuring scope, cost, and schedule impacts are assessed and communicated. Identify, assess, and mitigate project risks and issues proactively. Conflict Resolution: Navigate and resolve conflicts across teams, stakeholders, and suppliers with diplomacy and fairness. Foster a collaborative environment that encourages open communication More ❯
Birmingham, West Midlands, United Kingdom Hybrid / WFH Options
Tarmac Trading Limited
shape the future of how we build, connect, and operate. Join Tarmacs Finance & IT Controls Graduate Programme and be part of a team driving digital transformation through robust governance, risk management, and financial analysis.This unique opportunity blends technology, data, and business value creation- ideal for graduates passionate about automation, compliance, and strategic financial planning. This role sits at the … tools to enhance efficiency and insight generation.Graduates will contribute to both control assurance and financial reporting activities, supporting key initiatives across the business. What youll be doing IT Governance & Risk Management Support control design, risk assessments, and compliance monitoring (e.g., GDPR, ISO 27001). Financial Planning & Analysis Assist in budgeting, forecasting, and ROI modelling for technology investments. Automation … Support the design, documentation, and testing of IT controls across systems and processes. Assist with internal and external audit activities, including evidence collection and remediation tracking. Contribute to IT risk assessments and maintain the IT risk register. Participate in assurance reviews and control maturity assessments. Monitor compliance with relevant regulatory requirements, such as GDPR and ISO 27001. Collaborate More ❯
Stevenage, England, United Kingdom Hybrid / WFH Options
Akkodis
ecosystems. Whether delivering sophisticated Big Data platforms, cloud solutions, or advanced infrastructure, our teams will drive innovation and digital excellence across multiple programmes. Role We are seeking an experienced Risk and Planning Manager to support the Programme Manager and the wider consortium delivering a programme. You will work across multiple partner organisations and the Authority to identify interdependencies, manage … Jira and MS Project. You will help develop and maintain the programme roadmap, support workstream planning, and facilitate workshops and governance activities. The role requires strong Agile awareness, proven risk management and programme planning experience, and the ability to operate confidently in a high-stakes, security-sensitive environment. Responsibilities Lead the programme-wide risk and issue management process … maintaining risk registers, issue logs, ownership, mitigation actions, and escalation pathways. Identify and manage interdependencies across consortium partners and the Authority; maintain an up-to-date interdependency register and alignment plan. Re-plan and update schedules and baselines in Jira and MS Project based on risk and issue identification; support timely re-planning cycles. Support Project Managers More ❯
domains. Key Responsibilities: Lead end-to-end delivery of complex programmes focused on Liquidity Management, ensuring alignment with strategic business goals. Develop and maintain programme roadmaps, milestone plans, and risk registers; manage dependencies, issues, and change control processes. Collaborate with cross-functional teams including engineering, product, finance, and compliance to define scope, deliverables, and success metrics. Drive regulatory compliance … Agile and DevOps methodologies, fostering a culture of continuous improvement and innovation. Oversee financial planning, budgeting, and cost management across programme streams. Required Skills & Competencies: Deep understanding of Liquidity Risk, Cash & Liquidity Management, and Banking Operations. Strong command of Agile, Waterfall, and Hybrid delivery models. Expertise in tools such as JIRA, Confluence, Clarity, and MS Project. Excellent stakeholder management More ❯
Farnborough, Hampshire, South East, United Kingdom Hybrid / WFH Options
Manpower
change control documentation. Negotiate pricing, SLAs, licensing agreements, and implementation milestones with suppliers. Monitor supplier performance and contract delivery to ensure project and operational requirements are met. Maintain commercial risk registers and develop mitigation plans for high-risk suppliers or dependencies. ERP Transformation Support Work closely with the BFS Programme team, IT, and Finance to align procurement deliverables … and Ariba. CIPS qualification or equivalent. SC or DV Security Clearance (or ability to obtain). Experience using Oracle ERP or similar procurement modules. Key Competencies: Commercial acumen and risk management Strong stakeholder management and communication skills Analytical and detail-oriented approach Negotiation and influencing Organisational agility and adaptability Proactive problem-solving More ❯
City of London, London, United Kingdom Hybrid / WFH Options
TECEZE
IR readiness, and regulatory requirements relevant to SMBs (e.g., HIPAA, PCI-DSS, GDPR nuances as applicable). Customer engagement and discovery: Conduct customer workshops, requirements gathering, current-state assessments, risk analyses, ROI/tco analysis, and roadmaps that translate business outcomes into concrete IT capabilities. Commercial ownership: Collaborate with sales on proposal development, scoping, pricing constructs, RFP/RFI … responses, and executive-level communications; create compelling business cases grounded in the value of reduced downtime, improved productivity, and scalable future-state architectures. Governance and risk management: Define program governance, risk registers, milestone plans, and success metrics; ensure alignment with customer expectations and Teceze delivery standards. People and skills development: Mentor delivery teams on solutioning methods, best practices More ❯
IR readiness, and regulatory requirements relevant to SMBs (e.g., HIPAA, PCI-DSS, GDPR nuances as applicable). Customer engagement and discovery: Conduct customer workshops, requirements gathering, current-state assessments, risk analyses, ROI/tco analysis, and roadmaps that translate business outcomes into concrete IT capabilities. Commercial ownership: Collaborate with sales on proposal development, scoping, pricing constructs, RFP/RFI … responses, and executive-level communications; create compelling business cases grounded in the value of reduced downtime, improved productivity, and scalable future-state architectures. Governance and risk management: Define program governance, risk registers, milestone plans, and success metrics; ensure alignment with customer expectations and Teceze delivery standards. People and skills development: Mentor delivery teams on solutioning methods, best practices More ❯