26 to 50 of 155 Risk Register Jobs in England

collection sits with individual control owners; you monitor for gaps or failures and keep owners accountable, keeping Drata and the ISMS manual consistent. Governance & Risk Chair the Governance, Risk and Compliance Committee, owning the agenda and policy review cycle. Maintain the company risk register in Drata … report audit status, risk exposure, and control effectiveness to leadership and the board. Policy & Documentation Own the policy register in Drata, ensuring policies stay current and accurate, updating them in response to regulatory changes or operational changes, and advising leadership on required updates. Vendor & Third‐Party Risk ...

customers in identifying, assessing and managing cyber security and information assurance risks across complex digital, operational and high‐assurance environments. The role combines consultancy, risk assessment, security assurance, governance and stakeholder engagement. Work may span secure information exchange, cross-domain solutions, cloud services, networks, applications, data platforms and operational … systems. The postholder translates security obligations, business needs, threat information and technical evidence into clear risk‐based recommendations. The role suits a cyber security, risk, assurance or systems professional seeking broader customer‐facing responsibility across defence, government and critical national infrastructure. Key Responsibilities Conduct cyber security and information ...

Management team. Ultimately, you’ll work for the British Army, championing innovation, and helping shape the future of military collective training. The Omnia Security Risk Manager role requires a versatile individual who can make effective and highly valued contributions to activities across the project lifecycle in collective training … . Supporting the Information Assurance team with the implementation of the MoD Secure by Design methodology. Ownership and maintenance of artefacts such as: Security Risk Management Plan, Security Risk Register, and Key Security Risk Indicators. Supporting the development of the necessary Information Assurance artefacts and outcomes ...

where teams actually work, through leading the thinking on the AI governance control plane programme, to running the review path for novel and high-risk AI work jointly with client risk and security leaders. The ideal candidate brings deep expertise in AI governance frameworks and controls, AI security … published, self-serve guardrails that let citizen developers and engineering teams move fast within known limits — with review reserved for the novel and high-risk — and act as the thought leader shaping the AI governance control plane programme. Good governance here is measured by how rarely people have ...

ongoing development through practical, on-the-ground execution. This role translates strategy into practical, company-wide operations, ensuring effective governance, accountability and risk management across all RWS functions and markets. Working closely with stakeholders across Legal, Security, Technology, Product, HR and other business functions, the Program Manager will drive … strong interest in information security. They will be comfortable operating at the intersection of privacy, AI governance and cyber security, driving initiatives, managing risk, and embedding best practices across a global organisation. About RWS Legal In joining RWS's Legal and Professional Advisory team you will play an instrumental ...

resilience of our European IT environment. This is a great opportunity for someone who enjoys working at the intersection of IT security, compliance, risk and data . You'll play a key role in turning security requirements and frameworks into practical controls, meaningful reporting and actionable insight that helps … data into meaningful insight. Monitor, measure and report on IT security compliance across key technology and operational domains. Own and maintain the IT Security Risk Register , ensuring risks are clearly documented, assessed and actively managed. Facilitate security and technology risk assessments , working with technical teams to identify ...

Privacy Risk &?Compliance Officer Salary- 70k & Great Benefits Location- UK Clearance: hold or ability to obtain SC level clearance (5 year UK residency) Contract: Permanent Department: Privacy, Risk & Compliance About the Role We are seeking an experienced and highly motivated Privacy, Risk & Compliance Officer to support … oversee the effective delivery of our Privacy, Risk and Compliance frameworks across the UK business. This is a key role within the organisation, providing oversight, guidance and assurance across data privacy, regulatory compliance, operational risk and internal controls, with a privacy being a core strength to support ...

Description The IT Security Analyst is responsible for protecting the organisation’s information systems, data, and technology assets. This role combines information security governance, risk, and compliance responsibilities with hands-on technical security operations. The successful candidate will help design, implement, monitor, and continuously improve security controls to ensure … Governance Develop, implement, and maintain information security policies, standards, and procedures Ensure alignment with recognised frameworks (e.g. ISO 27001, NIST, CIS) Support information security risk assessments and maintain the risk register Assist with internal and external audits, certifications, and compliance reviews Promote security awareness and deliver staff ...

regulatory requirements. Working closely with the Senior Information Security Manager, Cyber Security Manager and wider business, you will take ownership of information security policies, risk management, data protection and business continuity. You will play a hands-on role in embedding security into everyday business processes, improving compliance and promoting … aware culture across the organisation. Key Responsibilities Develop, implement and maintain information security policies, procedures and governance frameworks. Manage information security risks, maintain the risk register and oversee remediation activities. Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus , alongside relevant contractual and regulatory requirements. Conduct risk ...

primary internal contact. Security Strategy & Roadmap: Define a clear, costed security strategy and sequenced improvement roadmap tailored to the evolving estate, threat landscape, and risk appetite. Risk & Assurance Stewardship: Architect a security-specific risk register and conduct regular, independent reviews of the control environment operated … follow the required outputs: Setup Phase (~First 3 months): Estimated at 1.5 days per week (approx. 17–19 days total) to deliver the initial risk assessment, strategy, certification recommendation, and incident playbooks. Transition Phase (Months 4–6): Tapering to approximately 2 days per month as the roadmap moves into ...

complete, current, and defensible when an auditor asks for it. Maintain ISMS documentation to the standard the Senior Manager sets: policies and procedures, the risk register, and records of corrective actions. Support internal audit and management review with the data and analysis they need. Audit Support Prepare evidence … diligence requests for review, keeping answers consistent with what we actually do. Prepare material supporting lender and investor due diligence on security and compliance. Risk and Third Parties Carry out risk assessments and vendor and third-party security reviews, and document the results. Maintain the exception register ...

month contract. You’ll play a key part in the organisation’s EU Cyber Resilience Act (CRA) readiness, while maturing cyber risk management and governance across the business. Working closely with engineering, product management, quality, service and cyber security teams, you’ll help turn compliance requirements into tracked, measurable … deliverables. What we’re looking for: Cyber GRC, compliance, risk management or audit experience Hands-on experience maintaining risk registers, running risk assessments and tracking remediation Experience supporting regulatory compliance programmes Familiarity with Cyber Resilience Act requirements Knowledge of NIST 800-53, ISO 27001, NIS2 ...

play a pivotal role in strengthening and transforming our cybersecurity capability. This is a high impact role at the intersection of business, technology, risk and security. You will be responsible for ensuring Gist maintains a fit-for-purpose cybersecurity posture, while leading the delivery of our cybersecurity transformation roadmap … with business leaders, technology teams, M&S Information Security, auditors, suppliers and strategic partners providing pragmatic security leadership, challenging where necessary and ensuring cyber risk is understood, managed and reported effectively. What you'll be doing Reporting to the Head of Technology Operations & Security, you will lead our cybersecurity ...

Client Server Limited in London seeks an Information Security Risk Analyst to strengthen risk management across systems, projects, AI tools and third‐party suppliers. You will maintain the Information Security Risk Register with clear ownership, implement controls and drive remediation to closure, while reporting into risk ...

Title: Group AI Governance, Risk and Compliance Manager (DPO) Department: Group IT Location: London – Hybrid (plus multi-site travel as required) We are Strata! Strata Group is a collective of award-winning specialist agencies, united by one ambition: to help people and brands on a missioncreate meaningful, memorable … partner, uniting experts –giving them access to the right combination of people and capabilities for every challenge. Job Overview The Group AI Governance, Risk & Compliance Manager is responsible for establishing, maintaining and continuously improving the Group's governance, compliance, information security, data protection and AI governance frameworks. Acting ...

Tech Ops Function to support all aspects of Service Operations Management, focussing on service stability (Incident and Problem Management) and Service Performance (demand, capacity, risk and CSI) in support of delivering Digital Solution services across Leonardo’s business operations in the UK. This is a hybrid role and will … Solution services across the UK covering the following key areas; Performance Management Report on the consolidated budget allocated to Tech Ops Maintain a consolidated Risk Register for Tech Ops Manage and report on capacity, consolidated for all Service Providers Manage and report on service availability for all Service ...

Expenses policy. Reporting to: Head of Technology & Transformation The latest research shows that 2.7 million children and young people in the UK are at risk of hunger. When children are too hungry to learn, they struggle to concentrate, absorb information, or keep up with their peers. Magic Breakfast provides … delivering reliable and secure technology services. The postholder also leads the organisation’s approach to cyber security governance, ensuring appropriate policies, monitoring, compliance, and risk management processes are in place. As the organisation outsources day-to-day IT infrastructure and support, this role focuses on governance, oversight, and service ...

with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation. We pride ourselves on combining technical expertise with a practical, hands‐on approach, helping our clients strengthen resilience … meet regulatory requirements, and stay ahead in an increasingly digital and risk‐driven landscape. Technical and Domain Experience Conduct cybersecurity maturity and risk assessment and for clients. Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments. Advise clients on cybersecurity strategy, metrics ...

highly regulated engineering programme. This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management. Location: Barrow-in-Furness (Hybrid) Hybrid: Typically 1-2 days on-site per month Contract: 12 months Positions: 1 Rate: £63.21 PAYE/… line with programme plans and governance Developing Interim and Final Security Cases across programme phases Managing IA and security risks, including maintaining security/risk register contributions Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence Coordinating and managing IA Technical Queries and formal communications ...

provider, acting as the internal security practitioner against their outputs. The role also requires genuine compliance capability, you will contribute to internal audit and risk assessment cycles and support ISO 27001 compliance activity. You will provide ad-hoc expert input to the IT function where security judgement is needed … maintained to a defined standard Managing the vulnerability management programme, including coordination of internal and external penetration testing Conducting internal security audits and risk assessments, producing findings reports and tracking remediation Supporting ISO 27001 compliance activity, including contributing to control evidence and audit cycles Producing clear written outputs -- findings ...

condition of doing business for us. The role You will own security at Aptitude Software: product and cloud security, internal and corporate security, governance, risk and compliance, third-party and vendor security, business continuity and disaster recovery, and the security tooling estate. You will build these into one function … with the CPTO and reported to the executive team and board. Establish clear, simple security metrics and report them regularly Own the information security risk register and the information security committee agenda Own security policy end to end, including the vulnerability management, version support and secure development policies. ...

Frasers Group is seeking a Technology GRC Analyst to support the ongoing development of its technology risk and assurance capability across the group’s global operations. You will identify, assess and monitor technology and cyber risks while ensuring IT and business controls are designed and operating effectively, collaborating with … multiple stakeholders. You will deliver risk assessments, controls testing and IAM assurance, maintain the risk register and contribute to supplier risk and #J-18808-Ljbffr ...

Role Title: Compliance & Risk Support Analyst Pay rate: £276.00 per day Umbrella Location: Bearwood Rd, Sindlesham, Wokingham RG41 5BN | Hybrid 50/50 Duration: 4 Months Clearance: Active SC clearance Role A Compliance & Risk Support Analyst helps an organization maintain regulatory adherence and minimize potential risks by identifying …/logging risks, developing mitigation strategies, and monitoring compliance. Key duties include conducting risk reviews, analyzing data, maintaining risk registers and policies, preparing for and support evidence collection for audits, and educating staff on compliance and risk management. Essential skills include strong analytical abilities, attention to detail ...

Ensure compliance with Premier League cybersecurity requirements, PCI DSS, GDPR, and applicable regulatory frameworks. Provide executive-level oversight of the Club's security posture, risk register, and incident response capability. Ensure security considerations are embedded into all technology investment, procurement, and change decisions. Stadium, Venue, and Football Technology … cost justification to the COO, CFO, and ownership group as required. Negotiate and manage vendor and supplier contracts, ensuring value for money and contractual risk is appropriately managed. Identify opportunities to reduce cost, consolidate platforms, and improve return on technology investment. MEASURES OF PERFORMANCE Technology strategy is clearly articulated ...

Ensure compliance with Premier League cybersecurity requirements, PCI DSS, GDPR, and applicable regulatory frameworks. Provide executive-level oversight of the Club's security posture, risk register, and incident response capability. Ensure security considerations are embedded into all technology investment, procurement, and change decisions. Stadium, Venue, and Football Technology … cost justification to the COO, CFO, and ownership group as required. Negotiate and manage vendor and supplier contracts, ensuring value for money and contractual risk is appropriately managed. Identify opportunities to reduce cost, consolidate platforms, and improve return on technology investment. MEASURES OF PERFORMANCE Technology strategy is clearly articulated ...