1 to 25 of 27 Remote/Hybrid Risk Register Jobs in London

7.5% employee contribution 15% employer contribution Life Assurance: Up to 8 x salary Closing Date: 1st October 2026 About the Role: The Cyber Risk Manager plays a critical role in ensuring Sizewell C's cyber risks are identified, understood, prioritised and effectively managed. Reporting directly to the Chief Information … Security Officer (CISO), you will lead the organisation's cyber risk management framework, maintain oversight of the cyber risk landscape and ensure risks are managed in line with regulatory requirements and business objectives. Operating at the intersection of technology, security and business risk, you will translate complex ...

ensuring controls are accurately documented, supported by appropriate evidence and aligned to organisational risks and regulatory requirements. Working closely with cyber security, digital and risk management teams, you will help ensure controls remain effective, auditable and fit for purpose. This is an excellent opportunity for a cyber security professional … with experience in controls governance, risk management or security assurance to contribute to the protection of critical national infrastructure. Key Responsibilities: Controls Library Management Maintain the cyber security controls library, ensuring records remain accurate, complete and up to date. Process additions, amendments and retirements of controls through established governance ...

client, an essential services operator within the utilities and technology sectors, is seeking a Cyber Security Governance, Risk & Compliance Lead for a permanent position based in London with hybrid working. The role will support regulatory engagement, cyber resilience and compliance activities, helping to ensure alignment with NIS Regulations, NIS2 … frameworks Monitor emerging cyber security legislation, regulatory requirements and industry guidance, assessing their impact and recommending appropriate actions Maintain and review the Cyber Security Risk Register, ensuring threat scenarios, mitigations, treatment plans and governance arrangements remain current Support the governance and status reporting of the Cyber Security Roadmap ...

this role exists to set a consistent baseline and raise our security posture proactively rather than reactively. The Lead conducts security audits and risk assessments, sets and enforces baseline security standards, maintains our information security policy set, coordinates incident response, and supports data protection compliance in the jurisdictions where … network's systems and helps people across the network work securely. Core Responsibilities Security Governance, Audits, and Assessments Conduct regular security audits and risk assessments of network systems, applications and processes, and maintain a prioritized risk register Establish and maintain a security baseline across the network, aligned ...

London, Greater London | £80k - £90k per year Information Security Risk Analyst London/WFH to £90k Are you an Information Security professional with experience in risk assessment, security governance and control assurance? You could be progressing your career in an impactful role at a tech driven, global Asset … Manager with multiple billions of dollars under management. As an Information Security Risk Analyst you'll play a key role in implementing and strengthening security risk management, helping the business make informed decisions while maintaining robust security standards in a changing regulatory and technology landscape. You’ll assess ...

collection sits with individual control owners; you monitor for gaps or failures and keep owners accountable, keeping Drata and the ISMS manual consistent. Governance & Risk Chair the Governance, Risk and Compliance Committee, owning the agenda and policy review cycle. Maintain the company risk register in Drata … report audit status, risk exposure, and control effectiveness to leadership and the board. Policy & Documentation Own the policy register in Drata, ensuring policies stay current and accurate, updating them in response to regulatory changes or operational changes, and advising leadership on required updates. Vendor & Third‐Party Risk ...

where teams actually work, through leading the thinking on the AI governance control plane programme, to running the review path for novel and high-risk AI work jointly with client risk and security leaders. The ideal candidate brings deep expertise in AI governance frameworks and controls, AI security … published, self-serve guardrails that let citizen developers and engineering teams move fast within known limits — with review reserved for the novel and high-risk — and act as the thought leader shaping the AI governance control plane programme. Good governance here is measured by how rarely people have ...

Client Server Limited in London seeks an Information Security Risk Analyst to strengthen risk management across systems, projects, AI tools and third‐party suppliers. You will maintain the Information Security Risk Register with clear ownership, implement controls and drive remediation to closure, while reporting into risk ...

Title: Group AI Governance, Risk and Compliance Manager (DPO) Department: Group IT Location: London – Hybrid (plus multi-site travel as required) We are Strata! Strata Group is a collective of award-winning specialist agencies, united by one ambition: to help people and brands on a missioncreate meaningful, memorable … partner, uniting experts –giving them access to the right combination of people and capabilities for every challenge. Job Overview The Group AI Governance, Risk & Compliance Manager is responsible for establishing, maintaining and continuously improving the Group's governance, compliance, information security, data protection and AI governance frameworks. Acting ...

Expenses policy. Reporting to: Head of Technology & Transformation The latest research shows that 2.7 million children and young people in the UK are at risk of hunger. When children are too hungry to learn, they struggle to concentrate, absorb information, or keep up with their peers. Magic Breakfast provides … delivering reliable and secure technology services. The postholder also leads the organisation’s approach to cyber security governance, ensuring appropriate policies, monitoring, compliance, and risk management processes are in place. As the organisation outsources day-to-day IT infrastructure and support, this role focuses on governance, oversight, and service ...

condition of doing business for us. The role You will own security at Aptitude Software: product and cloud security, internal and corporate security, governance, risk and compliance, third-party and vendor security, business continuity and disaster recovery, and the security tooling estate. You will build these into one function … with the CPTO and reported to the executive team and board. Establish clear, simple security metrics and report them regularly Own the information security risk register and the information security committee agenda Own security policy end to end, including the vulnerability management, version support and secure development policies. ...

MAIN DUTIES Information Security & Risk Management Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready. Provide proactive security and data protection … initiatives, change and ongoing projects, ensuring security-by-design and privacy-by-design requirements are embedded from design through implementation. Conduct information security risk assessments to identify, evaluate and prioritise threats and control gaps, ensuring effective controls are agreed, implemented, tracked to closure and reflected in the risk ...

Management Identify schedule risks, constraints, and interdependencies early. Model mitigation scenarios and communication of impacts clearly to stakeholders. Feed schedule intelligence into broader project risk registers. Process & Best Practice Implement robust planning standards aligned with client expectations. Skills & Experience Required Strong experience in project planning and controls. Expert user ...

Analytics Data Readiness Assessments, including data suitability, accessibility, quality, and governance considerations.Ability to identify, assess, and manage data-related risks, maintaining Data Risk Registers and mitigation plans.Experience mapping business capabilities to data assets through Capability-to-Data Models and traceability frameworks.Strong expertise in defining Future-State Data Architecture ...

Analytics Data Readiness Assessments, including data suitability, accessibility, quality, and governance considerations. Ability to identify, assess, and manage data-related risks, maintaining Data Risk Registers and mitigation plans. Experience mapping business capabilities to data assets through Capability-to-Data Models and traceability frameworks. Strong expertise in defining Future-State ...

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...

with partner teams or you have to write the code yourself. Act as the technical arm of Vinted Pay's security accountable: maintain the risk register, prepare mitigation‐or‐acceptance decisions against centrally set thresholds, and represent Vinted Pay in the group's security governance. Embed secure development … into Payments engineering so security lands at design time rather than after deployment, and raise the security fluency of Vinted Pay engineers so risk‐based decisions happen well without you in the room - security as a delivery enabler, not a gate. About you Strong hands‐on security engineering experience ...

future state processes, and coordinate testing activities. Partner closely with Business Analysts to ensure delivery is grounded in well-understood business needs Manage risk proactively: Maintain risk registers and mitigation plans. Surface issues early, escalating where needed, and keep the project leadership team ahead of potential blockers Shape ...

carried out by the internal IT & Systems Manager, ensuring proper separation of control definition and operational delivery. You will drive a costed security roadmap, risk register, and board reporting while advising on certification direction and an incident framework. #J-18808-Ljbffr ...

defining integration roadmaps.* Collaborate with Corporate Development, Finance, and Legal teams to ensure IT due diligence is completed effectively during M&A processes.**Compliance, Risk & Governance*** Serve as the main IT interface with Live Nation's Compliance function, ensuring IT operations adhere to applicable regulatory requirements, data protection legislation … including GDPR and regional equivalents), and internal governance standards.* Work closely with the Group Data Protection Officer, Legal, and Risk teams to ensure IT policies and controls are operationally embedded across international regions.* Oversee IT risk registers and remediation plans for international operations, escalating material risks to senior ...

with a dotted line to the Board and Audit Committee, this is a pivotal executive leadership role responsible for security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly … lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group’s Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials, PCI-DSS, and data protection obligations Manage relationships with auditors, regulators, cyber insurers, and certification ...

delivery, and implement practical solutions rather than simply providing recommendations. You'll support strategic initiatives spanning ISO 27001, SOC 2, business continuity, third-party risk management, and acquisition-related security assessments. Contract Details: Location: London or Bradford (hybrid - 2 days per week onsite) Rate: £650 per day (inside IR35 … Contract Length: 6 months (with visibility to extend or go permanent afterwards) Key Responsibilities Conduct cyber security risk assessments and security due diligence activities for mergers and acquisitions, identifying risks, remediation requirements and integration priorities. Assess, maintain and enhance security frameworks aligned to ISO 27001 and SOC 2 Type ...

sprints across pods, surfacing status in a single, consistent format for leadership. Highlighting key interdependencies and risks between pods and maintaining a live risk and dependency register (centralized RAID log). Contributing to the EMF process by ensuring team estimations are up to date, supporting the management … projects – Preferred background in iGaming, sports betting, or casino platforms (PAM, Payments, Sportsbook, Casino). Program management skills — managing multiple work items, RAID/risk registers and cross-pod tickets concurrently. Practical experience with agile and delivery tooling (e.g. Jira, Confluence or equivalent) for backlog, dependency and risk ...