26 to 50 of 74 Risk Register Jobs in London

complete, current, and defensible when an auditor asks for it. Maintain ISMS documentation to the standard the Senior Manager sets: policies and procedures, the risk register, and records of corrective actions. Support internal audit and management review with the data and analysis they need. Audit Support Prepare evidence … diligence requests for review, keeping answers consistent with what we actually do. Prepare material supporting lender and investor due diligence on security and compliance. Risk and Third Parties Carry out risk assessments and vendor and third-party security reviews, and document the results. Maintain the exception register ...

Client Server Limited in London seeks an Information Security Risk Analyst to strengthen risk management across systems, projects, AI tools and third‐party suppliers. You will maintain the Information Security Risk Register with clear ownership, implement controls and drive remediation to closure, while reporting into risk ...

Title: Group AI Governance, Risk and Compliance Manager (DPO) Department: Group IT Location: London – Hybrid (plus multi-site travel as required) We are Strata! Strata Group is a collective of award-winning specialist agencies, united by one ambition: to help people and brands on a missioncreate meaningful, memorable … partner, uniting experts –giving them access to the right combination of people and capabilities for every challenge. Job Overview The Group AI Governance, Risk & Compliance Manager is responsible for establishing, maintaining and continuously improving the Group's governance, compliance, information security, data protection and AI governance frameworks. Acting ...

Expenses policy. Reporting to: Head of Technology & Transformation The latest research shows that 2.7 million children and young people in the UK are at risk of hunger. When children are too hungry to learn, they struggle to concentrate, absorb information, or keep up with their peers. Magic Breakfast provides … delivering reliable and secure technology services. The postholder also leads the organisation’s approach to cyber security governance, ensuring appropriate policies, monitoring, compliance, and risk management processes are in place. As the organisation outsources day-to-day IT infrastructure and support, this role focuses on governance, oversight, and service ...

with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation. We pride ourselves on combining technical expertise with a practical, hands‐on approach, helping our clients strengthen resilience … meet regulatory requirements, and stay ahead in an increasingly digital and risk‐driven landscape. Technical and Domain Experience Conduct cybersecurity maturity and risk assessment and for clients. Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments. Advise clients on cybersecurity strategy, metrics ...

condition of doing business for us. The role You will own security at Aptitude Software: product and cloud security, internal and corporate security, governance, risk and compliance, third-party and vendor security, business continuity and disaster recovery, and the security tooling estate. You will build these into one function … with the CPTO and reported to the executive team and board. Establish clear, simple security metrics and report them regularly Own the information security risk register and the information security committee agenda Own security policy end to end, including the vulnerability management, version support and secure development policies. ...

Ensure compliance with Premier League cybersecurity requirements, PCI DSS, GDPR, and applicable regulatory frameworks. Provide executive-level oversight of the Club's security posture, risk register, and incident response capability. Ensure security considerations are embedded into all technology investment, procurement, and change decisions. Stadium, Venue, and Football Technology … cost justification to the COO, CFO, and ownership group as required. Negotiate and manage vendor and supplier contracts, ensuring value for money and contractual risk is appropriately managed. Identify opportunities to reduce cost, consolidate platforms, and improve return on technology investment. MEASURES OF PERFORMANCE Technology strategy is clearly articulated ...

Cyber Security Specialist to support the protection of the organisation's information assets, systems, and services. The role will work across security operations, governance, risk management, compliance, incident response, and security awareness to help maintain a robust and resilient security posture. What you'll do: Security Operations Monitor security … incidents, coordinating containment, eradication, and recovery activities. Support vulnerability management activities, including remediation tracking and reporting. Assist with threat intelligence gathering and analysis. Governance, Risk & Compliance Support the maintenance and continual improvement of the Information Security Management System (ISMS). Conduct security risk assessments and maintain risk ...

cycles throughout the year, coordinating with external auditors, internal control owners, Engineering, People, Legal, Finance and Operations. You'll maintain the controls, evidence, policies, risk register, access reviews, vendor reviews, business continuity processes, and incident response documentation that support our certifications and customer commitments. AI drafts and updates … Product and Engineering to translate compliance requirements into practical operational controls without slowing the company down unnecessarily. You'll help the company make clear, risk‐based decisions, escalating when something matters and cutting through noise when it doesn't. You'll raise the maturity of how Humaans thinks about ...

programme timelines, release plans, and business objectives. Lead test planning, estimation, and scheduling across distributed teams and workstreams to ensure timely delivery. Implement a risk-based testing approach; maintain a dynamic test risk register and ensure timely mitigation. Design and implement the automation strategy across ...

Sizewell C Limited is seeking a Cyber Risk Manager to lead the organisation's cyber risk management framework. You will translate threats into actionable insights, working with cyber security, digital, assurance and business teams to strengthen resilience and align with regulatory and business objectives. Reporting to the CISO … will own the risk register, taxonomy and scoring, ensuring escalation and governance, with a focus on protecting critical infrastructure in a highly regulated #J-18808-Ljbffr ...

MAIN DUTIES Information Security & Risk Management Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready. Provide proactive security and data protection … initiatives, change and ongoing projects, ensuring security-by-design and privacy-by-design requirements are embedded from design through implementation. Conduct information security risk assessments to identify, evaluate and prioritise threats and control gaps, ensuring effective controls are agreed, implemented, tracked to closure and reflected in the risk ...

Management Identify schedule risks, constraints, and interdependencies early. Model mitigation scenarios and communication of impacts clearly to stakeholders. Feed schedule intelligence into broader project risk registers. Process & Best Practice Implement robust planning standards aligned with client expectations. Skills & Experience Required Strong experience in project planning and controls. Expert user ...

team. The Role This is a new position acting as the organisation's Responsible AI lead. You will set up and run the governance, risk management and assurance arrangements that support safe adoption of AI across the business. AI risk will be managed as part of the wider … technology risk and security framework rather than in isolation, so the role also covers broader technology GRC. Key Responsibilities Help design, implement and run the Responsible AI governance framework, covering risks such as fairness, transparency, explainability, privacy, security and human oversight Carry out risk triage and assessments ...

performance, development and continual improvement of the service throughout its lifecycle. You'll own the service definition and roadmap, oversee operational performance and risk, manage supplier relationships and ensure the service continues to meet the needs of its users and business stakeholders. This is a senior service management role … teams and senior stakeholders within a complex and highly secure environment. Key Responsibilities Own and continually develop the service definition, roadmap, backlog and service risk register Take end-to-end ownership of the service throughout its lifecycle, from initial development through live operation and eventual retirement Chair ...

Analytics Data Readiness Assessments, including data suitability, accessibility, quality, and governance considerations.Ability to identify, assess, and manage data-related risks, maintaining Data Risk Registers and mitigation plans.Experience mapping business capabilities to data assets through Capability-to-Data Models and traceability frameworks.Strong expertise in defining Future-State Data Architecture ...

Analytics Data Readiness Assessments, including data suitability, accessibility, quality, and governance considerations. Ability to identify, assess, and manage data-related risks, maintaining Data Risk Registers and mitigation plans. Experience mapping business capabilities to data assets through Capability-to-Data Models and traceability frameworks. Strong expertise in defining Future-State ...

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...

success metrics. Create solution architectures, technical designs, and high-value proposals aligned to customer outcomes. Develop accurate SOWs, resource plans, delivery timelines, assumptions and risk registers. Support commercial negotiations and provide input on pricing, T&Cs and change control. Serve as lead consultant on assigned billable engagements — run workshops ...

encryption of sensitive stores, and publish them to data owners. Advise the security function on data-protection exceptions and record each decision in the risk register. Lead cross-functional data privacy and security design and threat-modelling activities, translating identified risks into layered, prioritised engineering improvements. Design and implement ...

Secure DevOps. You may have started your career in cyber engineering, infrastructure security, security operations or cloud security before moving into GRC, cyber risk or controls. Alternatively, you may already be working in a technically focused Cyber GRC position within financial services or another highly regulated organisation. This … highly visible opportunity to help strengthen cybersecurity governance, risk management and regulatory compliance across a complex international business. THE ROLE * Develop and maintain comprehensive cybersecurity policies, standards and procedures * Ensure security policies align with regulatory requirements and recognised industry frameworks * Integrate effective security practices and controls across technical ...

with partner teams or you have to write the code yourself. Act as the technical arm of Vinted Pay's security accountable: maintain the risk register, prepare mitigation‐or‐acceptance decisions against centrally set thresholds, and represent Vinted Pay in the group's security governance. Embed secure development … into Payments engineering so security lands at design time rather than after deployment, and raise the security fluency of Vinted Pay engineers so risk‐based decisions happen well without you in the room - security as a delivery enabler, not a gate. About you Strong hands‐on security engineering experience ...

financial controls. The role supports the Technology Vendor Manager and works across internal stakeholders and third‐party providers. You will help maintain governance routines, risk registers and change management, contributing to Supplier transition planning and continuous improvement initiatives. #J-18808-Ljbffr ...