3 of 3 Remote/Hybrid Risk Assessment Jobs in Somerset

hackajob is partnering directly with Leonardo to hire for this role. Job Description: Head of Governance, Risk and Compliance (Information Security) Your impact Leonardo UK operates in a complex security, regulatory and defence environment. As Head of Governance, Risk and Compliance for the information security team, you will … lead the function responsible for setting clear security standards, supporting proportionate risk decisions and providing assurance across the business. You will work across multiple business areas and may be required to travel between Leonardo UK sites, with hybrid working supported where appropriate for the role. What you will ...

assurance evidence are considered at the right stages. Work with system owners, delivery teams, operational teams and Information Security colleagues to manage security risk through the system lifecycle. Review security-relevant changes and provide informed advice on whether they remain within agreed security guardrails. Support risk assessments … fully implemented. Help ensure security evidence, control status and assurance activity are maintained and available for review. Escalate material changes in cyber or information risk to the appropriate stakeholders. Support audits, assurance reviews and continual improvement activity for highly classified environments. This aligns to the operating model, which describes ...

during which you will ensure that the product and associated deliverables are as secure as reasonably practicable, and in accordance with customers requirements and risk appetite. You will be supported in this role as part of a larger consulting team, engineers and product domain specialists. Your work at Leonardo … designs as they pertain to the cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities ...