Responsibilities Clearance Operational Support: Oversee and execute the screening, onboarding, review and data transfer requests fulfillment across all businesses within Citi as defined in rules provided by Independent Compliance RiskManagement (ICRM). Discuss, implement and operationalize new country privacy and regulatory changes impacting the cross-border transfer process as advised by Country ICRM. Quality Assurance: Perform regular … Contribute to Data Enablement Process: Provide support and guidance to the business in the execution of the transformational data enablement process to streamline, standardize and simplify global program related risk assessment questionnaires by driving efficiency through organizing questions into logical groups and reducing redundancies. Target State Process Model Implementation: Support the design and implementation of the target state operational … model for the Data Transfers Office, contributing to projects and initiatives to drive consistency and reduce risk in DTO processes. Team Collaboration: Lead, mentor, and train a high-performing team responsible for execution, coordination, and control adherence, fostering accountability, excellence and continuous improvement. Process Implementation & Enhancements: Assist in the implementation of a scalable and efficient operating model aligned with More ❯
Edinburgh, Midlothian, Scotland, United Kingdom Hybrid / WFH Options
Bright Purple Resourcing
Senior Cyber Security Risk Manager Hybrid, Edinburgh Up to £70,000 + benefits Benefits In return for your expertise and commitment, youll receive: Annual bonus Flexible hybrid working Excellent healthcare and pension scheme Life assurance Electric Vehicle Scheme About the Role This is a brilliant opportunity for an experienced Cyber Security Risk professional to take ownership of a … global organisations riskmanagement and compliance strategy. Youll be joining a forward-thinking cyber team thats investing heavily in maturing its Governance, Risk, and Compliance capability, giving you the chance to shape frameworks, influence senior leaders, and make a real impact on how the business manages risk. Youll lead key initiatives around risk governance, audit readiness … certifications and audits. About You Youll bring a mix of technical understanding, commercial awareness, and the confidence to engage at every level. Ideally, youll have: Strong experience in cybersecurity riskmanagement or GRC roles A solid understanding of industry frameworks such as NIST CSF, NIST 800-53, or SOC 2 Hands-on involvement in audit or certification readiness More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Sanderson Government and Defence
Senior Security Risk Assurance Manager - SC cleared Location: Hybrid (75% remote) with on-site presence as required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role The Senior Security Risk Assurance Manager plays a critical role in strengthening the organisation's security posture through strategic risk-based assurance activities. This role supports informed decision … making across the enterprise by providing expert insight into the effectiveness of security controls, riskmanagement practices, and supply chain security. The position may sit within one of several assurance functions, including internal security assurance, supply chain assurance, or enterprise-level risk management. Key Responsibilities Lead and manage a team of security professionals to deliver high-quality … in assurance practices. Ensure assurance reports are accurate, actionable, and meet quality standards. Share good practices and lessons learned across the organisation. Experience Required Proven leadership experience in security risk assurance or related fields. Strong understanding of enterprise security riskmanagement principles. Experience in conducting security assessments and producing assurance reports. Ability to engage and influence stakeholders More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Sanderson
Senior Security Risk Assurance Manager - SC cleared Location: Hybrid (75% remote) with on-site presence as required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role The Senior Security Risk Assurance Manager plays a critical role in strengthening the organisation's security posture through strategic risk-based assurance activities. This role supports informed decision … making across the enterprise by providing expert insight into the effectiveness of security controls, riskmanagement practices, and supply chain security. The position may sit within one of several assurance functions, including internal security assurance, supply chain assurance, or enterprise-level risk management. Key Responsibilities Lead and manage a team of security professionals to deliver high-quality … in assurance practices. Ensure assurance reports are accurate, actionable, and meet quality standards. Share good practices and lessons learned across the organisation. Experience Required Proven leadership experience in security risk assurance or related fields. Strong understanding of enterprise security riskmanagement principles. Experience in conducting security assessments and producing assurance reports. Ability to engage and influence stakeholders More ❯
Risk & Disaster Recovery, Business, Continuity, Service Continuity Leading UK business based in London Up to £750 per day (Umbrella engagement) Hybrid working (3 days on site) Our client, a successful and well known UK business is looking to hire a Risk and Disaster Recovery specialist. The successful candidate will be responsible for developing and executing an IT disaster … recovery (including riskmanagement strategy) for enterprise infrastructure. You will also plan for ongoing maintenance. You will also ensure our clients IT infrastructure and services remain resilient and recoverable in the event of disruption. In depth expertise in ITIL frameworks is essential. Previous experience in disaster recovery planning and riskmanagement is also essential. The ability … vendor stakeholders. Engagement via Umbrella Company Only; all taxes & NI deducted at source. General responsibilities: - Define/maintain IT disaster recovery framework ensuring alignment with business continuity objectives. Conduct risk assessments of existing infrastructure services enabling identification of mitigation strategies. Develop and document disaster recovery plans and runbooks. Manage and run regular Disaster Recovery exercises. Compliance with ITIL best More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Arc IT Recruitment
is seeking an IT GRC Analyst to join its growing team. This is an excellent opportunity for a professional with at least 3 years of experience in IT Governance, Risk, and Compliance (GRC) to take the next step in their career, contributing to the ongoing development and improvement of IT risk and control frameworks within a highly regulated … IT GRC frameworks and processes. Maintain IT governance documentation, ensuring accuracy and alignment with policy requirements. Support governance reviews and assist in the preparation of IT GRC reporting for management and stakeholders. Help communicate IT risk and control frameworks across the organisation. Risk Identify, assess, and document IT risks across systems and services. Support IT riskmanagement activities, including technical risk assessments and remediation tracking. Work with risk owners to develop, monitor and report on mitigation plans. Contribute to periodic operational risk assessments and formal risk reporting processes. Compliance Support IT control compliance reviews and assessments against internal standards and frameworks (e.g., ISO 27001, NIST). Assist control owners in More ❯
partners depends solely on the talented individuals who make Expereo a dynamic, effective, multicultural, and equitable environment. About the role Reports to: Chief Digital Officer (with quarterly Audit/Risk committee updates) The Enterprise & Network Security Director (ENS) is responsible for developing and implementing a holistic security strategy of the Expereo Enterprise Organization and the Network Products and Services … nature, this role requires a hands-on approach. Responsibilities Define and execute the end-to-end security strategy covering Enterprise, Cloud Applications, and Network domains; represent cybersecurity posture to management, regulators, auditors and key customers. Lead and mentor cross-functional security teams (Enterprise IT SecOps, Cloud Security, Network Security, Compliance, Identity). Oversee global security policies, riskmanagement … embedded in product/service lifecycles (Internet access, SD-WAN, SASE, NaaS) and that they are secure by design and meet customer and industry expectations. Drive vendor/partner riskmanagement and customer assurance processes. Conduct regular risk assessments, vulnerability tests, and threat analysis to identify and mitigate security risks. Work with IT teams to ensure security More ❯
staff members. We care for approximately 1.5 million people annually, including over 200,000 emergency cases. Leeds Teaching Hospitals is committed to our process of redeploying 'at risk' members of our existing workforce to new roles. As such, all our job adverts are subject to this policy and we reserve the right to close, delay or remove adverts while … jobholder will be responsible for the design and creation of robotic process automation (RPA) solutions and for the integration of these into, and between, existing systems. Providing cost-effective, risk-controlled, robust, reliable, responsive and secure automation solutions, this role will support clinical and corporate transformation needs to assist the organisation in delivering its strategy. The jobholder will be … forums to ensure that changes and new processes are only deployed into the live environment once all required checks and pre-requisites are in place according to the change management processes. Maintain and demonstrate an up to date knowledge of industry developments and best practice standards. 2. Service delivery Provide an efficient, reliable, responsive and timely automation and integration More ❯
Newcastle Upon Tyne, Tyne and Wear, England, United Kingdom
Reed Talent Solutions
Do you have strong communication skills? Are you confident providing clear, precise advice to stakeholders? Then consider the role of Security & Incident Management Executive at Reed in Partnership! You must be based in the NorthEast for this position. This role requires you to travel, therefore you must have a valid UK driving license and access to your own vehicle … What is the role about? The Security & Incident Management Executive, reporting to the Deputy Head of IT & Security, support with all aspects of IT and security across the contract, comprising physical & information security, including: Act as a Security & Incident Management Executive (SIME) supporting the day-to-day SIM Team operations including Helpdesk duties, fraud packs and supporting the … audit and visit schedule. Act as helpdesk support to frontline test centre staff to resolve and monitor security & operational incidents. Assisting with administrating the fraud management process, assisting with managing fraud trackers, and reporting, remedial training and actions. Creating fraud incident packs & work with frontline staff to gather evidence to support fraud pack assembly, processing and delivery to the More ❯
Woking, Surrey, England, United Kingdom Hybrid / WFH Options
Nomad Foods
GRC Manager Woking based with Hybrid working Competitive salary, up to 25% bonus and excellent benefits package We’re looking for an experienced and proactive Governance, Risk & Compliance (GRC) Manager to join our dynamic team based in Woking. In this key role, you’ll help strengthen our riskmanagement framework, enhance compliance processes, and ensure robust governance … across our operations. You’ll work collaboratively with senior stakeholders to drive continuous improvement, embed a strong risk culture, and support strategic decision-making across the business. If you’re passionate about governance excellence, thrive in a fast-paced environment, and want to make real impact at Europe’s leading frozen food company. Responsibilities: Overseeing cyber security governance efforts … ensuring alignment with frameworks like ISO 27001, NIST, NIS2 and GDPR, and regulatory standards. Identify, assess, and mitigate security risks across the organisation. Implement and maintain riskmanagement processes, ensuring effective controls are in place. Ensure continuous compliance with applicable laws and regulations. Conduct internal audits and manage external audits of cyber security controls. Work closely with cross More ❯
Cambridge, England, United Kingdom Hybrid / WFH Options
Hays
About the role As a Risk Manager, you will be taking a lead on cybersecurity and third-party cyber riskmanagement, risk quantification and post-incident reviews. You will be translating insights into action and helping to drive data-driven, and risk informed decisions. You will be playing a critical role in embedding and operating … within the ServiceNow IRM tool, contributing to the development and embedding of a new riskmanagement framework. Tell me more, tell me more... Our client is currently looking for a new recruit in joining their Team, please read on! You can also ask our friendly recruitment team any questions you may have about the role, between 09.00am till … Monday to Friday. Shifts: Monday to Friday (37.5 hours) Must Haves: ServiceNow IRM experience Previously worked in a technical, large-scale environment such as semiconductors. Hands on experience with risk assessment methodologies. Deep knowledge of security technologies and control frameworks such as ISO 27001, NIST CSF and NIST SP800-53. Strong stakeholder management skills Proven ability to embed More ❯
cambridge, east anglia, united kingdom Hybrid / WFH Options
Hays
About the role As a Risk Manager, you will be taking a lead on cybersecurity and third-party cyber riskmanagement, risk quantification and post-incident reviews. You will be translating insights into action and helping to drive data-driven, and risk informed decisions. You will be playing a critical role in embedding and operating … within the ServiceNow IRM tool, contributing to the development and embedding of a new riskmanagement framework. Tell me more, tell me more... Our client is currently looking for a new recruit in joining their Team, please read on! You can also ask our friendly recruitment team any questions you may have about the role, between 09.00am till … Monday to Friday. Shifts: Monday to Friday (37.5 hours) Must Haves: ServiceNow IRM experience Previously worked in a technical, large-scale environment such as semiconductors. Hands on experience with risk assessment methodologies. Deep knowledge of security technologies and control frameworks such as ISO 27001, NIST CSF and NIST SP800-53. Strong stakeholder management skills Proven ability to embed More ❯
Milton Keynes, Buckinghamshire, England, United Kingdom Hybrid / WFH Options
Tank Recruitment
Information Security Officer - Lead Enterprise Security & RiskManagement Location: Hybrid (UK-based) | Salary: Competitive + Bonus + Flexible Benefits My client, a forward-thinking technology organisation, is seeking an experienced Information Security Officer (ISO) to lead their enterprise-wide information security and IT riskmanagement programme. This is a fantastic opportunity for a security professional who … Develop and execute an information security strategy and roadmap aligned with business goals. Lead on governance, compliance, and audit processes across the organisation. Manage incident response, penetration testing, and risk assessments. Support secure software development and supplier risk management. Promote security awareness and report regularly to senior leadership on risk posture. Skills & Experience Required Previous experience in … an information security or IT riskmanagement role. Strong understanding of frameworks such as ISO 27001, NIST, PCI-DSS, or Cyber Essentials . Excellent communication and stakeholder engagement skills. Ability to manage multiple priorities in a dynamic environment. Benefits Include A people-focused culture with genuine support for wellbeing and growth. Excellent training and professional development opportunities. Performance More ❯
own scenario testing workshops and scenario test plan, including remediation tracking and write up of outcomes for self-assessment Lead embedding key pillars of the DORA program, including ICT RiskManagement, Incident Reporting, Digital Resilience Testing and ICT Third-Party RiskManagement Work closely with Third-Party Risk Lead to ensure accuracy of IBS mapping … and input to severe but plausible scenarios. Ensure third-party risk to ongoing delivery of an IBS is understood and managed, including awareness of TP business continuity arrangements. Work in partnership with relevant departments (e.g. IT, Procurement, Underwriting, Delegated Authority, Claims) to embed Operational Resilience practices and ensure roles and responsibilities are understood. Ensure appropriate alignment with Business Continuity … meaningful impact tolerance monitoring and reporting Collate/support business to implement relevant KRIs to generate a view of resilience across the business Support development and enhancement of incident management documentation (e.g. framework/policy/playbook). Act as key point of contact for IBS Owners seeking support on Operational Resilience activities and CIFs (Critical Important Functions) in More ❯
/Midwife/AHP/Pharmacist/Pharmacy Technician/Clinical Scientist) and a trained Clinical Safety Officer (CSO) . The purpose of the role is to implement Clinical RiskManagement activities within Digital Services that support the safe development, introduction, and deployment of clinical digital systems. The post-holder will coordinate with other Trust teams to ensure … a cooperative approach to digital clinical risk management. Your Responsibilities As part of the Digital Team, support the implementation of the digital clinical safety strategy under the guidance of the Chief Nursing Information Officer (CNIO). Conduct clinical safety reviews and risk assessments related to digital systems, including the Trust's new Electronic Patient Record (EPR). Collaborate … practice across a range of clinical settings within a multidisciplinary team (MDT). Maintain a portfolio of evidence demonstrating CSO experience and achievements. Complete regular audits, including: a. Clinical RiskManagement File (CRMF) b. Clinical RiskManagement Plan (CRMP) c. Hazard Log (HL) d. Clinical Safety Case/Clinical Safety Case Report e. Safety Incident ManagementMore ❯
will also be leading a team to implement complex enterprise software solutions into live mission critical healthcare environments, and be responsible for improving project efficiency and effectiveness, through project management process and tool improvements. Role responsibilities for the Senior Project Manager- Clinical Software: Project management of enterprise clinical software into the NHS Leading, monitoring and managing multiple projects … Ensuring all project management activities from end to end are looked after Risk, resource, and change management Financial control and executive stakeholder management Solution team management and matrix team/resource management across delivery, development, and third-party vendor teams Project documentation and status reports Host internal and external project meetings Team motivation and … of delivering clinical applications such as PACS, RIS, EPR, PAS, LIMS, ePMA Qualified to Prince2 Practitioner level Matrix people leadership both internally and externally Project control, planning and documentation Riskmanagement Resource management Financial management (vendor side experience of milestone completion, billing and change control) Contractual management Ability and willingness to take initiative toward project More ❯
will also be leading a team to implement complex enterprise software solutions into live mission critical healthcare environments, and be responsible for improving project efficiency and effectiveness, through project management process and tool improvements. Role responsibilities for the Senior Project Manager- Clinical Software: Project management of enterprise clinical software into the NHS Leading, monitoring and managing multiple projects … Ensuring all project management activities from end to end are looked after Risk, resource, and change management Financial control and executive stakeholder management Solution team management and matrix team/resource management across delivery, development, and third-party vendor teams Project documentation and status reports Host internal and external project meetings Team motivation and … of delivering clinical applications such as PACS, RIS, EPR, PAS, LIMS, ePMA Qualified to Prince2 Practitioner level Matrix people leadership both internally and externally Project control, planning and documentation Riskmanagement Resource management Financial management (vendor side experience of milestone completion, billing and change control) Contractual management Ability and willingness to take initiative toward project More ❯
Reading, Oxfordshire, United Kingdom Hybrid / WFH Options
Acuro Associates Ltd
will also be leading a team to implement complex enterprise software solutions into live mission critical healthcare environments, and be responsible for improving project efficiency and effectiveness, through project management process and tool improvements. Role responsibilities for the Senior Project Manager- Clinical Software: Project management of enterprise clinical software into the NHS Leading, monitoring and managing multiple projects … Ensuring all project management activities from end to end are looked after Risk, resource, and change management Financial control and executive stakeholder management Solution team management and matrix team/resource management across delivery, development, and third-party vendor teams Project documentation and status reports Host internal and external project meetings Team motivation and … of delivering clinical applications such as PACS, RIS, EPR, PAS, LIMS, ePMA Qualified to Prince2 Practitioner level Matrix people leadership both internally and externally Project control, planning and documentation Riskmanagement Resource management Financial management (vendor side experience of milestone completion, billing and change control) Contractual management Ability and willingness to take initiative toward project More ❯
Peterborough, Cambridgeshire, United Kingdom Hybrid / WFH Options
Acuro Associates Ltd
will also be leading a team to implement complex enterprise software solutions into live mission critical healthcare environments, and be responsible for improving project efficiency and effectiveness, through project management process and tool improvements. Role responsibilities for the Senior Project Manager- Clinical Software: Project management of enterprise clinical software into the NHS Leading, monitoring and managing multiple projects … Ensuring all project management activities from end to end are looked after Risk, resource, and change management Financial control and executive stakeholder management Solution team management and matrix team/resource management across delivery, development, and third-party vendor teams Project documentation and status reports Host internal and external project meetings Team motivation and … of delivering clinical applications such as PACS, RIS, EPR, PAS, LIMS, ePMA Qualified to Prince2 Practitioner level Matrix people leadership both internally and externally Project control, planning and documentation Riskmanagement Resource management Financial management (vendor side experience of milestone completion, billing and change control) Contractual management Ability and willingness to take initiative toward project More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Acuro Associates Ltd
will also be leading a team to implement complex enterprise software solutions into live mission critical healthcare environments, and be responsible for improving project efficiency and effectiveness, through project management process and tool improvements. Role responsibilities for the Senior Project Manager- Clinical Software: Project management of enterprise clinical software into the NHS Leading, monitoring and managing multiple projects … Ensuring all project management activities from end to end are looked after Risk, resource, and change management Financial control and executive stakeholder management Solution team management and matrix team/resource management across delivery, development, and third-party vendor teams Project documentation and status reports Host internal and external project meetings Team motivation and … of delivering clinical applications such as PACS, RIS, EPR, PAS, LIMS, ePMA Qualified to Prince2 Practitioner level Matrix people leadership both internally and externally Project control, planning and documentation Riskmanagement Resource management Financial management (vendor side experience of milestone completion, billing and change control) Contractual management Ability and willingness to take initiative toward project More ❯
Birmingham, West Midlands (County), United Kingdom Hybrid / WFH Options
Acuro Associates Ltd
will also be leading a team to implement complex enterprise software solutions into live mission critical healthcare environments, and be responsible for improving project efficiency and effectiveness, through project management process and tool improvements. Role responsibilities for the Senior Project Manager- Clinical Software: Project management of enterprise clinical software into the NHS Leading, monitoring and managing multiple projects … Ensuring all project management activities from end to end are looked after Risk, resource, and change management Financial control and executive stakeholder management Solution team management and matrix team/resource management across delivery, development, and third-party vendor teams Project documentation and status reports Host internal and external project meetings Team motivation and … of delivering clinical applications such as PACS, RIS, EPR, PAS, LIMS, ePMA Qualified to Prince2 Practitioner level Matrix people leadership both internally and externally Project control, planning and documentation Riskmanagement Resource management Financial management (vendor side experience of milestone completion, billing and change control) Contractual management Ability and willingness to take initiative toward project More ❯
ISO27001, IT Risk, IT Compliance, IT Controls, IT Audit, Policy. Governance, Security, Surrey area Your new company A specialist organisation in the Health/Medical sector offers hybrid working in this role based in North Surrey area. Your new role You will be working in the Risk team and will design, implement & maintain the Information Security Management System (ISMS) in accordance with ISO27001 in a company that manages highly sensitive data. You will support the firm's governance, addressing areas of risk and supporting plans to address these risks, including the compilation of business continuity plans (BCP). You will work closely with colleagues in IT to enhance the technology & control frameworks regarding information security … compliance & cyber threat security. Risk & Compliance You will lead the development, implementation, and continuous improvement of our Information Security Management System (ISMS) in line with ISO 27001 and other regulatory standards. Assessing security posture, identifying vulnerabilities, and developing mitigation strategies to manage enterprise-wide information security risks. Maintaining and enhancing the organisation's risk register and heat More ❯
deploying cutting-edge AI and Machine Learning solutions to solve complex challenges across our banking, financial services, and fintech operations. You will be instrumental in driving revenue growth, optimizing riskmanagement, enhancing customer experiences, and ensuring regulatory compliance on a global scale. Key Responsibilities End-to-End Model Development: Lead the entire ML lifecyclefrom problem framing, data exploration … learning algorithms (e.g., Gradient Boosting, NLP, Deep Learning, Graph Analytics, Reinforcement Learning) for use cases such as fraud detection, credit scoring, algorithmic trading, customer segmentation, and sentiment analysis. Stakeholder Management: Collaborate closely with business leaders (e.g., Risk, Marketing, Trading, Operations) to translate complex business problems into actionable data science projects with clear KPIs and ROI. Technical Leadership: Mentor … robust, scalable, and automated MLOps pipelines for continuous integration and delivery (CI/CD) of models. Regulatory Compliance & Governance: Ensure all models are developed in line with internal Model RiskManagement policies and external regulatory requirements (e.g., SR 11-7, GDPR, PSD2). Document model development processes thoroughly for internal and external audits. Innovation: Stay abreast of the More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Deerfoot Recruitment Solutions Ltd
IT Risk & Control Analyst Leading Financial InstitutionHybrid - 3 Days p/w in London£70k - £82k + Benefits + Bonus Join a leading financial institution as an AVP IT Risk & Control Analyst, where you'll play a key role in managing and enhancing technology risk frameworks, cybersecurity controls, and risk reporting. As a vital member of … the IT Risk and Control team, you will lead key control testing, develop and manage risk indicators, and support monthly governance activities. Working closely with Technology and business teams, your insights will drive continuous improvement in riskmanagement and help maintain compliance with regulatory standards.?????? What You'll Do: Perform and report on control testing to … evaluate cybersecurity and IT controls. Enhance risk frameworks and key risk indicators to support executive leadership in decision-making. Lead monthly governance activities and contribute to firm-wide risk initiatives. Collaborate with stakeholders to identify process gaps and recommend practical solutions. Communicate findings effectively to a range of audiences, including senior management. About You: Experience in IT More ❯
security, GRC & PCI-DSS payments experience to join our client's growing Cyber Security team. They need somebody who has excellent knowledge in PCI-DSS along with good governance, risk and compliance experience and familiarity with other standards. Experience Required: At least 2-3 years in a Cyber security & GRC role Be a PCI-DSS expert around payments ISO … 27001and GDPR Knowledge of RiskManagement, including risk identification, assessment, and mitigation techniques Good experience around Audits and compliance Any penetration testing experience would be a bonus You'll work closely with both internal and external stakeholders across Legal, Risk & Audit, Procurement, and IT to embed strong governance and maintain alignment with leading standards such as … NIST CSF, GDPR, and other relevant regulations. Partner with internal teams to integrate governance and compliance into daily operations. Support policy reviews, updates, and communication across business units. RiskManagement & Assurance Support risk identification, assessment, and treatment processes. Maintain risk registers and monitor remediation of control gaps and audit findings. Conduct risk assessments, control testing More ❯