1 to 25 of 65 Remote/Hybrid Risk Register Jobs in the UK

7.5% employee contribution 15% employer contribution Life Assurance: Up to 8 x salary Closing Date: 1st October 2026 About the Role: The Cyber Risk Manager plays a critical role in ensuring Sizewell C's cyber risks are identified, understood, prioritised and effectively managed. Reporting directly to the Chief Information … Security Officer (CISO), you will lead the organisation's cyber risk management framework, maintain oversight of the cyber risk landscape and ensure risks are managed in line with regulatory requirements and business objectives. Operating at the intersection of technology, security and business risk, you will translate complex ...

scale AI companionship platform. Day-to-day, the person will review code, drive vulnerability remediation with developers, coordinate pen tests and audits, maintain the risk register, monitor threats, manage device and access security, and track AI-specific risks such as prompt injection and jailbreaks. Day to day that … scale AI companionship platform. Day-to-day, the person will review code, drive vulnerability remediation with developers, coordinate pen tests and audits, maintain the risk register, monitor threats, manage device and access security, and track AI-specific risks such as prompt injection and jailbreaks. It is a fully ...

ensuring controls are accurately documented, supported by appropriate evidence and aligned to organisational risks and regulatory requirements. Working closely with cyber security, digital and risk management teams, you will help ensure controls remain effective, auditable and fit for purpose. This is an excellent opportunity for a cyber security professional … with experience in controls governance, risk management or security assurance to contribute to the protection of critical national infrastructure. Key Responsibilities: Controls Library Management Maintain the cyber security controls library, ensuring records remain accurate, complete and up to date. Process additions, amendments and retirements of controls through established governance ...

Description - Third Party Risk Analyst (Supplier Assurance) (17394) Job Description Third Party Risk Analyst (Supplier Assurance) ( 17394 ) Description Third Party Risk Analyst (Supplier Assurance) We are easyJet – a FTSE listed, £multi-billion low-cost airline that serves tens of millions of customers every single year. … Safe, Bold, Welcoming and Challenging. Four Behaviours. One Spirit. One easyJet. READ ON IF YOU Have experience in information security, IT audit, governance, risk and compliance, or supplier risk management. Enjoy analysing risk, engaging with stakeholders and helping drive meaningful improvements. Are confident communicating technical concepts ...

client, an essential services operator within the utilities and technology sectors, is seeking a Cyber Security Governance, Risk & Compliance Lead for a permanent position based in London with hybrid working. The role will support regulatory engagement, cyber resilience and compliance activities, helping to ensure alignment with NIS Regulations, NIS2 … frameworks Monitor emerging cyber security legislation, regulatory requirements and industry guidance, assessing their impact and recommending appropriate actions Maintain and review the Cyber Security Risk Register, ensuring threat scenarios, mitigations, treatment plans and governance arrangements remain current Support the governance and status reporting of the Cyber Security Roadmap ...

this role exists to set a consistent baseline and raise our security posture proactively rather than reactively. The Lead conducts security audits and risk assessments, sets and enforces baseline security standards, maintains our information security policy set, coordinates incident response, and supports data protection compliance in the jurisdictions where … network's systems and helps people across the network work securely. Core Responsibilities Security Governance, Audits, and Assessments Conduct regular security audits and risk assessments of network systems, applications and processes, and maintain a prioritized risk register Establish and maintain a security baseline across the network, aligned ...

London, Greater London | £80k - £90k per year Information Security Risk Analyst London/WFH to £90k Are you an Information Security professional with experience in risk assessment, security governance and control assurance? You could be progressing your career in an impactful role at a tech driven, global Asset … Manager with multiple billions of dollars under management. As an Information Security Risk Analyst you'll play a key role in implementing and strengthening security risk management, helping the business make informed decisions while maintaining robust security standards in a changing regulatory and technology landscape. You’ll assess ...

this role will embed security as an enabler. Security must be seamless, invisible and silent in enablement—delivering frictionless, secure user journeys while assuring risk, compliance and resilience. You will continue to embed security from the start of projects utilising SbD (Secure by Design) principles. In this fast-paced … . Chair the Cyber Security Assurance Board (CSAB) and manage the Security Assessment in Policing (SyAP) national submission and legal/ICO compliance. Risk Management & "Secure by Design": Embed risk-based decision‐making and Secure by Design (SbD) principles across all programmes. Govern the IT&D departmental risk ...

Presented by CNBC ABOUT THIS ROLE Apex Fintech Solutions is looking for a GRC Engineer to help build, scale, and operate our governance, risk, and compliance program. This is a hands‐on, technically minded role that blends traditional GRC responsibilities, including audits, risk management, policy, and due diligence … security data (SQL or platform‐native query languages) to validate control effectiveness and produce audit-ready evidence Maintain the organization’s control library, risk register, and policy/procedure repository Risk Management Support enterprise risk assessments, including identification, scoring, tracking, and remediation of risks Maintain third ...

collection sits with individual control owners; you monitor for gaps or failures and keep owners accountable, keeping Drata and the ISMS manual consistent. Governance & Risk Chair the Governance, Risk and Compliance Committee, owning the agenda and policy review cycle. Maintain the company risk register in Drata … report audit status, risk exposure, and control effectiveness to leadership and the board. Policy & Documentation Own the policy register in Drata, ensuring policies stay current and accurate, updating them in response to regulatory changes or operational changes, and advising leadership on required updates. Vendor & Third‐Party Risk ...

customers in identifying, assessing and managing cyber security and information assurance risks across complex digital, operational and high‐assurance environments. The role combines consultancy, risk assessment, security assurance, governance and stakeholder engagement. Work may span secure information exchange, cross-domain solutions, cloud services, networks, applications, data platforms and operational … systems. The postholder translates security obligations, business needs, threat information and technical evidence into clear risk‐based recommendations. The role suits a cyber security, risk, assurance or systems professional seeking broader customer‐facing responsibility across defence, government and critical national infrastructure. Key Responsibilities Conduct cyber security and information ...

where teams actually work, through leading the thinking on the AI governance control plane programme, to running the review path for novel and high-risk AI work jointly with client risk and security leaders. The ideal candidate brings deep expertise in AI governance frameworks and controls, AI security … published, self-serve guardrails that let citizen developers and engineering teams move fast within known limits — with review reserved for the novel and high-risk — and act as the thought leader shaping the AI governance control plane programme. Good governance here is measured by how rarely people have ...

Client Server Limited in London seeks an Information Security Risk Analyst to strengthen risk management across systems, projects, AI tools and third‐party suppliers. You will maintain the Information Security Risk Register with clear ownership, implement controls and drive remediation to closure, while reporting into risk ...

Title: Group AI Governance, Risk and Compliance Manager (DPO) Department: Group IT Location: London – Hybrid (plus multi-site travel as required) We are Strata! Strata Group is a collective of award-winning specialist agencies, united by one ambition: to help people and brands on a missioncreate meaningful, memorable … partner, uniting experts –giving them access to the right combination of people and capabilities for every challenge. Job Overview The Group AI Governance, Risk & Compliance Manager is responsible for establishing, maintaining and continuously improving the Group's governance, compliance, information security, data protection and AI governance frameworks. Acting ...

Tech Ops Function to support all aspects of Service Operations Management, focussing on service stability (Incident and Problem Management) and Service Performance (demand, capacity, risk and CSI) in support of delivering Digital Solution services across Leonardo’s business operations in the UK. This is a hybrid role and will … Solution services across the UK covering the following key areas; Performance Management Report on the consolidated budget allocated to Tech Ops Maintain a consolidated Risk Register for Tech Ops Manage and report on capacity, consolidated for all Service Providers Manage and report on service availability for all Service ...

Expenses policy. Reporting to: Head of Technology & Transformation The latest research shows that 2.7 million children and young people in the UK are at risk of hunger. When children are too hungry to learn, they struggle to concentrate, absorb information, or keep up with their peers. Magic Breakfast provides … delivering reliable and secure technology services. The postholder also leads the organisation’s approach to cyber security governance, ensuring appropriate policies, monitoring, compliance, and risk management processes are in place. As the organisation outsources day-to-day IT infrastructure and support, this role focuses on governance, oversight, and service ...

highly regulated engineering programme. This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management. Location: Barrow-in-Furness (Hybrid) Hybrid: Typically 1-2 days on-site per month Contract: 12 months Positions: 1 Rate: £63.21 PAYE/… line with programme plans and governance Developing Interim and Final Security Cases across programme phases Managing IA and security risks, including maintaining security/risk register contributions Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence Coordinating and managing IA Technical Queries and formal communications ...

condition of doing business for us. The role You will own security at Aptitude Software: product and cloud security, internal and corporate security, governance, risk and compliance, third-party and vendor security, business continuity and disaster recovery, and the security tooling estate. You will build these into one function … with the CPTO and reported to the executive team and board. Establish clear, simple security metrics and report them regularly Own the information security risk register and the information security committee agenda Own security policy end to end, including the vulnerability management, version support and secure development policies. ...

information on data governance activity, progress, risks, and outcomes. Record, track, and support the management of data incidents, including associated action plans, the Data Risk Register, and incident logs. Work with Data Owners, Data Stewards, Risk, Information Security, Compliance, and other governance functions to identify, elevate ...

MAIN DUTIES Information Security & Risk Management Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready. Provide proactive security and data protection … initiatives, change and ongoing projects, ensuring security-by-design and privacy-by-design requirements are embedded from design through implementation. Conduct information security risk assessments to identify, evaluate and prioritise threats and control gaps, ensuring effective controls are agreed, implemented, tracked to closure and reflected in the risk ...

Governance Working Group, bringing together representatives from operations, People, finance, and IT to embed a culture of data stewardship. Maintain a comprehensive data asset register and ensure all critical data flows are mapped and documented. Data Protection & GDPR Compliance Act as the organisation’s subject matter expert … enforced. Conduct periodic reviews of third‐party data processors to confirm ongoing compliance with contractual and regulatory obligations. Maintain the organisation’s supplier data risk register and elevate material risks to the CTO. Training, Awareness & Culture Design and deliver data governance and data protection training programmes ...

Management Identify schedule risks, constraints, and interdependencies early. Model mitigation scenarios and communication of impacts clearly to stakeholders. Feed schedule intelligence into broader project risk registers. Process & Best Practice Implement robust planning standards aligned with client expectations. Skills & Experience Required Strong experience in project planning and controls. Expert user ...

Travis Perkins plc is now hiring for a proactive and detail-oriented Governance, Risk, and Compliance (GRC) Infosec Manager (PCI) to join our central Information Security team. This is a high-visibility, specialised role focused on leading our Group-wide Payment Card Industry (PCI) compliance ecosystem. Reporting directly … will serve as the primary subject matter expert and point of contact for external Qualified Security Assessors (QSAs), while also contributing across wider cyber risk, third-party assurance, and data privacy governance. If you are a driven GRC professional with a strong grounding in PCI DSS standards, third-party ...

company locations may be required for meetings, audits or business needs. Your Duties and Responsibilities Maintain compliance trackers including DSAR logs, DPIA registers, risk registers and DSPT action plans Support the annual DSPT submission and maintain audit-ready evidence throughout the year Organise and maintain ...

into business processes. Monitor implementation and adoption, gathering feedback and recommending further improvements where required. Maintain project plans, action logs, progress records, milestones and risk registers. Coordinate internal resources and provide regular project updates. Produce clear documentation, including requirements, process maps, user guides, test evidence and training materials. Provide ...