1 to 25 of 104 Risk Assessment Jobs in the UK excluding London

employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Technology & Operations Risk Manager | S3 | Chief Information & Resilience Office | Multiple Locations Country: United Kingdom IT STARTS HERE Santander (www.santander.com) is evolving from a global, high-impact brand … learn, and make a real difference . Our mission is to contribute to help more people and businesses prosper . We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management. Santander Digital Services ...

edge technologies that deliver clean, safe and competitive solutions to meet the planet's vital power needs we are looking for a Security Auditor & Risk Assessor for a 12 month contract based in Derby . Please note this role is hybrid position in which you would be required … days per week and work from home 2 days per week Purpose of the role: You will lead and perform independent security audits and risk assessments to identify vulnerabilities, control weaknesses, and policy non-compliance across IT systems, applications, and third-party environments, whilst evaluating risk exposure ...

DESCRIPTION Join a role that's central to our technological resilience, offering a unique opportunity to shape the firm’s tech risk strategy and enhance industry compliance. As a Technology Risk and Controls Lead within our Cloud Foundational Services Function, you will be passionate about operational risk … regions and locations to respond to evolving business requirements and emerging threats. You will leverage your expert knowledge of today’s ever-changing technology risk landscape and controls environment to advise and support IT operations across the firm. You will partner with process owners to respond to internal ...

mitigate identified cyber risks, aligning them with business objectives and regulatory requirements. Work closely with IT and UK business units to ensure that risk mitigation actions are practical and do not unnecessarily hinder business operations. Engage with senior leadership, including the UK Chief Operating Officer (COO), to provide regular … updates on the organization's cyber risk posture. Collaborate with key business units and external stakeholders to ensure an aligned approach to risk management across the enterprise. Provide detailed risk reporting to the UK Risk Committee and relevant Board governance bodies. Ensure that Cyber & IT risk ...

Join a role that’s central to our technological resilience, offering a unique opportunity to shape the firm’s tech risk strategy and enhance industry compliance. As a Tech Risk & Controls Director in Global Standards and Control Lifecycle Management, you will play a pivotal role in shaping … implementing the firm’s technology risk management strategy. Leveraging your advanced knowledge and expertise in technology‐risk disciplines, you will identify, oversee, and mitigate compliance and operational risks in line with the firm’s standards. You will collaborate with various stakeholders, including Product Owners, Business Control Managers ...

policy and regulatory frameworks Lead technical security design across infrastructure, cloud and application environments Collaborate with SMEs across Identity, Security Testing and Privacy Conduct risk assessments and support threat modelling activities Provide clear justification of design decisions to both technical and non-technical stakeholders Ensure alignment to industry standards … Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with security tooling such as SIEM, IDS, firewalls and vulnerability assessment tools Knowledge of threat modelling and risk assessment TO BE CONSIDERED: Please either apply through this advert or emailing me directly ...

this role, you'll be: Providing the Secure by Design risk and security assurance function within MOD or Public Sector as part of a managed service. Have an excellent understanding of risk management and assessment principles and frameworks, such as ISO27005 and the NIST Cyber Security Framework. … Work with multi-disciplinary teams, helping to ensure that products are delivered in a secure manner that is aligned with the wider business risk appetite. Produce informative and succinct reporting that clearly articulates any identified vulnerabilities, associated risks, controls and risk treatment activity. Facilitate security and risk ...

Analyse pay outcomes across protected characteristics (gender, ethnicity, disability) and other demographics where data allows. Identify statistically and practically significant pay gaps, trends, and risk areas. Assess differentials to determine whether they are explainable, potentially objectively justified, or indicative of equal pay risk requiring further investigation. Support … analytical frameworks. Work closely with the Project Lead and JE SME to interpret findings in an organisational context. Contribute to data validation and cleansing, risk assessment outputs, and final reporting and action planning. Produce clear, auditable analytical outputs, including data tables and reproducible methodologies. Ensure transparency around assumptions ...

critical part in enabling the responsible use of personal data while ensuring robust control of privacy risks. Operating at the intersection of business strategy, risk management, and regulatory compliance, the role requires strong risk triage capability, the ability to challenge and influence stakeholders, and a clear focus … business-aligned solutions using structured governance frameworks and tools such as GRC Archer, ensuring that privacy risks are identified, prioritised, and managed effectively.Core ResponsibilitiesPrivacy Risk Triage & Advisory Rapidly assess, prioritise and triage complex privacy risks across business initiatives, ensuring proportionate and risk-based decision-making. Provide expert, pragmatic ...

Role Overview We are seeking a Senior Security Design Consultant to provide expert cyber security consultancy, security design assurance and risk-based guidance across business and technology change. The role is responsible for assessing new and amended services, applications, cloud platforms and third-party solutions to ensure security risks … understood, controlled and aligned to organisational risk appetite, regulatory obligations and industry best practice. Key Responsibilities Core Responsibilities Lead security design reviews, threat modelling and risk assessments for applications, infrastructure, cloud services and third-party solutions. Define and recommend proportionate security controls, patterns and design guardrails aligned ...

Contract Duration- 6 Months Key Responsibilities We are seeking a Senior Security Design Consultant to provide expert cyber security consultancy, security design assurance and risk-based guidance across business and technology change. The role is responsible for assessing new and amended services, applications, cloud platforms and third-party solutions … ensure security risks are understood, controlled and aligned to organisational risk appetite, regulatory obligations and industry best practice. Key Responsibilities Core Responsibilities Lead security design reviews, threat modelling and risk assessments for applications, infrastructure, cloud services and third-party solutions. Define and recommend proportionate security controls, patterns ...

Fixed term contract role Role Overview We are seeking a Senior Security Design Consultant to provide expert cyber security consultancy, security design assurance and risk-based guidance across business and technology change. The role is responsible for assessing new and amended services, applications, cloud platforms and third-party solutions … ensure security risks are understood, controlled and aligned to organisational risk appetite, regulatory obligations and industry best practice. Key Responsibilities Lead security design reviews, threat modelling and risk assessments for applications, infrastructure, cloud services and third-party solutions. Define and recommend proportionate security controls, patterns and design guardrails ...

Fixed term contract role Role Overview We are seeking a Senior Security Design Consultant to provide expert cyber security consultancy, security design assurance and risk-based guidance across business and technology change. The role is responsible for assessing new and amended services, applications, cloud platforms and third-party solutions … ensure security risks are understood, controlled and aligned to organisational risk appetite, regulatory obligations and industry best practice. Key Responsibilities Lead security design reviews, threat modelling and risk assessments for applications, infrastructure, cloud services and third-party solutions. Define and recommend proportionate security controls, patterns and design guardrails ...

Fixed term contract role Role Overview We are seeking a Senior Security Design Consultant to provide expert cyber security consultancy, security design assurance and risk-based guidance across business and technology change. The role is responsible for assessing new and amended services, applications, cloud platforms and third-party solutions … ensure security risks are understood, controlled and aligned to organisational risk appetite, regulatory obligations and industry best practice. Key Responsibilities Lead security design reviews, threat modelling and risk assessments for applications, infrastructure, cloud services and third-party solutions. Define and recommend proportionate security controls, patterns and design guardrails ...

Regulatory requirements Support the Business in Quality associated matters associated with product or process. Support/carry out activities associated with "Quality planning", "Risk assessment" and "Risk/analysis activities Lead engagement with suppliers on Non-conformance activities Discharge Quality processes associated with the scope …/Process Failure Mode Effects Analysis (PFMEA) Data Analytics and business reporting Desirable - working knowledge of welding/machining or casting but not essential Risk Management Skills: To a level expected of grade/responsibilities and aligned to "Quality Developing You" Framework Soft Skills Leadership, Communication Creative thinking Dependability ...

working closely with the Information Governance lead and DPO. They ensure compliance with the Data Security and Protection Toolkit (DSPT) aligned with the Cyber Assessment Framework (CAF) and delivery of the NHS Cyber Security Strategy to 2030 and full participation in the regional "Defend as One" model. The role … possess deep technical and governance expertise across areas such as threat detection, vulnerability management and incident response, with the ability to translate complex technical risk into clear, articulate, actionable information for senior executives and boards with assurance and confidence. They will demonstrate a thorough understanding of national and international ...

opportunity to take responsibility for information security governance in a regulated business where ISO 27001, data protection, supplier assurance, audit readiness and risk management all matter. You'll be the internal point of expertise for information security, owning the ISMS and helping shape how information security is understood, managed … improved as the business continues to grow. The role sits between compliance, risk, governance and technical security. It is not a hands-on IT infrastructure role, and it is not a pure cyber operations position, but you will need enough technical understanding to work effectively with IT stakeholders, define ...

opportunity to take responsibility for information security governance in a regulated business where ISO 27001, data protection, supplier assurance, audit readiness and risk management all matter. You'll be the internal point of expertise for information security, owning the ISMS and helping shape how information security is understood, managed … improved as the business continues to grow. The role sits between compliance, risk, governance and technical security. It is not a hands-on IT infrastructure role, and it is not a pure cyber operations position, but you will need enough technical understanding to work effectively with IT stakeholders, define ...

automation, capacity planning and monitoring tools including introducing such tooling. Threat Landscape: Deep understanding of common networking attack vectors and defense-in-depth strategies. Risk & Compliance: Board understanding of risk assessment methodologies, control frameworks (ISO 27001, NIST CSF, CIS Controls). SKILLS Analytical & Detail-Oriented: Keen … anomalies; precise documentation and follow-through. Communication: Clear written and verbal communicationtranslating technical detail into business-friendly risk insights. Collaboration: Works well with Infrastructure, Application, and Business teams; influences without authority. Self-Motivation: Proactive ownership; drives tasks to completion with minimal supervision. Process Discipline: Organizes workload, meets deadlines ...

Consultant to join our team. This is a senior advisory role - you will provide expert guidance across security architecture review, threat modelling, and AI risk assessment, working closely with project teams, technology leads, and senior business stakeholders to ensure security risk is understood and addressed at every … levels - from project teams to senior leadership. Lead threat modelling exercises across programs and key systems, translating findings into clear, business-relevant risk statements for non-technical audiences. Conduct security architecture reviews, assessing proposals and designs against NIST CSF, COBIT, and internal standards. Conduct risk assessments ...

management support, ensuring the delivery of tasks to time, cost, and quality standards. Lead the planning, execution, and monitoring of projects, including resource management, risk assessment, and progress reporting. Apply agile and waterfall methodologies (Scrum, SAFe) and hybrid frameworks to drive consistency and efficiency. Act as Scrum Master … required. (Predominantly South and South-West Regions), and the opportunity for occasional international travel. Desirable Technical specialism in aspects of project management e.g. risk management, benefits assessment/realisation, stakeholder analysis, requirements management, Cost budgeting and forecasting. Familiarity with frameworks such as Lean, or Six Sigma. What ...

management support, ensuring the delivery of tasks to time, cost, and quality standards. Lead the planning, execution, and monitoring of projects, including resource management, risk assessment, and progress reporting. Apply agile and waterfall methodologies (Scrum, SAFe) and hybrid frameworks to drive consistency and efficiency. Act as Scrum Master … required. (Predominantly South and South-West Regions), and the opportunity for occasional international travel. Desirable Technical specialism in aspects of project management e.g. risk management, benefits assessment/realisation, stakeholder analysis, requirements management, Cost budgeting and forecasting. Familiarity with frameworks such as Lean, or Six Sigma. What ...

Requirement 4 Provide security assurance support for complex programmes, service transitions, and higher-classification environments in line with SoR Requirement 1 Contribute to risk management activities, including RAID logs and programme risk registers Coordinate Security Improvement Plans and support the implementation of security controls Engage with programme teams … Assist in maintaining consistent assurance practices across multiple workstreams and programmes Relevant Experience Minimum 5 years' experience in security assurance, cyber security governance, or risk management roles Strong understanding of: JSP453 JSP440 DEFSTAN 05-138 Experience working within Defence environments or programmes Demonstrable experience supporting security assurance activities within ...

organisation employs circa 70 people and punches well above its weight in terms of commercial reach and industry influence. The Opportunity As Business Continuity, Risk, Compliance and Resilience Lead, you will design, implement and own an integrated framework that strengthens IT security and operational resilience across the business. This … practitioner role you will be the person writing the plans, running the exercises, carrying out the assurance work and managing supplier risk directly. There are no direct reports; this role suits someone who gets things done themselves rather than directing others to do it, and who is energised ...

Information Security policies, standards and procedures in line with ISO/IEC 27000, promoting a secure by design culture informed by business impact assessments, risk appetite and regulatory requirements. Serve as the Cyber Security representative on major programmes and product teams, providing authoritative guidance and approvals to ensure secure … selection, implementation and assurance of security controls, ensuring alignment with NIS2, aerospace standards, export controls and emerging AI regulatory expectations. Advise stakeholders on risk reduction strategies, promote secure behaviours and support security awareness initiatives to strengthen secure by design engineering and decision making. Identify, assess and manage cyber security ...