Salford, Greater Manchester, North West, United Kingdom Hybrid/Remote Options
AJ BELL BUSINESS SOLUTIONS LIMITED
An exciting opportunity has arisen for an experienced risk professional to join our high performing Risk Team at our award winning investment platform. This role is ideal for someone who enjoys working closely with Technology functions and wants to make a real impact on how enterprise risk is understood, managed and embedded across a growing FTSE … business. As the primary Risk Team business partner for our Technology Services division, you will play a key role in supporting the delivery of our enterprise wide risk management framework. You will help ensure risks are identified, assessed and managed effectively, and contribute to a strong risk culture across the organisation. What the role involves: Partner with … Technology Services to embed the Group Risk Management Framework. Support the ongoing development of the framework across AJ Bell. Promote a positive risk culture and provide education and guidance on risk processes. Participate in risk forums to help strengthen first line risk maturity. Support and challenge risk owners on risk and control assessments. More ❯
Salford, Lancashire, England, United Kingdom Hybrid/Remote Options
AJ Bell
Job Description An exciting opportunity has arisen for an experienced risk professional to join our high performing Risk Team at our award winning investment platform. This role is ideal for someone who enjoys working closely with Technology functions and wants to make a real impact on how enterprise risk is understood, managed and embedded across a growing … FTSE 250 business. As the primary Risk Team business partner for our Technology Services division, you will play a key role in supporting the delivery of our enterprise wide risk management framework. You will help ensure risks are identified, assessed and managed effectively, and contribute to a strong risk culture across the organisation. What the role involves … Partner with Technology Services to embed the Group Risk Management Framework. Support the ongoing development of the framework across AJ Bell. Promote a positive risk culture and provide education and guidance on risk processes. Participate in risk forums to help strengthen first line risk maturity. Support and challenge risk owners on risk and More ❯
Bradford, Yorkshire, United Kingdom Hybrid/Remote Options
Yorkshire Water
updates and undertake administration duties of the WAND system working closely with colleagues in IT. You will ensure any future updates requested by regulators, management or operatives regarding the riskassessment process are appropriate and deliverable. You will also be required to assist and support your team and colleagues in water planning and engineering team during periods of … process of repeated poor performance or noncompliance from authors or approvers as determined by the audit. Youll also deliver training (where required) to authors and approvers of the WAND riskassessment database in line with protocol as well as (where required) refresher training for authors and approvers failing an audit. Youll drive the relevant processes for exceptional circumstances … methods are ineffective whilst considering all associated risks including SI, CML, DG3, WQ and Leakage. What skills & qualifications you will need: Knowledge and understanding/experience of the WAND riskassessment system. Ability to create a WAND document of exemplary quality in accordance to protocol and best practice. Knowledge and understanding of the WAND protocol. Knowledge and understanding More ❯
updates and undertake administration duties of the WAND system working closely with colleagues in IT. You will ensure any future updates requested by regulators, management or operatives regarding the riskassessment process are appropriate and deliverable. You will also be required to assist and support your team and colleagues in water planning and engineering team during periods of … process of repeated poor performance or noncompliance from authors or approvers as determined by the audit. Youll also deliver training (where required) to authors and approvers of the WAND riskassessment database in line with protocol as well as (where required) refresher training for authors and approvers failing an audit. Youll drive the relevant processes for exceptional circumstances … methods are ineffective whilst considering all associated risks including SI, CML, DG3, WQ and Leakage. What skills & qualifications you will need: Knowledge and understanding/experience of the WAND riskassessment system. Ability to create a WAND document of exemplary quality in accordance to protocol and best practice. Knowledge and understanding of the WAND protocol. Knowledge and understanding More ❯
London, South East, England, United Kingdom Hybrid/Remote Options
QBE Management Services (UK) Limited
Primary Details Time Type: Full time Worker Type: Employee The purpose of this role is to enhance riskassessment and decision-making processes through the provision of advanced risk modelling analytics. This is achieved through engaging with business stakeholders to define requirements and combining this Accumulation Management expertise and knowledge of data sets. Senior Cyber Catastrophe Risk … as a leading resource on cyber accumulations, providing expert guidance and insights to internal teams and external stakeholders. Collaborate with Global Cyber team other divisional stakeholders to develop effective risk mitigation strategies and optimize risk management processes. Collect, validate, and analyse large datasets related to cyber risks, ensuring data accuracy and reliability. Present findings in a clear and … QBE’s proprietary view of risk. Work closely with cross-functional teams, including Global Cyber team, underwriting, actuarial, and claims, to ensure a holistic understanding of the company's risk landscape. Communicate effectively with external stakeholders, including reinsurers and regulatory bodies, to maintain transparency and compliance with industry standards. Stay abreast of the latest developments in cyber modelling, riskMore ❯
cambridge, east anglia, united kingdom Hybrid/Remote Options
Telefonica Tech
Job Description IS Risk Manager – Contract (Inside IR35) 3-month contract (likely extension) | East Midlands | Mainly remote with occasional onsite Telefónica Tech is looking for an experienced IS Risk Manager to lead and mature the technology risk management function for our key Customer. This is a key role overseeing IT and OT risk across a large … complex digital estate, ensuring alignment with business objectives, regulatory requirements and ongoing transformation programmes. Role Overview You'll own and drive the Risk Management framework within the IS department, embedding a strong risk culture, improving processes, and ensuring technology risks are effectively identified, assessed, and governed. Working closely with the Group CISO, leadership teams and technical stakeholders, you … ll provide expert guidance, steer risk remediation, and ensure consistent governance across the organisation. Key Responsibilities Lead and develop the IS/IT/OT Risk Management framework and associated governance. Provide expert riskassessment, analysis and guidance across all IS functions. Track and report risk metrics, KPIs/KRIs, and progress against remediation plans. More ❯
Belfast, County Antrim, United Kingdom Hybrid/Remote Options
Adecco
this role could be perfect for you. Key Responsibilities: Policy Simplification Review: Engage in the review and revision of Markets Owned Documents to ensure clarity and compliance. Content Review & RiskAssessment: Support the evaluation of non-hierarchy documents, identifying potential risks and escalating them for further review. Document Oversight: Manage the Markets Document Repository, ensuring all non-hierarchy … documents are properly tracked and maintained. Risk Identification: Proactively identify potential risks associated with documentation and escalate as necessary. Report Maintenance: Create and maintain reports for control, tracking, and analysis purposes, ensuring secure retention of all documents. centralised Authoring Support: Provide assistance for the centralised Authoring process for Inventory Documents, as required. Policy Playbook Updates: Execute updates to the … looking for candidates who possess strong attention to detail, excellent organisational skills, and the ability to manage multiple projects simultaneously. The ideal candidate will have experience in document management, riskassessment, and policy development. If you are ready to take on this exciting challenge and make a difference within a leading organisation, we encourage you to apply today. More ❯
Horley, Surrey, United Kingdom Hybrid/Remote Options
X4 Group Ltd
Are you a cybersecurity professional with expertise in Cybersecurity RiskAssessment (CRA)? We have an initial 6-month OUTSIDE IR35 contract supporting a leading multinational Sensor technology client focused on securing their business and supply chain. The client are looking for the consultant to start on the 5th January 2025 hybrid working, both remote and from Crawley. The … and development process implementing 4-1 for CRA. Key Responsibilities: Lead and support secure supply chain management initiatives Drive compliance efforts across the wider organization Deliver a comprehensive Cybersecurity RiskAssessment (CRA) involving: Integration of Security Design (SD) elements Development and detailed analysis of threat models Ensuring strict adherence to critical industry standards including: IEC (phone number removed More ❯
Gatwick, West Sussex, England, United Kingdom Hybrid/Remote Options
X4 Group
Are you a cybersecurity professional with expertise in Cybersecurity RiskAssessment (CRA)? We have an initial 6-month OUTSIDE IR35 contract supporting a leading multinational Sensor technology client focused on securing their business and supply chain. The client are looking for the consultant to start on the 5th January 2025 hybrid working, both remote and from Crawley. The … and development process implementing 4-1 for CRA. Key Responsibilities: Lead and support secure supply chain management initiatives Drive compliance efforts across the wider organization Deliver a comprehensive Cybersecurity RiskAssessment (CRA) involving: Integration of Security Design (SD) elements Development and detailed analysis of threat models Ensuring strict adherence to critical industry standards including: IEC More ❯
Gatwick, Horley, Surrey, United Kingdom Hybrid/Remote Options
X4 Group Ltd
Are you a cybersecurity professional with expertise in Cybersecurity RiskAssessment (CRA)? We have an initial 6-month OUTSIDE IR35 contract supporting a leading multinational Sensor technology client focused on securing their business and supply chain. The client are looking for the consultant to start on the 5th January 2025 hybrid working, both remote and from Crawley. The … and development process implementing 4-1 for CRA. Key Responsibilities: Lead and support secure supply chain management initiatives Drive compliance efforts across the wider organization Deliver a comprehensive Cybersecurity RiskAssessment (CRA) involving: Integration of Security Design (SD) elements Development and detailed analysis of threat models Ensuring strict adherence to critical industry standards including: IEC (phone number removed More ❯
london, south east england, united kingdom Hybrid/Remote Options
Updraft
featured on the Sifted 100 UK startups - among only 25 companies to have made the list over both years 2024 and 2025. We are seeking a skilled Consumer Credit Risk Strategy Analyst with 3+ years of experience in the UK credit markets, specifically within personal loans for debt consolidation. The successful candidate will play a critical role in assessing … monitoring, and optimising credit risk strategies to ensure a balanced approach between risk management and business growth. Key Responsibilities: Conduct portfolio analytics to assess risk trends, customer behaviour, and loan performance. Analyse credit data, customer profiles, and market trends to enhance underwriting criteria. Work closely with stakeholders to optimise credit policies and improve lending strategies. Utilise statistical … and machine learning techniques to support data-driven riskassessment methodologies. Monitor key performance indicators (KPIs) related to loan approvals, delinquencies, and charge-offs. Requirements Required Skills & Experience: 3+ years of experience in a credit risk role, preferably within personal loans and debt consolidation in the UK. Strong understanding of credit scoring models, risk analytics, and More ❯
London, South East, England, United Kingdom Hybrid/Remote Options
VIQU IT Recruitment
month contract – London/Remote My Customer is seeking an experienced Senior Security Consultant to take a leading role in the end-to-end (Design, implementation) delivery of Governance, Risk & Compliance (GRC) and IT simplification initiatives. The Senior Security Consultant would be working at the heart of major programmes – including designing and implementing Security frameworks around cloud (Azure) migrations … influencing and communicating with stakeholders at all levels. Hands-on experience designing and supporting ISMS governance and security implementation across large programmes of work. Practical experience creating and conducting risk assessments, including project risk and third-party/vendor risk. Solid understanding of security frameworks and assessment methodologies (e.g., ISO 27001, NIST, CSA, CIS). Exposure to … project environments with competing priorities. Key Responsibilities for the Senior Security Consultant: Information Security - Ensure all project work and vendor engagements follow internal security policies, standards, and processes. Security RiskAssessment - Assess security, privacy, and compliance risks across internal projects and third-party suppliers IT Simplification and Cloud migration – Ensure security considerations are fully integrated into Azure migration More ❯
kirklees, yorkshire and the humber, united kingdom Hybrid/Remote Options
Wavenet
scheduled, and reviewed in line with ITIL best practices. Facilitate Collaboration: Chair and facilitate Change Advisory Board (CAB) meetings, engaging all stakeholders and creating a culture of open communication. Risk and Impact Assessment: Evaluate change requests for risk, impact, priority, and readiness to support informed decision-making. Policy Compliance: Ensure adherence to change policies and governance frameworks … For: Experience: Previous experience as a Change Manager, Release Manager, or within IT Service Management. ITIL Knowledge: Strong understanding of Change and Release Management processes within the ITIL framework. RiskAssessment Skills: Proven ability to evaluate the risk and impact of changes across infrastructure, applications, and services. Stakeholder Engagement: Experience in facilitating CAB meetings and effectively engaging … Key Competencies: Organisational Skills: Strong governance skills with a keen attention to detail. Communication Excellence: Outstanding communication abilities with a focus on stakeholder engagement. Analytical Mindset: Ability to assess risk and make informed decisions based on data. Resilience: Capacity to thrive under pressure in a fast-paced environment. Leadership: Strong facilitation and leadership skills to guide stakeholders through the More ❯
London, South East, England, United Kingdom Hybrid/Remote Options
Hays Specialist Recruitment Limited
Group IT & Cyber Security, Risk and Governance Manager - Global, CISSP Up to £900 per day (Inside IR35) London/Hybrid (Must be UK Based) 6 Months initial contract My client is a high profile, instantly recognisable brand, who urgently require a Group IT & Security, Risk and Governance Manager who has worked in a Global, Group-wide set-up … and exceptional stakeholder management skills (up to and including C-Suite/Board level). Key Requirements: Proven experience as a Group IT & Security, Risk and Governance Manager within a large, complex organisation with a Global (muti-region) set-up Demonstrable experience of working on a Global scale, managing different regions (EMEA/Western Europe preferred) and key stakeholders … Previous experience of working in a Technology Group function, consisting of several market units governed centrally Relevant Professional Certifications (CISSP/CISM/CRISC) Expert in how to do Risk Management, including putting together Risk heat maps Exceptional Stakeholder Management and communication skills Capability to build the IT & Cyber process and move it on Strong understanding of IT More ❯
Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid/Remote Options
Cathcart Technology
role in evaluating security risks across projects, technology initiatives, and third-party suppliers. This is a chance to influence how a global firm approaches security governance, vendor assurance, and risk management. You'll operate in a complex, cloud-driven environment where safeguarding data, maintaining compliance, and ensuring robust security controls are essential to business operations. The Company The organisation … throughout the company. There is a strong emphasis on cloud adoption, modernisation, and automation, and they are committed to building a secure, future-ready environment. It's IT and risk teams collaborate closely with stakeholders across the business to ensure projects, platforms, and third-party partnerships are delivered securely and in line with best practice. The Role As an … Information Security Consultant, you'll assess the security impact of new initiatives, review third-party providers, and help guide stakeholders through risk and compliance requirements. You'll be involved in shaping and maintaining the organisation's security assessment practices, ensuring projects and suppliers meet internal standards and recognised industry frameworks. You will: ** Carry out project and supplier security More ❯
Hereford, Herefordshire, England, United Kingdom Hybrid/Remote Options
QA
About SPS: Special Projects and Services Limited (SPS) is a UK-based security and risk management company founded in 1991. Operating globally, SPS provides crisis response, riskassessment, medical operations support, and project management in high-risk or complex environments. Known for its expertise in global assistance and specialist security operations, SPS was acquired by Concentric … in 2025, strengthening its position as a trusted provider of integrated risk and crisis management solutions. Overview: You will support the delivery of IT services across the UK business, assisting with technical support, device management, and ongoing tech ops projects. This role provides structured, hands-on training in IT systems administration, cyber security, and compliance, contributing to the smooth … Assistance Program for personal needs. Enrolment into the pension scheme to which SPS contributes 3% of your salary. Credentity protection - Eclipse Digital Protection by Concentric. Free access to our Risk Intelligence Dashboard and GEAR App. Providing 24/7 access to trusted risk intelligence and remote support, helping you stay informed, prepared, and protected wherever you operate. Dedicated More ❯
london, south east england, united kingdom Hybrid/Remote Options
DAINTTA
develop your skillset in a fast-paced, collaborative and supportive environment. As a Cyber Strategy Analyst at Daintta, you will contribute to the development of cybersecurity strategies by supporting risk assessments, analysing business processes, and helping implement practical security controls. You'll gain hands-on experience translating technical insights into business-focused recommendations, while building foundational knowledge in cyber … under the guidance of senior consultants. Stakeholder Engagement: Help prepare for and document stakeholder meetings, workshops, and interviews. Learn to understand client challenges and contribute to building trusted relationships. Risk & Maturity Analysis: Support the execution of risk assessments and maturity reviews by gathering data, analysing findings, and helping to identify potential improvements to cybersecurity posture. Clear Communication: Contribute … to analysis, documentation, and delivery. Client Focus: Professionalism and empathy when engaging with stakeholders and understanding their needs. Nice to Have Experience/Knowledge Understanding of Cyber Security principles Riskassessment Familiarity with Cyber Frameworks (e.g. NIST, ISO Translating technical risks into business impact Benefits We believe in supporting our people both professionally and personally. Here's what More ❯
Peregrine House, 335 Kings Acre Road, Hereford, England Hybrid/Remote Options
SPECIAL PROJECTS & SERVICES LTD
Essential) Maths & English GCSE, grade 3+ (D or above) (Essential) About the Employer SPECIAL PROJECTS & SERVICES LTD Special Projects and Services Limited (SPS) is a UK-based security and risk management company founded in 1991. Operating globally, SPS provides crisis response, riskassessment, medical operations support, and project management in high-risk or complex environments. Known … for its expertise in global assistance and specialist security operations, SPS was acquired by Concentric in 2025, strengthening its position as a trusted provider of integrated risk and crisis management solutions. More ❯
Camberley, Surrey, South East, United Kingdom Hybrid/Remote Options
Morson Edge
of our clients Product Security Engineering teams, supporting the delivery and through-life management of secure submarine systems and products. As a key focal point for security and information risk, you'll apply deep technical expertise to ensure that solutions are designed, delivered, and supported securely, safely, and in compliance with contractual and regulatory requirements. You'll provide subject … policies, and best practices across major defence programmes. Key Responsibilities Provide expert advice on Product Security to engineering and project teams. Analyse system architectures to identify threats, vulnerabilities, and risk mitigation strategies. Develop and manage Product Security analysis using recognised riskassessment techniques. Contribute to the development of Product Security strategies, policies, and guidance. Recommend and present … programmes and provide technical leadership to junior engineers. Support incident management and contribute to key project documentation including RMADS, Security Strategies, and accreditation evidence. Key Deliverables & Accountabilities Delivery of Risk Management Accreditation Document Sets (RMADS) and associated security documentation. Ensuring compliance with contractual and regulatory security requirements. Providing specialist input to verification, qualification, and design review processes. Contribution to More ❯
Hereford, Herefordshire, England, United Kingdom Hybrid/Remote Options
TXP Technology x People
various stakeholders to foster a security-conscious culture. Key Deliverables: Align the business' security stance to comply with ISO 27001and Cyber Essentials Plus, or in accordance with the Cyber Assessment Framework Improve the Cyber Awareness within the company via communications, Cyber Awareness training and monitoring of Staff compliance Enhance and maintain a high Microsoft 365 secure score by implementing … Microsoft advisories Identify, assess, and mitigate security risks to the organisation's data and infrastructure Oversee the creation and document management of polices and standards Complete a full assessment of all third-party applications Provide regular security reports to the CISO as required Advise the CISO, IT Team and the wider business on matters relating to cyber security Skills … environments, including the ability to assess third-party platforms, suppliers, and software for security risks Proven experience in developing and implementing information security policies, procedures, and controls. Familiarity with riskassessment methodologies and tools Regulated background essential Experience in managing information security incidents and conducting investigations Excellent communication and interpersonal skills, with the ability to effectively collaborate with More ❯
Hereford, Herefordshire, England, United Kingdom Hybrid/Remote Options
TXP Technology x People
stakeholders to foster a security-conscious culture. Key Deliverables: Align the business' security stance to comply with ISO 27001 and Cyber Essentials Plus, or in accordance with the Cyber Assessment Framework Improve the Cyber Awareness within the company via communications, Cyber Awareness training and monitoring of Staff compliance Enhance and maintain a high Microsoft 365 secure score by implementing … Microsoft advisories Identify, assess, and mitigate security risks to the organisation's data and infrastructure Oversee the creation and document management of polices and standards Complete a full assessment of all third-party applications Provide regular security reports to the CISO as required Advise the CISO, IT Team and the wider business on matters relating to cyber security Skills … environments, including the ability to assess third-party platforms, suppliers, and software for security risks Proven experience in developing and implementing information security policies, procedures, and controls. Familiarity with riskassessment methodologies and tools Desirable: Experience of working within Defence, UK government and/or a commercial security supplier Professional certifications in information security, such as CISSP or More ❯
Wotton-Under-Edge, Gloucestershire, South West, United Kingdom Hybrid/Remote Options
Renishaw PLC
regulations, including the Cyber Resilience Act. Responsibilities Assess, establish and maintain clear guidelines and best practices for secure coding, vulnerability management, and incident response Develop and maintain product security riskassessment processes, providing support and guidance to project teams Develop scanning and review processes to discover security vulnerabilities and devise mitigation strategies, as well as report and resolve …/Masters degree or equivalent work experience in Computer Science, Information Security, Business, or a related field circa 3 years of work experience in cybersecurity, especially in an information risk analysis, security engineering or security architecture role Key requirements Experience in performing penetration testing, secure code review, software composition analysis, static, dynamic and manual code review Experience identifying and … remediating common vulnerabilities, such as OWASP Top 10 Hands-on experience with security scanning tools Proven experience in secure coding practices and vulnerability assessment Experience securing hardware products controlled by software would be an advantage Experience applying AI to security and development use cases Familiar with threat modelling frameworks, and having experience with automated tools Knowledge and skills Excellent More ❯
North Yorkshire, England, United Kingdom Hybrid/Remote Options
Robert Half
with strategic objectives, regulatory requirements, and operational goals. Key Responsibilities: Project Leadership & Execution: * Lead the end-to-end project lifecycle of warehouse consolidation across Europe, including initiation, project planning, risk management, resource allocation, and execution. * Collaborate with internal teams and external vendors to optimise warehouse operations, layouts, and workflows. * Oversee the development and implementation of warehouse management systems (WMS … to lead large-scale warehouse consolidation processes, including vendor contract management and resource planning. * Experience with Warehouse Management Systems (WMS) selection, implementation, or upgrades. * Strong project management skills, including riskassessment, budget management, and interdependency tracking. * Excellent communication, stakeholder engagement, and influencing abilities across internal and external audiences. * Proficient in project management tools like MS Project or similar More ❯
Wigan, Greater Manchester, North West, United Kingdom Hybrid/Remote Options
Police Digital Services
ensure value for money. The National Management Centre (NMC) is a core part of Police Digital Service (PDS), providing 24/7/365 cyber threat detection, response, and risk management capabilities across UK policing. We help forces proactively understand and mitigate cyber risks at both national and local levels. Why Join us? Balance is important and we want … experience of taking a technical lead role in support of the response to a cyber incidents. Strong experience hunting and tracking targeted threats. Strong grasp of threat modelling and riskassessment frameworks. Skilled in OSINT collection and analysis. Demonstrated leadership in a threat hunting team, including mentoring and service development. Excellent communication skills - able to translate complex threats More ❯
Coventry, West Midlands, United Kingdom Hybrid/Remote Options
Coventry Building Society
aligning with regulatory changes and business growth as well as being responsible for defining and designing AML & Sanctions detection controls for new or amended products and propositions. Applying model risk management principles where relevant, this role includes the ownership of the continuous monitoring program for relevant AML and Sanction technology controls, ensuring they remain effective whilst demonstrating effective model … corruption, and regulatory requirements Leadership & Stakeholder Management: Ability to lead teams and collaborate with senior stakeholders, regulators, and law enforcement Analytical & Problem-Solving Skills: Strong data analysis, investigative, and riskassessment capabilities Regulatory Knowledge: Understanding of FCA, PRA, AML/CTF, and sanctions regulations in financial services Technology Proficiency: Experience with financial crime detection systems, AI, and data … us before you apply to see what the possibilities are for this role. Proud to be a Disability Confident Committed Employer We're proud to offer an interview or assessment to every disabled applicant who meet the minimum criteria for our vacancies. As part of the application process, disabled applicants can opt in for the Disability Confident Interview Scheme. More ❯