1 to 25 of 31 Remote/Hybrid Risk Register Jobs in the UK excluding London

Description - Third Party Risk Analyst (Supplier Assurance) (17394) Job Description Third Party Risk Analyst (Supplier Assurance) ( 17394 ) Description Third Party Risk Analyst (Supplier Assurance) We are easyJet – a FTSE listed, £multi-billion low-cost airline that serves tens of millions of customers every single year. … Safe, Bold, Welcoming and Challenging. Four Behaviours. One Spirit. One easyJet. READ ON IF YOU Have experience in information security, IT audit, governance, risk and compliance, or supplier risk management. Enjoy analysing risk, engaging with stakeholders and helping drive meaningful improvements. Are confident communicating technical concepts ...

this role will embed security as an enabler. Security must be seamless, invisible and silent in enablement—delivering frictionless, secure user journeys while assuring risk, compliance and resilience. You will continue to embed security from the start of projects utilising SbD (Secure by Design) principles. In this fast-paced … . Chair the Cyber Security Assurance Board (CSAB) and manage the Security Assessment in Policing (SyAP) national submission and legal/ICO compliance. Risk Management & "Secure by Design": Embed risk-based decision‐making and Secure by Design (SbD) principles across all programmes. Govern the IT&D departmental risk ...

Presented by CNBC ABOUT THIS ROLE Apex Fintech Solutions is looking for a GRC Engineer to help build, scale, and operate our governance, risk, and compliance program. This is a hands‐on, technically minded role that blends traditional GRC responsibilities, including audits, risk management, policy, and due diligence … security data (SQL or platform‐native query languages) to validate control effectiveness and produce audit-ready evidence Maintain the organization’s control library, risk register, and policy/procedure repository Risk Management Support enterprise risk assessments, including identification, scoring, tracking, and remediation of risks Maintain third ...

customers in identifying, assessing and managing cyber security and information assurance risks across complex digital, operational and high‐assurance environments. The role combines consultancy, risk assessment, security assurance, governance and stakeholder engagement. Work may span secure information exchange, cross-domain solutions, cloud services, networks, applications, data platforms and operational … systems. The postholder translates security obligations, business needs, threat information and technical evidence into clear risk‐based recommendations. The role suits a cyber security, risk, assurance or systems professional seeking broader customer‐facing responsibility across defence, government and critical national infrastructure. Key Responsibilities Conduct cyber security and information ...

Tech Ops Function to support all aspects of Service Operations Management, focussing on service stability (Incident and Problem Management) and Service Performance (demand, capacity, risk and CSI) in support of delivering Digital Solution services across Leonardo’s business operations in the UK. This is a hybrid role and will … Solution services across the UK covering the following key areas; Performance Management Report on the consolidated budget allocated to Tech Ops Maintain a consolidated Risk Register for Tech Ops Manage and report on capacity, consolidated for all Service Providers Manage and report on service availability for all Service ...

highly regulated engineering programme. This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management. Location: Barrow-in-Furness (Hybrid) Hybrid: Typically 1-2 days on-site per month Contract: 12 months Positions: 1 Rate: £63.21 PAYE/… line with programme plans and governance Developing Interim and Final Security Cases across programme phases Managing IA and security risks, including maintaining security/risk register contributions Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence Coordinating and managing IA Technical Queries and formal communications ...

information on data governance activity, progress, risks, and outcomes. Record, track, and support the management of data incidents, including associated action plans, the Data Risk Register, and incident logs. Work with Data Owners, Data Stewards, Risk, Information Security, Compliance, and other governance functions to identify, elevate ...

Governance Working Group, bringing together representatives from operations, People, finance, and IT to embed a culture of data stewardship. Maintain a comprehensive data asset register and ensure all critical data flows are mapped and documented. Data Protection & GDPR Compliance Act as the organisation’s subject matter expert … enforced. Conduct periodic reviews of third‐party data processors to confirm ongoing compliance with contractual and regulatory obligations. Maintain the organisation’s supplier data risk register and elevate material risks to the CTO. Training, Awareness & Culture Design and deliver data governance and data protection training programmes ...

Travis Perkins plc is now hiring for a proactive and detail-oriented Governance, Risk, and Compliance (GRC) Infosec Manager (PCI) to join our central Information Security team. This is a high-visibility, specialised role focused on leading our Group-wide Payment Card Industry (PCI) compliance ecosystem. Reporting directly … will serve as the primary subject matter expert and point of contact for external Qualified Security Assessors (QSAs), while also contributing across wider cyber risk, third-party assurance, and data privacy governance. If you are a driven GRC professional with a strong grounding in PCI DSS standards, third-party ...

company locations may be required for meetings, audits or business needs. Your Duties and Responsibilities Maintain compliance trackers including DSAR logs, DPIA registers, risk registers and DSPT action plans Support the annual DSPT submission and maintain audit-ready evidence throughout the year Organise and maintain ...

into business processes. Monitor implementation and adoption, gathering feedback and recommending further improvements where required. Maintain project plans, action logs, progress records, milestones and risk registers. Coordinate internal resources and provide regular project updates. Produce clear documentation, including requirements, process maps, user guides, test evidence and training materials. Provide ...

overarching strategic objectives and benefits. Strong stakeholder engagement skills, including working confidently with senior leaders, partners and suppliers. Experience developing programme plans, roadmaps, risk registers and dependency maps. Ability to analyse complex information and provide clear reporting, insights and recommendations. Strong financial and commercial awareness, including forecasting, monitoring ...

overarching strategic objectives and benefits.* Strong stakeholder engagement skills, including working confidently with senior leaders, partners and suppliers.* Experience developing programme plans, roadmaps, risk registers and dependency maps.* Ability to analyse complex information and provide clear reporting, insights and recommendations.* Strong financial and commercial awareness, including forecasting, monitoring ...

other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks, including maintaining risk registers and tracking remediation. Lead and support internal and external security audits , including evidence gathering, control testing and remediation of findings. Manage technical security risks … within Data Protection Impact Assessments and policy exceptions. Support the vendor and third-party risk management programme, including assessment and ongoing monitoring of critical suppliers. Work with technical teams around identity and access management, including SSO and federated services . Provide security assurance for projects, systems and customer requirements. ...

Cyber Governance, Risk & Compliance Lead Salary: Up to £60k + car allowance + package Location: Leeds (Remote role with some travel) Why Apply? This is an opportunity to join a stable and growing organisation in a key Group-level cyber security role, working across a diverse portfolio of subsidiary … businesses. As Cyber Governance, Risk & Compliance Lead, you will play a central role in maintaining and developing the Group's cyber governance framework, supporting subsidiaries with security compliance, audit readiness and risk management. You will also play an important role in integrating newly acquired businesses into the Group ...

design decisions. Work with technical teams to implement appropriate security controls around identity, access management, SSO and federated services . Oversee information security risk management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls … compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third-party/vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work ...

cyber security GRC assessments and assurance activities. Conduct evidence-led gap assessments against recognised frameworks, including NCSC CAF/eCAF. Review security controls, policies, risk registers and supporting evidence. Identify control gaps, assess risks and develop prioritised remediation plans. Lead stakeholder workshops and present findings to senior audiences. Provide ...

support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions with confidence, using evidence-based recommendations and clear communication with technical … response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing deliverables including assessments, risk registers and executive summaries. Required Hands-On Experience 1. Cloud Security (preferably AWS) Hands-on experience securing cloud environments, preferably AWS, including core services ...

Senior Cyber Risk & AI Governance Consultant 6-Month Contract | Outside IR35 | Hybrid We're working with a large, complex organisation looking for an experienced Senior Cyber Risk & AI Governance Consultant to support an evolving portfolio of cyber governance, risk and assurance work. The role will have … particular focus on AI governance and cyber risk, helping the organisation establish practical governance around the use of AI while supporting wider security, compliance and assurance requirements. This is a hands‐on delivery role, suited to someone who can work independently, bring structure to developing requirements and translate governance ...

security governance, compliance and supplier assurance across a complex technology environment. This is an excellent opportunity for someone with a strong background in Governance, Risk & Compliance (GRC) who enjoys working across cyber security, technology, suppliers and business stakeholders. The Role Key responsibilities include: Leading cyber security governance, risk and compliance activities. Managing supplier assurance and third-party security risk assessments. Reviewing vendor security questionnaires and conducting security due diligence. Maintaining and improving compliance with frameworks such as ISO27001. Managing cyber risk registers and remediation activities. Supporting internal and external audits. Developing and maintaining security policies ...

customer satisfaction, innovation whilst providing a range of bespoke services and solutions. Due to several projects, they are keen to appoint a Cyber Security Risk & Assurance SME to lead a number of Data Driven and Cyber Data Assurance projects. Cyber Security Risk & Assurance SME: Duties Provide cyber risk … metrics, data sources, and assessment logic to ensure reliable insights into control effectiveness and residual risk. Validate PAI results against evidence from reporting, assessments, risk registers, audits, incidents, and exceptions. Identify material gaps in data, controls, or reporting and coordinate actions with relevant stakeholders. Deliver clear assurance findings ...

role in strengthening the security of industrial control systems and operational technology environments. The successful candidate will lead and coordinate OT cybersecurity risk remediation activities, working closely with engineering, operations, IT and cybersecurity teams to identify vulnerabilities, implement security improvements and strengthen overall cyber resilience. Key Responsibilities Lead … coordinate OT cybersecurity assessments, remediation activities and security improvement initiatives. Develop and maintain cybersecurity remediation plans, risk registers and progress tracking. Review and improve OT network security, segmentation and industrial control system architecture. Support OT asset management, vulnerability management, patching and system hardening. Strengthen identity and privileged access management ...

designs integrate with and are assured against them. Contribute domain content to cross‐cutting standards and represent the domains at architecture governance forums. Demand, risk and emerging technology Bring together the signals that shape the plan: risk and obsolescence, programme and bid demand, growth and acquisition activity, supplier … rate of change the business can absorb. Model options and trade‐offs — buy or build, cloud or on‐premises, refresh or replace — making cost, risk and capability impact explicit. Plan headroom for growth so capacity, licensing and footprint decisions do not become tomorrow’s constraint. Maintain a single published ...

Assessing application architecture, integrations, security controls, resilience, disaster recovery, and business continuity capabilities. Producing and maintaining architecture assessment artefacts including dependency maps, supportability assessments, risk registers, and transition readiness reports. Identifying architectural risks, technical debt and operational dependencies that may impact service transition or ongoing support. Defining remediation actions … validate information. Ability to identify and manage technical debt, operational risks, and architectural dependencies. Experience producing architecture assessment reports, transition plans, assumption logs, and risk registers. Soft Skills Ability to facilitate workshops and drive consensus across multiple stakeholder groups. Strong analytical and investigative skills with the ability to identify ...

customers, colleagues and the environment. Why this role is different This role offers a unique breadth of experience across portfolio governance, executive reporting, risk management, assurance and stakeholder engagement. It provides excellent exposure to senior leadership teams and major business transformation initiatives, making it an ideal next step … Business Review (MBR). Translate complex information, data and updates into concise, engaging and meaningful business insights. Manage and continuously improve governance processes, including risk management, change control and dependency management. Support portfolio performance tracking and help identify emerging risks, issues and opportunities. Coordinate governance meetings, reporting cycles ...