51 to 75 of 93 Risk Register Jobs in the UK excluding London

overall defence security posture is maintained, evidenced, and continuously improved. The role is the single point of accountability for security assurance, accreditation support, risk governance, and policy compliance across the service delivery lifecycle. Key Responsibilities Security Assurance Regime Develop, implement, and maintain the security assurance regime for the service … primary point of contact for all security accreditation matters — engaging with the client's Security Accreditation Authority, Information Asset Owners, and Senior Information Risk Owners (SIROs). Support the accreditation lifecycle. Maintain a register of all accreditation conditions, caveats, and risk acceptances — tracking compliance and closure. Security ...

support senior consultants in ensuring robust cyber security across our projects. Day-to-day of the role: Support project-level security assurance and risk management activities. Gather and document control evidence and assurance artefacts. Maintain risk registers, actions, and remediation tracking. Support audits, reviews, and formal assurance processes. … implement agreed security controls. Assist with cloud and SaaS security assurance tasks. Ensure decisions, risks, and controls are clearly documented and traceable. Produce security risk assessments, risk positions, and pragmatic control recommendations across cloud, SaaS, and integration-heavy environments. Support remediation activity by working with delivery teams ...

support senior consultants in ensuring robust cyber security across our projects. Day-to-day of the role: Support project-level security assurance and risk management activities. Gather and document control evidence and assurance artefacts. Maintain risk registers, actions, and remediation tracking. Support audits, reviews, and formal assurance processes. … implement agreed security controls. Assist with cloud and SaaS security assurance tasks. Ensure decisions, risks, and controls are clearly documented and traceable. Produce security risk assessments, risk positions, and pragmatic control recommendations across cloud, SaaS, and integration-heavy environments. Support remediation activity by working with delivery teams ...

support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions with confidence, using evidence-based recommendations and clear communication with technical … response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing deliverables including assessments, risk registers and executive summaries. Required Hands-On Experience 1. Cloud Security (preferably AWS) Hands-on experience securing cloud environments, preferably AWS, including core services ...

architecture, operating model and roadmap for how Reachdesk uses its systems. Own the SOC 2 Type II programme, the security policy set and the risk register as the accountable business owner. Own identity and access management, joiner, mover and leaver processes, and the device and endpoint estate across ...

architecture, operating model and roadmap for how Reachdesk uses its systems. Own the SOC 2 Type II programme, the security policy set and the risk register as the accountable business owner. Own identity and access management, joiner, mover and leaver processes, and the device and endpoint estate across ...

architecture, operating model and roadmap for how Reachdesk uses its systems. Own the SOC 2 Type II programme, the security policy set and the risk register as the accountable business owner. Own identity and access management, joiner, mover and leaver processes, and the device and endpoint estate across ...

have a primary focus on external stakeholders and compliance. Working primarily in the disciplines of Architecture and consultancy, Identity and Access Management and Governance, Risk and Compliance you will be supported by a security operations and engineering team to deliver security, business value and cyber resilience. This role will … developing security architecture and patterns. Stewardship of information security risks working with the Business Assurance team on reporting. Focusing on crown jewel systems ensuring risk posture and cyber resiliency needs. Ensuring technical risks form Data Protection Impact Assessments are managed Ensure policy exceptions and risks are recorded and managed ...

Type 2 programmes, including evidence collection, control testing, policy maintenance, and auditor liaison Maintain our GRC platform - keeping controls, evidence, and risk registers current and audit-ready at all times Drive continuous improvement of policies, procedures, and controls across the business Serve as the primary point of contact … providing timely responses and where needed, direct engagement with customer security teams Support the development and maintenance of Dexory's information security policies and risk management framework Conduct vendor and third-party security assessments as part of the procurement and onboarding process Contribute to Dexory's incident response ...

+ perm benefits We're seeking an experienced GRC Lead to join a growing cyber security function, taking ownership of governance, risk and compliance activities across a complex stakeholder and supplier landscape. This is a fantastic opportunity for a governance-focused cyber security professional who enjoys driving compliance, managing … risk, influencing stakeholders and improving security maturity across an organisation. As the GRC Lead, you will act as a key point of contact between business stakeholders, suppliers and security teams, ensuring risks, controls and compliance obligations are effectively managed and reported. Key Responsibilities Lead cyber governance, risk ...

Senior Cyber Risk & AI Governance Consultant 6-Month Contract | Outside IR35 | Hybrid We're working with a large, complex organisation looking for an experienced Senior Cyber Risk & AI Governance Consultant to support an evolving portfolio of cyber governance, risk and assurance work. The role will have … particular focus on AI governance and cyber risk, helping the organisation establish practical governance around the use of AI while supporting wider security, compliance and assurance requirements. This is a hands‐on delivery role, suited to someone who can work independently, bring structure to developing requirements and translate governance ...

complexity, duration, stakeholders, and business impacts. This includes program planning duties such as requirements management, budget planning, financial analytics including P&L, schedule management, risk management, stakeholder management, communications, and executive reporting. Core Responsibilities Program Leadership: Lead assigned customer‐facing programs, strategic projects, and services transformation initiatives from initiation … Customer Success, Sales/Pre‐Sales, Operations, Finance, and external partners. Develop and maintain program plans including requirements, financial analytics including P&L, schedules, risk registers, dependencies, stakeholder roles and responsibilities, communications, and executive reporting. Identify, analyze, and mitigate program risks and proactively drive mitigation steps, contingency planning ...

working with an international technology-led group to appoint an IT Security Manager to support and develop its Group-wide cyber security, governance, risk and compliance strategy across Europe. This is a hands-on, high-impact role where you’ll help shape security standards, strengthen cyber resilience and build … work closely with senior IT leadership to: Develop and implement Group-wide IT & Cyber Security strategy Own security policies, governance frameworks and risk registers Lead cyber risk assessments, remediation and incident response Oversee external security partners and supplier security audits Lead annual penetration testing and security awareness programmes ...

Searchandselect is seeking a Risk & Governance Analyst to support the Technology & Change risk and governance framework. You will coordinate risk assessments, risk registers, policy reviews and audit activities to maintain a strong control environment across technology initiatives. The role involves collaborating with risk owners, management ...

security governance, compliance and supplier assurance across a complex technology environment. This is an excellent opportunity for someone with a strong background in Governance, Risk & Compliance (GRC) who enjoys working across cyber security, technology, suppliers and business stakeholders. The Role Key responsibilities include: Leading cyber security governance, risk and compliance activities. Managing supplier assurance and third-party security risk assessments. Reviewing vendor security questionnaires and conducting security due diligence. Maintaining and improving compliance with frameworks such as ISO27001. Managing cyber risk registers and remediation activities. Supporting internal and external audits. Developing and maintaining security policies ...

customer satisfaction, innovation whilst providing a range of bespoke services and solutions. Due to several projects, they are keen to appoint a Cyber Security Risk & Assurance SME to lead a number of Data Driven and Cyber Data Assurance projects. Cyber Security Risk & Assurance SME: Duties Provide cyber risk … metrics, data sources, and assessment logic to ensure reliable insights into control effectiveness and residual risk. Validate PAI results against evidence from reporting, assessments, risk registers, audits, incidents, and exceptions. Identify material gaps in data, controls, or reporting and coordinate actions with relevant stakeholders. Deliver clear assurance findings ...

+ +Hybrid Aberdeen +Inside IR35 +£650 - £720 a day We are seeking an experienced OT Security Engineer to lead and coordinate cybersecurity assessments, risk remediation, and security control improvements across Operational Technology (OT) environments. You will be responsible for translating identified security gaps into practical remediation plans, implementing … incident response, backup, recovery, business continuity, and cyber resilience arrangements. Coordinate restoration testing, cybersecurity exercises, and lessons learned activities. Maintain OT cybersecurity policies, procedures, risk registers, and structured security assurance evidence. Produce management reports covering remediation progress, outstanding risks, control improvements, and assurance activities. Essential Skills and Experience Experience ...

role in strengthening the security of industrial control systems and operational technology environments. The successful candidate will lead and coordinate OT cybersecurity risk remediation activities, working closely with engineering, operations, IT and cybersecurity teams to identify vulnerabilities, implement security improvements and strengthen overall cyber resilience. Key Responsibilities Lead … coordinate OT cybersecurity assessments, remediation activities and security improvement initiatives. Develop and maintain cybersecurity remediation plans, risk registers and progress tracking. Review and improve OT network security, segmentation and industrial control system architecture. Support OT asset management, vulnerability management, patching and system hardening. Strengthen identity and privileged access management ...

designs integrate with and are assured against them. Contribute domain content to cross‐cutting standards and represent the domains at architecture governance forums. Demand, risk and emerging technology Bring together the signals that shape the plan: risk and obsolescence, programme and bid demand, growth and acquisition activity, supplier … rate of change the business can absorb. Model options and trade‐offs — buy or build, cloud or on‐premises, refresh or replace — making cost, risk and capability impact explicit. Plan headroom for growth so capacity, licensing and footprint decisions do not become tomorrow’s constraint. Maintain a single published ...

support lifecycle awareness, operational planning, and service continuity. Routinely consult with pre-sales and account management about CIs approaching end of life and update risk registers as necessary. Maintain proactive engagement with internal delivery teams to ensure customer context is understood and reflected in the resolution of technical issues … with estate-specific context. Provide technical governance and oversight in the review of security and penetration test findings, collaborating with relevant teams to assess risk, prioritise remediation, and define actionable next steps aligned with security best practices and customer-specific requirements. Act as the technical operations representative in customer ...

level designs (HLD/LLD) for the target storage architecture (design phase). Define storage and data-management requirements; contribute to the requirements and risk registers; facilitate technical workshops with client teams and the (virtual) storage SME. Contribute to the costed design-phase estimate and roadmap for the Discovery … migration-ready. Deliverables owned Deliverables owned Current-state assessment for WS1, WS2 and WS4; data maps. Storage and data-management content of the Requirements Register and Risk Register. Options appraisal and target architecture (HLD/LLD) – design phase. Input to the Discovery Report and the design-phase estimate ...

privileged access is logged, reviewed, and time-bound where possible. AI & Technology Governance (Security Input) Review new AI tool requests from a security risk perspective - assessing data handling, access scoping, and prompt injection risk. Ensure AI tools approved for use are correctly scoped and monitored; feed AI-related security … findings into the risk register. At our firm, Diversity, Equity and Inclusion is a priority and at the heart of everything we do. We actively want to attract a diverse workforce and welcome applications from everyone, from all backgrounds. We are committed to promoting an inclusive culture where everyone ...

role will be responsible for maintaining and advancing our security posture, ensuring continued compliance with PCI DSS and Cyber Essentials Plus requirements, reducing organisational risk, and driving security maturity across the business. This position is fully office-based at our Hull site. Please apply only if you can commit … Cyber Essentials Plus certifications. Coordinate annual assessments and remediation activities. Continuously monitor compliance against Cyber Essentials requirements. Drive improvements that exceed minimum certification standards. Risk Management Maintain the Information Security risk register. Conduct regular risk assessments across systems, suppliers and business processes. Track remediation actions and ensure ...

transaction reporting Structured e-invoice requirements Interoperability obligations Assess and advise internal stakeholders on ViDA implementation impacts on our customers and our products. Compliance Risk Management Maintain the company's e-Invoicing compliance risk register. Identify any emerging regulatory risks and propose mitigation strategies. Support internal compliance audit ...

Assessing application architecture, integrations, security controls, resilience, disaster recovery, and business continuity capabilities. Producing and maintaining architecture assessment artefacts including dependency maps, supportability assessments, risk registers, and transition readiness reports. Identifying architectural risks, technical debt and operational dependencies that may impact service transition or ongoing support. Defining remediation actions … validate information. Ability to identify and manage technical debt, operational risks, and architectural dependencies. Experience producing architecture assessment reports, transition plans, assumption logs, and risk registers. Soft Skills Ability to facilitate workshops and drive consensus across multiple stakeholder groups. Strong analytical and investigative skills with the ability to identify ...