IAM Certifications and Compliance Team, this strategic position requires specialization in automation and the continuous improvement of processes, utilizing scripting and automation technologies; in support of bank's internal controls, to meet regulatory requirements including SOX and FFIEC. The ideal candidate brings deep IAM domain expertise, as well as a strong technical acumen within the programming, scripting, data … access certifications, joiner/mover/leaver controls, and entitlement reviews. Develop and maintain IAM governance dashboards and KPIs to track control effectiveness, access risks, and compliance with internal policies and regulatory requirements. Issue identification and tracking related to SailPoint, followed by prioritization and reporting to resolution of the … issue to closure. Design and implement automated reporting solutions using scripting (PowerShell, Python, SQL, UiPath) to support access attestation, SoD analysis, and exception tracking. Partner with InternalAudit, Compliance, and external regulators to ensure the enterprise meets requirements for SOX, FFIEC, and other control frameworks. Serve as a subject matter expert in access governance, providing oversight on More ❯
Winchester, Hampshire, United Kingdom Hybrid / WFH Options
Arqiva
management process across the organisation. Maintain and assess the effectiveness of the security controls catalogue; recommend improvements. Own the Information Security Management System (ISMS) to ensure compliance with internal and external requirements. Provide assurance that security controls are operating effectively and aligned with defined frameworks. Maintain company risk portfolio and actively review and risk finding Conduct internal … assurance, and risk management practices across the organisation. Information Security & Compliance - Strategic leadership in the application and assurance of security and compliance frameworks (e.g., ISO 27001, GDPR, NIS2), ensuring audit readiness and regulatory alignment. Knowledge & Experience Deep understanding of enterprise risk management (ERM), governance, and control frameworks In-depth knowledge of security, information assurance, and compliance frameworks (e.g., ISO … NIST CSF, COBIT). Familiarity with legal and regulatory requirements across cyber and operational domains (e.g., GDPR, NIS2, TSA, CSR). Awareness of internalaudit methodology, assurance planning, and reporting mechanisms. Understanding of board-level reporting, risk appetite, and strategic alignment of risk functions. Knowledge of business continuity, resilience planning, and risk treatment strategies. We are the More ❯
measures to protect sensitive customer and financial data. Ensure systems comply with relevant regulations and standards (e.g., GDPR, PCI-DSS) working with Breedon General Counsel and InternalAudit teams to assure this. Conduct regular security audits and risk assessments. Manage stakeholder expectations and ensure their needs and requirements are met. Supplier Management: Manage relationships with suppliers and … fully documented. Prepare regular reports on system performance, project status, and security incidents as required. Project/Programme Support: Support Steering Groups, Project Boards, and other meetings with internal teams. Coordinate with external third-party vendors and internal teams. Regularly review project phases to ensure timely completion, highlighting and mitigating key risks. Qualifications/Experience/ More ❯
.) and new/replacement forums on the horizon SIMM/ISSMO. Manage function wide relationships with 2LOD/3LOD, with particular focus on Operational Risk, InternalAudit and SoX. SoulSole responsibility to work with FPAFinancial Planning and Analysis to develop the annual BAU financial and FTE budget and review monthly to assess against actual performance, ensuring More ❯
South West London, London, United Kingdom Hybrid / WFH Options
Experian Ltd
AI tools to improve forecasting, lead scoring, and reporting. Work with global teams to implement scalable automation solutions. Commercial Governance Support pricing governance and policy compliance. Assist with internal audits and identify areas for training or improvement. Analytics & Reporting Deliver timely reports on sales performance, forecasting, and pipeline health. Maintain dashboards that provide actionable insights. Respond to ad More ❯
Aberdeen, Aberdeenshire, United Kingdom Hybrid / WFH Options
Orion Group
CIO-ready reporting on issues and residual risk. Coordinate with the Business and 1st Line risk owners, as well as with the Assurance parties such as InternalAudit (LOD3) and the major IT and SOC managed service providers to close control gaps, and feed lessons learnt into standards and patterns. Role Dimensions Organisation-wide information security remit … plans, acting as a trusted advisor. Mix of advisory, oversight and hands-on walkthroughs; pragmatic, proportionate risk approach. Role Requirements 7+ years in information risk, security assurance or IT audit within regulated, safety-critical or industrial environments (energy/oil & gas preferred). Strong knowledge of NIST CSF, ISO 27001, UK GDPR and supplier assurance practices; familiarity with the … clear, concise, business-outcome focused). Tooling familiarity: GRC/IRM platforms (e.g., ServiceNow), and common cloud services (M365/Azure) for workflows and evidence capture. Advantageous Certifications: Governance & Audit: ISO 27001 Lead Auditor, CISM Architecture & Design: SABSA, CISSP OT/ICS: SANS GICSP, ISA/IEC 62443 Our role in supporting diversity and inclusion As an international workforce More ❯
Aberdeen, City of Aberdeen, United Kingdom Hybrid / WFH Options
Orion Group
CIO-ready reporting on issues and residual risk. Coordinate with the Business and 1st Line risk owners, as well as with the Assurance parties such as InternalAudit (LOD3) and the major IT and SOC managed service providers to close control gaps, and feed lessons learnt into standards and patterns. Role Dimensions Organisation-wide information security remit … plans, acting as a trusted advisor. Mix of advisory, oversight and hands-on walkthroughs; pragmatic, proportionate risk approach. Role Requirements 7+ years in information risk, security assurance or IT audit within regulated, safety-critical or industrial environments (energy/oil & gas preferred). Strong knowledge of NIST CSF, ISO 27001, UK GDPR and supplier assurance practices; familiarity with the … clear, concise, business-outcome focused). Tooling familiarity: GRC/IRM platforms (e.g., ServiceNow), and common cloud services (M365/Azure) for workflows and evidence capture. Advantageous Certifications: Governance & Audit: ISO 27001 Lead Auditor, CISM Architecture & Design: SABSA, CISSP OT/ICS: SANS GICSP, ISA/IEC 62443 Our role in supporting diversity and inclusion As an international workforce More ❯
1. To take responsibility for the operational elements of client relationship management for a portfolio the digital risk audit plans and assigned consultancy reviews and services including the personal conduct of highly complex/technical, assignments. 2. To conclude upon the effectiveness of highly complex digital risk management, contributing to the Head of InternalAudit Opinion … and Statements of Internal Control as required, and supporting service improvement and resilience with a requirement for refined negotiating skills to describe contentious issues and drive improvement. 3. To direct and supervise staff and contractors to deliver the allocated assignments and services on time, to budget and to quality standards. 4. To report to relevant senior client-side More ❯
1. To take responsibility for the operational elements of client relationship management for a portfolio the digital risk audit plans and assigned consultancy reviews and services including the personal conduct of highly complex/technical, assignments. 2. To conclude upon the effectiveness of highly complex digital risk management, contributing to the Head of InternalAudit Opinion … and Statements of Internal Control as required, and supporting service improvement and resilience with a requirement for refined negotiating skills to describe contentious issues and drive improvement. 3. To direct and supervise staff and contractors to deliver the allocated assignments and services on time, to budget and to quality standards. 4. To report to relevant senior client-side More ❯
including ISO27001, DSPT, and Cyber Essentials+. Provide expert advice to senior stakeholders and technical teams on emerging threats and mitigation strategies. Chair assurance groups and lead internalaudit controls for DDaT security. Collaborate with Emergency Preparedness teams to ensure cyber threats are integrated into resilience planning. Manage budgets, business cases, and funding proposals for cyber initiatives. Promote … Lead the development of a risk-based cyber and information security strategy, ensuring alignment with ICS and national plans. Monitor compliance with professional and regulatory standards and lead internal audits. Provide strategic oversight of cyber architecture, live services, and infrastructure delivery. Evaluate and articulate business risks related to cyber threats and recommend disaster recovery solutions. Engage with stakeholders More ❯
registers, leading assurance assessments, and embedding security controls across infrastructure and platforms. You will also guide teams in applying secure-by-design principles and support both internalaudit and external compliance efforts including Gov Assure, CAF, ISO 27001, and Cyber Essentials (CE and CE+) while supporting the secure operation of core services. The role requires strong stakeholder More ❯
Implement and maintain models and metrics (e.g. stress testing, scenario analyses, capital adequacy) Ensure compliance with regulatory, legal, and regulatory capital requirements Develop policies and controls, internalaudit interfaces, and governance frameworks What do you need to be successful in this role? Significant experience (typically 7+ years) in lending, credit, or banking, ideally in SME or commercial More ❯
Oxford, Oxfordshire, South East, United Kingdom Hybrid / WFH Options
EFCI Group Ltd
Collaborate with Oracle Support and internal teams for essential patch management and environment maintenance. Conduct release readiness reviews, ensuring compliance with ITIL, SOX , and internalaudit requirements. 3. Quality Leadership Establish and monitor KPIs for testing and release quality, driving continuous improvement in test automation and deployment processes. Lead and mentor internal and More ❯
and coordinate end-to-end release processes, including validation and cutover planning. Define and enforce release governance, including version control and rollback procedures. Collaborate with Oracle support and internal teams for patch management and environment refreshes. Conduct release readiness reviews to ensure compliance and quality. Quality & Governance … Establish and monitor KPIs for testing and release quality. Maintain documentation for testing procedures, release notes, and post-release reviews. Ensure compliance with ITIL, SOX, and internalaudit standards. Drive continuous improvement in test automation and release processes. Collaboration & Leadership Lead and mentor testing and release teams, including vendor and offshore resources. Liaise with business process owners More ❯
Hereford, Herefordshire, England, United Kingdom Hybrid / WFH Options
IMT Resourcing Solutions
strong understanding of security standards who enjoys embedding best practice across the business. What you’ll do Support and maintain compliance with ISO 27001 standards Conduct and coordinate internal audits, risk assessments, and remediation activities Develop and update security policies, procedures, and documentation Work closely with technical teams to ensure security controls are implemented effectively Monitor and report More ❯
confident working across different teams to keep things running smoothly, this could be the perfect fit.What you’ll be doing: Developing and delivering compliance strategy and frameworks. Leading internal audits to check policies and processes are being followed. Managing ISO accreditations (ISO9001, ISO27001, ISO22301, ISO45001, ISO14001). Overseeing PCI and FCA compliance requirements. Managing and testing business continuity More ❯
working with large datasets to draw insights and conclusions. Presentation Skills: Ability to translate complex initiatives into clear, engaging presentations using Microsoft PowerPoint. Project Governance: Experience in supporting internal audits, go-live activities, and overall project governance. Autonomous & Initiative-Driven: Demonstrated ability to operate independently while proactively seeking solutions. Attention to Detail: Strong focus on accuracy and thoroughness More ❯
Woking, Surrey, England, United Kingdom Hybrid / WFH Options
Nomad Foods
and mitigate security risks across the organisation. Implement and maintain risk management processes, ensuring effective controls are in place. Ensure continuous compliance with applicable laws and regulations. Conduct internal audits and manage external audits of cyber security controls. Work closely with cross-functional teams, including IT, Risk, Compliance Legal, and Business Operations, to drive compliance initiatives and embed More ❯
farnborough, south east england, united kingdom Hybrid / WFH Options
Leidos Innovations UK Limited
response procedures. Coordinate and facilitate exercises and simulations, including tabletop and live scenario testing, to validate continuity plans. Monitor compliance and readiness, ensuring all plans meet internalaudit standards and external regulatory requirements. Engage with internal stakeholders and external partners, including customers, regulatory bodies and special interest groups, to ensure continuity expectations are met. Report More ❯
southampton, south east england, united kingdom Hybrid / WFH Options
Leidos Innovations UK Limited
response procedures. Coordinate and facilitate exercises and simulations, including tabletop and live scenario testing, to validate continuity plans. Monitor compliance and readiness, ensuring all plans meet internalaudit standards and external regulatory requirements. Engage with internal stakeholders and external partners, including customers, regulatory bodies and special interest groups, to ensure continuity expectations are met. Report More ❯
systems. In this role, you will take ownership of system integrity and static data maintenance, ensuring seamless treasury operations across a complex, global environment. Youll work closely with internal treasury teams, IT, and external vendors to troubleshoot, maintain, and enhance Quantum and Echos functionality. Key Responsibilities Provide comprehensive support for FIS Quantum and Echos treasury management systems. Maintain … data analysis and issue resolution. Apply working knowledge of GoldenGate and Datapipelines for data integration and replication. Ensure all support activities align with SOX compliance and internalaudit standards. Utilise FIS support tools, including the FIS ticketing system, to track, document, and resolve incidents efficiently. Requirements 5+ years hands-on experience with FIS Quantum and Echos treasury More ❯
In this role, you will take ownership of system integrity and static data maintenance, ensuring seamless treasury operations across a complex, global environment. You’ll work closely with internal treasury teams, IT, and external vendors to troubleshoot, maintain, and enhance Quantum and Echos functionality. Key Responsibilities Provide comprehensive support for FIS Quantum and Echos treasury management systems. Maintain … data analysis and issue resolution. Apply working knowledge of GoldenGate and Datapipelines for data integration and replication. Ensure all support activities align with SOX compliance and internalaudit standards. Utilise FIS support tools, including the FIS ticketing system, to track, document, and resolve incidents efficiently. Requirements 5+ years’ hands-on experience with FIS Quantum and Echos treasury More ❯
/company law work closely with the SAP Office of Ethics and Compliance in relation to ensuring the SAP Code of Conduct is complied with, on internalaudit investigations and as part of the market unit compliance function support and manage MU integration of SAP acquired entities into the business including from a legal, corporate, and process … build strong relationships and partner with account executives and sales managers; participate in other projects as the SAP Ireland Market Unit legal lead; ensure an appropriate level of internal governance is in place in relation to transactions and compliance demonstrate strategic legal insight and executive gravitas, confidently representing the company in high-stakes external engagements with public institutions More ❯
and ensure compliance with regulations such as UK/EU GDPR, DORA, HIPAA, and EU AI Act. The role offers a dynamic mix of hands-on risk management, internalauditing, and strategic input into global processes. It’s ideal for someone with a solid foundation in data protection and a keen interest in evolving tech risks. Key highlights More ❯
and ensure compliance with regulations such as UK/EU GDPR, DORA, HIPAA, and EU AI Act. The role offers a dynamic mix of hands-on risk management, internalauditing, and strategic input into global processes. It’s ideal for someone with a solid foundation in data protection and a keen interest in evolving tech risks. Key highlights More ❯