london, south east england, united kingdom Hybrid / WFH Options
DGH Recruitment
Information Security Officer will play a key role in ensuring the security of my clients systems and data by evaluating the risks associated with third-party vendors and internal projects and then recommending appropriate risk mitigation strategies. Responsibilities: - Conduct vendor risk assessments and project security risk assessments based on established methodologies and frameworks. - Evaluate security risks associated with … third-party vendors and internal projects, considering factors such as security, privacy, and compliance. - Ensure compliance with security policies, standards, and procedures in vendor relationships and project activities. - Develop and maintain security assessment frameworks and methodologies for vendor risk assessments and project security risk assessments. - Conduct periodic reviews and audits to … ensure compliance with security policies, standards, and regulatory requirements. - Support the development and enforcement of security policies, standards, and procedures related to vendor management and project security. - Support Security audit activities conducted by Internalaudit, clients and certification bodies e.g. ISO27001 - Provide security awareness training and guidance to staff as required. Required Skills/Experience: - Professional More ❯
london (city of london), south east england, united kingdom Hybrid / WFH Options
DGH Recruitment
Information Security Officer will play a key role in ensuring the security of my clients systems and data by evaluating the risks associated with third-party vendors and internal projects and then recommending appropriate risk mitigation strategies. Responsibilities: - Conduct vendor risk assessments and project security risk assessments based on established methodologies and frameworks. - Evaluate security risks associated with … third-party vendors and internal projects, considering factors such as security, privacy, and compliance. - Ensure compliance with security policies, standards, and procedures in vendor relationships and project activities. - Develop and maintain security assessment frameworks and methodologies for vendor risk assessments and project security risk assessments. - Conduct periodic reviews and audits to … ensure compliance with security policies, standards, and regulatory requirements. - Support the development and enforcement of security policies, standards, and procedures related to vendor management and project security. - Support Security audit activities conducted by Internalaudit, clients and certification bodies e.g. ISO27001 - Provide security awareness training and guidance to staff as required. Required Skills/Experience: - Professional More ❯
and training. Oversees Process and Product Qualification Plans, including tool proofs, capability studies, control methods and FMEAs. Works with Engineering and Quality on control methods and FMEAs. Leads internal quality audits to corporate quality standards (systems and compliance). Identifies, directs, and follows through on actions to close gaps. Track quality … data, including internal and external non-conformances, internal process capability, MRB, cost of quality, field failures reported by corporate quality members and internalaudit results. Analyzes quality data, summarizes results, identifies activities for improvement, and drives those activities to completion. Manage the development and analysis of statistical data, specifications and or current quality … languages. Must have in-depth knowledge of quality engineering tools, i.e. FMEA, Control Plans, SPC, Problem Solving Techniques, DOE, Acceptance Sampling, and MSA. Must have in-depth knowledge and audit experience in Quality Systems such as AS9100. Strong attention to detail and the ability to manage multiple tasks and projects simultaneously to meet deadlines. Ability to read, analyze, and More ❯
ability to engage across all levels of the organization in building effective relationships. This position will interact with our customers and execute AS9100/FAA Compliance Activities via internal audits . You will assist with external (AS9100, NADCAP, FAA and DCMA (US Gov. audits as well as Aerospace, and Prime Defense Customers) to keep the programs on track … the organization, including implementation/improvement to tools, training, and metrics. Manages the assigned Program Customer Quality process, ensuring quick response and effective corrective actions on customer raised SCARS, audit findings and feedback obtained through the Customer Service Index (CSI) process. Supports the planning and execution of the internalaudit plans designed to ensure sustained compliance More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Reed Technology
information as required under the contract and take responsibility for the resolution/escalation of issues. Work with internal/external stakeholders, External/InternalAudit, and Service Providers regarding specific audit actions related to Problem Management and other ITSM processes. Act as the primary interface for day-to-day liaison with Service Providers …/support functions, and operational IT. Strong analytical skills with experience in analysing complex information and management information to drive decisions. Proven ability to build strong relationships with internal stakeholders and third-party suppliers/partners. Experience using Problem Management Software/Tooling, e.g., ServiceNow. Desirable: ITIL V3 certification or similar experience within a service management framework. Benefits More ❯
Central London, London, England, United Kingdom Hybrid / WFH Options
Reed
information as required under the contract and take responsibility for the resolution/escalation of issues. Work with internal/external stakeholders, External/InternalAudit, and Service Providers regarding specific audit actions related to Problem Management and other ITSM processes. Act as the primary interface for day-to-day liaison with Service Providers …/support functions, and operational IT. Strong analytical skills with experience in analysing complex information and management information to drive decisions. Proven ability to build strong relationships with internal stakeholders and third-party suppliers/partners. Experience using Problem Management Software/Tooling, e.g., ServiceNow. Desirable: ITIL V3 certification or similar experience within a service management framework. Benefits More ❯
screening models. Participate in research projects on innovative solutions to make detection models more pro-active Support all examinations and reviews performed by regulators, monitors, and internalaudit Your skills and experience Advanced degree (Master's or PhD) in a quantitative discipline (Mathematics, Computer Science, Data Science, Physics or Statistics). Proficiency in designing, implementing (python, spark More ❯
within financial services. Preferred Background Experience working with top-tier banks, asset managers, or technology consulting firms delivering transformation engagements. Prior experience engaging with financial regulators , internalaudit, and risk teams during transformation governance. Strong commercial and business acumen; able to translate business priorities into feasible technical strategies. Education Bachelor’s or Master’s degree in Computer More ❯
IAM Certifications and Compliance Team, this strategic position requires specialization in automation and the continuous improvement of processes, utilizing scripting and automation technologies; in support of bank's internal controls, to meet regulatory requirements including SOX and FFIEC. The ideal candidate brings deep IAM domain expertise, as well as a strong technical acumen within the programming, scripting, data … access certifications, joiner/mover/leaver controls, and entitlement reviews. Develop and maintain IAM governance dashboards and KPIs to track control effectiveness, access risks, and compliance with internal policies and regulatory requirements. Issue identification and tracking related to SailPoint, followed by prioritization and reporting to resolution of the … issue to closure. Design and implement automated reporting solutions using scripting (PowerShell, Python, SQL, UiPath) to support access attestation, SoD analysis, and exception tracking. Partner with InternalAudit, Compliance, and external regulators to ensure the enterprise meets requirements for SOX, FFIEC, and other control frameworks. Serve as a subject matter expert in access governance, providing oversight on More ❯
Winchester, Hampshire, United Kingdom Hybrid / WFH Options
Arqiva
management process across the organisation. Maintain and assess the effectiveness of the security controls catalogue; recommend improvements. Own the Information Security Management System (ISMS) to ensure compliance with internal and external requirements. Provide assurance that security controls are operating effectively and aligned with defined frameworks. Maintain company risk portfolio and actively review and risk finding Conduct internal … assurance, and risk management practices across the organisation. Information Security & Compliance - Strategic leadership in the application and assurance of security and compliance frameworks (e.g., ISO 27001, GDPR, NIS2), ensuring audit readiness and regulatory alignment. Knowledge & Experience Deep understanding of enterprise risk management (ERM), governance, and control frameworks In-depth knowledge of security, information assurance, and compliance frameworks (e.g., ISO … NIST CSF, COBIT). Familiarity with legal and regulatory requirements across cyber and operational domains (e.g., GDPR, NIS2, TSA, CSR). Awareness of internalaudit methodology, assurance planning, and reporting mechanisms. Understanding of board-level reporting, risk appetite, and strategic alignment of risk functions. Knowledge of business continuity, resilience planning, and risk treatment strategies. We are the More ❯
measures to protect sensitive customer and financial data. Ensure systems comply with relevant regulations and standards (e.g., GDPR, PCI-DSS) working with Breedon General Counsel and InternalAudit teams to assure this. Conduct regular security audits and risk assessments. Manage stakeholder expectations and ensure their needs and requirements are met. Supplier Management: Manage relationships with suppliers and … fully documented. Prepare regular reports on system performance, project status, and security incidents as required. Project/Programme Support: Support Steering Groups, Project Boards, and other meetings with internal teams. Coordinate with external third-party vendors and internal teams. Regularly review project phases to ensure timely completion, highlighting and mitigating key risks. Qualifications/Experience/ More ❯
.) and new/replacement forums on the horizon SIMM/ISSMO. Manage function wide relationships with 2LOD/3LOD, with particular focus on Operational Risk, InternalAudit and SoX. SoulSole responsibility to work with FPAFinancial Planning and Analysis to develop the annual BAU financial and FTE budget and review monthly to assess against actual performance, ensuring More ❯
South West London, London, United Kingdom Hybrid / WFH Options
Experian Ltd
AI tools to improve forecasting, lead scoring, and reporting. Work with global teams to implement scalable automation solutions. Commercial Governance Support pricing governance and policy compliance. Assist with internal audits and identify areas for training or improvement. Analytics & Reporting Deliver timely reports on sales performance, forecasting, and pipeline health. Maintain dashboards that provide actionable insights. Respond to ad More ❯
Aberdeen, Aberdeenshire, United Kingdom Hybrid / WFH Options
Orion Group
CIO-ready reporting on issues and residual risk. Coordinate with the Business and 1st Line risk owners, as well as with the Assurance parties such as InternalAudit (LOD3) and the major IT and SOC managed service providers to close control gaps, and feed lessons learnt into standards and patterns. Role Dimensions Organisation-wide information security remit … plans, acting as a trusted advisor. Mix of advisory, oversight and hands-on walkthroughs; pragmatic, proportionate risk approach. Role Requirements 7+ years in information risk, security assurance or IT audit within regulated, safety-critical or industrial environments (energy/oil & gas preferred). Strong knowledge of NIST CSF, ISO 27001, UK GDPR and supplier assurance practices; familiarity with the … clear, concise, business-outcome focused). Tooling familiarity: GRC/IRM platforms (e.g., ServiceNow), and common cloud services (M365/Azure) for workflows and evidence capture. Advantageous Certifications: Governance & Audit: ISO 27001 Lead Auditor, CISM Architecture & Design: SABSA, CISSP OT/ICS: SANS GICSP, ISA/IEC 62443 Our role in supporting diversity and inclusion As an international workforce More ❯
Aberdeen, City of Aberdeen, United Kingdom Hybrid / WFH Options
Orion Group
CIO-ready reporting on issues and residual risk. Coordinate with the Business and 1st Line risk owners, as well as with the Assurance parties such as InternalAudit (LOD3) and the major IT and SOC managed service providers to close control gaps, and feed lessons learnt into standards and patterns. Role Dimensions Organisation-wide information security remit … plans, acting as a trusted advisor. Mix of advisory, oversight and hands-on walkthroughs; pragmatic, proportionate risk approach. Role Requirements 7+ years in information risk, security assurance or IT audit within regulated, safety-critical or industrial environments (energy/oil & gas preferred). Strong knowledge of NIST CSF, ISO 27001, UK GDPR and supplier assurance practices; familiarity with the … clear, concise, business-outcome focused). Tooling familiarity: GRC/IRM platforms (e.g., ServiceNow), and common cloud services (M365/Azure) for workflows and evidence capture. Advantageous Certifications: Governance & Audit: ISO 27001 Lead Auditor, CISM Architecture & Design: SABSA, CISSP OT/ICS: SANS GICSP, ISA/IEC 62443 Our role in supporting diversity and inclusion As an international workforce More ❯
1. To take responsibility for the operational elements of client relationship management for a portfolio the digital risk audit plans and assigned consultancy reviews and services including the personal conduct of highly complex/technical, assignments. 2. To conclude upon the effectiveness of highly complex digital risk management, contributing to the Head of InternalAudit Opinion … and Statements of Internal Control as required, and supporting service improvement and resilience with a requirement for refined negotiating skills to describe contentious issues and drive improvement. 3. To direct and supervise staff and contractors to deliver the allocated assignments and services on time, to budget and to quality standards. 4. To report to relevant senior client-side More ❯
1. To take responsibility for the operational elements of client relationship management for a portfolio the digital risk audit plans and assigned consultancy reviews and services including the personal conduct of highly complex/technical, assignments. 2. To conclude upon the effectiveness of highly complex digital risk management, contributing to the Head of InternalAudit Opinion … and Statements of Internal Control as required, and supporting service improvement and resilience with a requirement for refined negotiating skills to describe contentious issues and drive improvement. 3. To direct and supervise staff and contractors to deliver the allocated assignments and services on time, to budget and to quality standards. 4. To report to relevant senior client-side More ❯
including ISO27001, DSPT, and Cyber Essentials+. Provide expert advice to senior stakeholders and technical teams on emerging threats and mitigation strategies. Chair assurance groups and lead internalaudit controls for DDaT security. Collaborate with Emergency Preparedness teams to ensure cyber threats are integrated into resilience planning. Manage budgets, business cases, and funding proposals for cyber initiatives. Promote … Lead the development of a risk-based cyber and information security strategy, ensuring alignment with ICS and national plans. Monitor compliance with professional and regulatory standards and lead internal audits. Provide strategic oversight of cyber architecture, live services, and infrastructure delivery. Evaluate and articulate business risks related to cyber threats and recommend disaster recovery solutions. Engage with stakeholders More ❯
registers, leading assurance assessments, and embedding security controls across infrastructure and platforms. You will also guide teams in applying secure-by-design principles and support both internalaudit and external compliance efforts including Gov Assure, CAF, ISO 27001, and Cyber Essentials (CE and CE+) while supporting the secure operation of core services. The role requires strong stakeholder More ❯
Implement and maintain models and metrics (e.g. stress testing, scenario analyses, capital adequacy) Ensure compliance with regulatory, legal, and regulatory capital requirements Develop policies and controls, internalaudit interfaces, and governance frameworks What do you need to be successful in this role? Significant experience (typically 7+ years) in lending, credit, or banking, ideally in SME or commercial More ❯
Oxford, Oxfordshire, South East, United Kingdom Hybrid / WFH Options
EFCI Group Ltd
Collaborate with Oracle Support and internal teams for essential patch management and environment maintenance. Conduct release readiness reviews, ensuring compliance with ITIL, SOX , and internalaudit requirements. 3. Quality Leadership Establish and monitor KPIs for testing and release quality, driving continuous improvement in test automation and deployment processes. Lead and mentor internal and More ❯
and coordinate end-to-end release processes, including validation and cutover planning. Define and enforce release governance, including version control and rollback procedures. Collaborate with Oracle support and internal teams for patch management and environment refreshes. Conduct release readiness reviews to ensure compliance and quality. Quality & Governance … Establish and monitor KPIs for testing and release quality. Maintain documentation for testing procedures, release notes, and post-release reviews. Ensure compliance with ITIL, SOX, and internalaudit standards. Drive continuous improvement in test automation and release processes. Collaboration & Leadership Lead and mentor testing and release teams, including vendor and offshore resources. Liaise with business process owners More ❯
systems. In this role, you will take ownership of system integrity and static data maintenance, ensuring seamless treasury operations across a complex, global environment. Youll work closely with internal treasury teams, IT, and external vendors to troubleshoot, maintain, and enhance Quantum and Echos functionality. Key Responsibilities Provide comprehensive support for FIS Quantum and Echos treasury management systems. Maintain … data analysis and issue resolution. Apply working knowledge of GoldenGate and Datapipelines for data integration and replication. Ensure all support activities align with SOX compliance and internalaudit standards. Utilise FIS support tools, including the FIS ticketing system, to track, document, and resolve incidents efficiently. Requirements 5+ years hands-on experience with FIS Quantum and Echos treasury More ❯
In this role, you will take ownership of system integrity and static data maintenance, ensuring seamless treasury operations across a complex, global environment. You’ll work closely with internal treasury teams, IT, and external vendors to troubleshoot, maintain, and enhance Quantum and Echos functionality. Key Responsibilities Provide comprehensive support for FIS Quantum and Echos treasury management systems. Maintain … data analysis and issue resolution. Apply working knowledge of GoldenGate and Datapipelines for data integration and replication. Ensure all support activities align with SOX compliance and internalaudit standards. Utilise FIS support tools, including the FIS ticketing system, to track, document, and resolve incidents efficiently. Requirements 5+ years’ hands-on experience with FIS Quantum and Echos treasury More ❯
individual will assist in designing and establishing the methodology and processes supporting validation of significant remediation quality control validation activities. Significant remediation activities include those of regulators and internal audit. The candidate will interact and build relationships with senior management across Northern Trust. Additionally, the candidate will use their technical ability in the execution of the remediation quality … Bachelor's degree in computer science, information technology, IT/Cyber security, and/or risk management A number of years of risk and control or internalaudit experience inclusive of any direct Technology control/validation testing experience Expertise in risks related to information technology, cyber security, IT General Controls (ITGCs), application controls, IT platforms and More ❯