Strategy . The Ideal Candidate The ideal candidate will bring strong expertise in Data Analysis combined with a working knowledge of: Data Governance principles Data Migration Cloud Transformations Operational Risk management practices This unique blend of skills will enable the successful candidate to provide both analytical depth and governance oversight, supporting the delivery of a robust and compliant data … environment. Key Responsibilities Conduct in-depth data analysis to support governance, quality, and riskassessment across Risk and Finance data assets. Manage data definitions, metadata, and lineage for high-priority data use cases, ensuring consistency and transparency. Collaborate with stakeholders to align business needs with regulatory requirements and data governance frameworks. Investigate and analyse data quality issues … contributing to root cause analysis and remediation planning. Act as a subject matter expert on Risk and Finance data, providing analytical insights that shape governance practices. Promote data accountability and stewardship through education, engagement, and strategic influence across the organisation. Support ECB onboarding by ensuring data governance and analysis align with supervisory expectations. Contribute to broader change initiatives, including More ❯
market via deposit aggregators in August 2023, followed by the launch of its direct-to-customer retail banking proposition in December 2024. Reporting to the Director of Financial Crime Risk, the successful candidate will be part of the Banking Services AML Business Risk Management function. You will be responsible for undertaking all aspects of new client onboarding and … sufficiency of the financial crime programs of prospective and existing clients. Undertaking assessments of the risks posed to LHV UK by prospective and existing clients, both using the Customer RiskAssessment model at onboarding and periodic refresh as well as through qualitative assessment as part of targeted reviews, onsite visits, transaction monitoring results and escalations. Managing and … visits to clients to assess their financial crimes programme in order to form a view as to the risks posed to the firm. Identifying areas of high or unacceptable risk, and assessing the suitability of clients subject to the Special Interest Client and Excessive Fraud programmes. Producing management information in relation to onboarding, periodic review, transaction monitoring, onsite visits More ❯
to the development, implementation and maintenance of internal governance frameworks, including policies, standards and procedures Maintaining compliance with relevant laws, regulations and industry standards (e.g. GDPR), through collaboration with risk owners in Legal, HR and other relevant departments Monitoring and reporting on the ongoing performance and effectiveness of the divisional ISMS, including the development and tracking of appropriate KPIs … Audit team on the development, implementation and operation of ITGCs Supporting the implementation of ISO27001 controls and perform regular control audits to monitor compliance Developing and managing a security risk framework, aligning with the enterprise risk management approach Coordinating the performance of regular business impact assessments (BIAs) and the recording of results and updates Contributing to the design … and implementation of information security process and control improvements Mentoring other members of the Information security team and promote risk management best practices across IT Supporting the development and delivery of compliance training and awareness, fostering a culture of risk awareness and accountability across the organisation Providing advice to stakeholders on IT risk and compliance topics About More ❯
to the development, implementation and maintenance of internal governance frameworks, including policies, standards and procedures Maintaining compliance with relevant laws, regulations and industry standards (e.g. GDPR), through collaboration with risk owners in Legal, HR and other relevant departments Monitoring and reporting on the ongoing performance and effectiveness of the divisional ISMS, including the development and tracking of appropriate KPIs … Audit team on the development, implementation and operation of ITGCs Supporting the implementation of ISO27001 controls and perform regular control audits to monitor compliance Developing and managing a security risk framework, aligning with the enterprise risk management approach Coordinating the performance of regular business impact assessments (BIAs) and the recording of results and updates Contributing to the design … and implementation of information security process and control improvements Mentoring other members of the Information security team and promote risk management best practices across IT Supporting the development and delivery of compliance training and awareness, fostering a culture of risk awareness and accountability across the organisation Providing advice to stakeholders on IT risk and compliance topics About More ❯
CONTINGENT opportunity for a Cybersecurity Engineer to join our team of smart and innovative technical team members working in the Point Loma area of San Diego, California. Provide Cybersecurity Assessment and Authorization (A&A) services and serve as a Cybersecurity expert for Navy Afloat programs throughout all stages of acquisition, systems engineering and maintenance processes. Be familiar with Information … Systems Security Engineer (ISSE) responsibilities in accordance with the US Navy's Risk Management Framework (RMF) Process Guide as follows: Oversee the development and maintenance of a system's cybersecurity solutions. Identify areas of operation and Service Contract Act (SCA) cognizance of the system, as well as any applicable authorization requirements, such as reciprocity, cross domain and applicable overlays … control baseline with applicable overlays. Assist with development, maintenance and tracking of the System Security Plan (SSP). Lead the security control implementation and testing efforts. Perform vulnerability-level riskassessment on the Plan of Action and Milestones (POA&Ms). Ensure the execution of any security testing required as part of A&A or annual reviews. Ensure More ❯
project it is also required you hold a British Citizenship or Dual Citizenship. As an Aker Lead Security Architect, you will be a recognised subject matter expert in security, risk management and compliance with demonstrable experience in highly regulated industries, specifically UK Government and/or Defence. You will build effective working relationships with delivery team members and Aker … testing (e.g ITHC) of solutions on the public cloud (Azure, AWS, GCP), cloud native platforms (Docker, Kubernetes, etc.), and Software as a Service (SaaS) solutions. Formulate HMG Information Assurance RiskAssessment and Risk Treatment Plans Establish security requirements for cloud-based solutions by evaluating business strategies and requirements, implementing security standards such as ISO 27000 series, NIST … CSF, and CSA Identify and deliver appropriate controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business risk and cloud native threats. Provide oversight and guidance on government security procedures and processes. Continually evaluate new threats in the cloud, to identify the impact on IT and the business to develop and More ❯
the information system and performs day-to-day security operations of the system. Evaluates security solutions to ensure they meet security requirements for processing classified information. Performs vulnerability/riskassessment analysis to support certification and accreditation. Provides configuration management (CM) for information system security software, hardware, and firmware. Manages changes to system and assesses the security impact … of those changes. Prepares and reviews documentation to include System Security Plans (SSPs), RiskAssessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs). Assists security authorization activities in compliance with Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF). Qualifications: Bachelor of Science degree in Computer More ❯
Information Security and Assurance Advisor Leek Wootton Permanent opportunity JOB PURPOSE: To provide expert guidance and specialist advice on all aspects of information assurance, security, and risk management. The role ensures the development and implementation of relevant policies, procedures, and processes necessary for compliance with national standards and codes of connection for information systems. This role includes maintaining the … conduct information security audits and compliance checks, ensuring the security of systems, data, and physical assets across the organisation and third-party entities. Identify and assess security requirements, producing RiskAssessment Reports and reviewing related documentation for new or evolving systems, assets, and processes. Coordinate the investigation and reporting of information security incidents, ensuring appropriate remedial action is … taken and trends are monitored. Prepare and deliver training, education, and awareness sessions related to information security, assurance, and risk management. Work collaboratively with key internal and external stakeholders-including third-party suppliers-ensuring best practices and compliance with relevant legislation and standards. Stay informed on developments in legislation, practices, and tools related to information security and data protection More ❯
Information Security and Assurance Advisor Leek Wootton Permanent opportunity JOB PURPOSE: To provide expert guidance and specialist advice on all aspects of information assurance, security, and risk management. The role ensures the development and implementation of relevant policies, procedures, and processes necessary for compliance with national standards and codes of connection for information systems. This role includes maintaining the … conduct information security audits and compliance checks, ensuring the security of systems, data, and physical assets across the organisation and third-party entities. Identify and assess security requirements, producing RiskAssessment Reports and reviewing related documentation for new or evolving systems, assets, and processes. Coordinate the investigation and reporting of information security incidents, ensuring appropriate remedial action is … taken and trends are monitored. Prepare and deliver training, education, and awareness sessions related to information security, assurance, and risk management. Work collaboratively with key internal and external stakeholders-including third-party suppliers-ensuring best practices and compliance with relevant legislation and standards. Stay informed on developments in legislation, practices, and tools related to information security and data protection More ❯
guidance and support to technical teams in the development and implementation of security solutions and technologies. Stay current with emerging security trends, threats, and technologies to provide informed recommendations. RiskAssessment and Mitigation: Conduct security risk assessments to identify potential threats and vulnerabilities. Develop and implement risk mitigation strategies to address identified risks, including the creation … of risk management plans and the prioritization of security initiatives. Documentation and Compliance: Generate and maintain documentation required for Risk Management Framework (RMF) processes, including Standard Operating Procedures (SOPs), security plans, risk assessments, and Plans of Action and Milestones (POA&M). Ensure compliance with the Joint Special Access Program Implementation Guide (JSIG) and other relevant security More ❯
business units, as requested, when a business disruption occurs and assist with recovery efforts Help Maintain the internal Business Continuity Management Website and network shared drive Participate in vendor risk management program on behalf of the BC in the Business Continuity review and evaluation in the vendor risk management program Co-assist the global emergency notification system to … and gathering timelines, data points and action items, and following up with responsible parties for close-out of assigned action items. Collaborate with various teams, including Facilities, IT, Operations, Risk as well as BCP stakeholders within each line of business at the firm ; Work closely with development teams who own/maintain BC related software and platforms. Perform other … V-Lookups, etc.) Excellent interpersonal and communication skills (written, verbal, presentation) Demonstrated skill in development of working relationships with key contacts both inside and outside the organization Understand Operational Risk in the Finance sector. Proven ability to work independently and manage multiple project initiatives, and as part of a team Ability to coordinate and implement Business Continuity strategies and More ❯
best, so we are always in search of the best people to join our ever-growing talented team. Responsibilities: Design and maintain a robust technology control testingframework aligned with risk management standards (e.g.,NIST, ISO 27001, COBIT, ITIL). Develop and update testing methodologies, ensuring theyaddress key risks related to IT infrastructure, cybersecurity,cloud services, and software development. Establish … and maintain control testing policies andprocedures that align with regulatory and internalgovernance requirements. Ensure the control testing framework integrates seamlesslywith the broader Operational Risk Management Framework(ORMF). Maintain a comprehensive control library, mapping controlsto risks and business objectives. Plan and execute detailed control testing activities acrossIT operations, systems, and processes, including: - Cybersecurity controls (e.g., firewalls, encryption, accessmanagement). … Data protection controls (e.g., GDPR compliance, databackups). - Incident management processes and disaster recoverytesting. Test both the design and operating effectiveness of ITcontrols. Prioritise control testing activities based on risk assessments, focusing on high-risk areas such as paymentsystems, customer data protection, and regulatoryreporting. Document and communicate control deficiencies torelevant stakeholders. Work with technology teams to develop, track More ❯
RFP products Review acquisition documents and provides comments with programmatic perspective to ensure consistency and accuracy. Documents may include, but are not limited to, ADMs, LCSP, Acquisition Strategies, APBs, Risk Management Plans, PMRs and milestone decision briefings Support, prepare, review and develop acquisition reports, including statutory and regulatory acquisition report and milestone review documentations identified in DoDI 5000.02 Support … and potential cost avoidance Assist with planning, evaluating and implementing program acquisition strategies. This includes DoD and AF policy and/or guidance; technical approach and/or requirements; riskassessment; and realism in achieving a product suitable for the war fighter within cost, schedule, and performance constraints. Also includes broad range of program acquisition strategies, market research … in DoDI 5000.80, Operation of the Middle Tier of Acquisition and DoDI 5000.81, Urgent Capability Acquisition Support and coordinate with program level scheduling personnel Develop, maintain, and update program risk management plans IAW the Risk Management Guide for DoD Acquisition, AFPAM 63-128, and the Air Force RI3 Guidebook; facilitate program risk identification, risk analysis, riskMore ❯
Microsoft Azure and an affinity for cloud security best practices. Information Security Knowledge: Strong knowledge of security principles and frameworks, including CIS controls and MITRE ATT&CK. Governance and RiskAssessment: Comprehensive understanding of security frameworks and best practices for risk management, including ISO, CSA, and CIS controls. Collaboration & Adaptability: A proactive team player who is flexible More ❯
that makes better decisions, drives innovation, and delivers better business results. Overview: The 'Services within Mastercard' division is responsible for acquiring, engaging, and retaining customers by managing fraud and risk, enhancing cybersecurity, and improving the digital payments experience. We provide value-added services and leverage expertise, data-driven insights, and execution. Identity Solutions (a program within Services), is the … its kind, uses complex machine learning to combine features derived from the billions of transactions within our proprietary network and the data from our graph to deliver industry leading riskassessment solutions. We are the Platform & API Team which is responsible for the customer facing APIs to our products and are looking for a Lead Software Engineer for … health benefits, flex-time schedules, and encouragement and support for professional development. Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must: • Abide by Mastercard's More ❯
UK, EU, and US. Their software platform and APIs enable partners to offer branded, flexible financing products directly to their merchant base. By harnessing cutting-edge, AI-powered credit riskassessment tools, they make fast, affordable funding accessible to a broader range of small and medium-sized businesses. This company is at the forefront of redefining financial services … Excellent communication and stakeholder management skills. Strong problem-solving mindset and a high degree of ownership. Preferred: Experience in the financial technology (FinTech) industry, especially with regulatory or credit risk understanding and API-based product development. Does this sound like you? Are you looking for an exciting new challenge and the chance to join an extraordinarily rapidly growing GLOBAL More ❯
UK, EU, and US. Their software platform and APIs enable partners to offer branded, flexible financing products directly to their merchant base. By harnessing cutting-edge, AI-powered credit riskassessment tools, they make fast, affordable funding accessible to a broader range of small and medium-sized businesses. This company is at the forefront of redefining financial services … Excellent communication and stakeholder management skills. Strong problem-solving mindset and a high degree of ownership. Preferred: Experience in the financial technology (FinTech) industry, especially with regulatory or credit risk understanding and API-based product development. Does this sound like you? Are you looking for an exciting new challenge and the chance to join an extraordinarily rapidly growing GLOBAL More ❯
to the OT security architect team. Solution Design: Collaborate with cross-functional teams to design and implement robust OT security solutions, considering the evolving threat landscape and emerging technologies. RiskAssessment: Conduct risk assessments and vulnerability analyses of OT systems, recommending mitigation strategies and proactive security measures. Technical Documentation: Create and maintain detailed architectural documentation, ensuring clarity More ❯
as new starters Conducting quality assurance on applications and providing SME feedback Conducting compliance calls with clients, ultimately assessing the clients' controls and compliance programs Resolving escalations and making risk-based decisions on new business Overseeing the AML riskassessment process, ensuring that risks are effectively identified, assessed, and mitigated Proactively identifying and sharing areas for improvement More ❯
as new starters Conducting quality assurance on applications and providing SME feedback Conducting compliance calls with clients, ultimately assessing the clients' controls and compliance programs Resolving escalations and making risk-based decisions on new business Overseeing the AML riskassessment process, ensuring that risks are effectively identified, assessed, and mitigated Proactively identifying and sharing areas for improvement More ❯
South Yorkshire, United Kingdom Hybrid / WFH Options
Ford & Stanley Recruitment
environment. Experience in an Engineering/Manufacturing environment with a proven ability managing the projects or operational function of a similar-sized business. In-depth knowledge of operational processes, riskassessment, resource allocation and timeline optimisation. Open to candidates who are qualified by experience or degree educated. Strong self-awareness and understanding of the complexities of cross-functional … a 1-hour commute of the site. Our Client’s Interview Process: 1st Stage interview: On-site interview in South Yorkshire with the Managing Director and Engineering Director. Psychometric Assessment: will be sent to successful candidates between the 1st and 2nd stage interviews. Organised by Ford & Stanley Executive Search (Thomas International) Final Stage interview: On-site interview with the … and operational efficiency. The Operations Director needs a strong leadership and management skillset to oversee project delivery and optimise operations. They should excel in strategic planning, programme management, and risk mitigation while ensuring quality and efficiency across processes, supply chains, and resource allocation. Effective communication, stakeholder engagement, and analytical thinking are vital for building relationships, problem-solving, and driving More ❯
and lead high-performing project teams of 10+ members, including junior and mid-level project managers Serve as primary executive consultant to C-level stakeholders, providing strategic guidance and riskassessment for critical business initiatives Process Innovation: Design and implement scalable project management frameworks that support organizational growth and operational efficiency Champion advanced lean and agile methodologies, driving … of emerging technologies and ability to assess their strategic value for business applications Proven track record of managing complex stakeholder ecosystems including clients, vendors, and internal teams Experience with risk management, compliance frameworks, and governance in regulated environments Why Join Us: Be part of a company shaping the future of e-mobility in Europe Gain real-world experience with More ❯
adoption, and enhance the value derived from Talent technologies. This role contributes to the strategic roadmap for Talent systems, working in close partnership with HR, IT, Compliance, Data Privacy, Risk, and external vendors to ensure alignment, data quality, and regulatory compliance. Responsibilities Operational Management Oversee the day-to-day delivery of Talent application support services, ensuring timely and accurate … SLAs are met. Coordinate with SAP, managed service providers, and implementation partners on enhancements, upgrades, and support escalations. System Governance Own the change management process for Talent applications, including riskassessment, testing coordination, and communication. Ensure compliance with GBT standards, including adherence to governance and change control policies. Act as gatekeeper for the production SAP SuccessFactors environment, ensuring More ❯
Remote (Home based), United Kingdom Hybrid / WFH Options
Elysium Healthcare
technical teams and SME’s fostering a culture of continuous improvement and innovation. Line management of Solution architect. Develop training programs and workshops to enhance team capabilities and knowledge. Risk Management: Identify and mitigate architectural risks to ensure the stability and security of IT systems. Implement riskassessment frameworks and develop contingency plans to address potential threats More ❯
The Senior PMO Analyst role is a vital position within the technology department of our financial services firm, focusing on project management, riskassessment, and ensuring effective project delivery. This role is based in London and has a significant influence on the successful execution and delivery of key projects. Client Details Our client is a medium-sized financial More ❯