Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
Thebusinessyear
Description Risk and Business Continuity Manager Programme Name: LCST Location: Bristol, UK - The role will be hybrid, with expectations to be in our Bristol, UK office at least one day per week and some UK travel will be required. Are you ready for your next career challenge? Role Overview: Leidos Europe Ltd (as Prime contractor) is seeking a UK … based Programme level Risk and Business Continuity Manager who is a motivated self-starter who can work independently and as part of a team in a dynamic environment. They will be a dedicated resource to the Logistics Division working on the Ministry of Defence Logistics, Commodities and Services Transformation (LCST) Programme. Reporting to the Head of Compliance, the Programme … Risk and Business Continuity Manager will be supported by a Risk and Business Continuity Advisor. This role is the programme focal point for riskmanagement and business continuity across the Prime contract as part of the functions stakeholder management duties defined below. The role will be hybrid, with expectations to be in our Bristol, UK More ❯
About the team The Data, IT and Cyber Risk Team is part of the wider riskmanagement function responsible for providing check and challenge to the first line over their risk profile. What you will be doing? As the new Senior Risk Manager - IT & Cyber Risk, you willprovide an IT and Cyber risk second line opinion to the IT and Cyber first line risk champions over related risks (within Riskonnect) to ensure that first line work within their risk appetite. Your responsibilities will include The management of the IT and Cyber Risk Team and its delivery of the annual plan. this includes the line management of the … IT and Cyber Risk Team across the Group and supporting any external resource Ensure that IT and Cyber riskmanagement is aligned to the Group wider riskmanagement framework, industry good practice standards and regulatory expectations, ensuring consistency in application across all 1LOD business and control functions. Support and manage the process to conduct IT More ❯
About the team: The Data, IT and Cyber Risk Team is part of the wider riskmanagement function responsible for providing check and challenge to the first line over their risk profile. What you will be doing: As the new Senior Risk Manager - IT & Cyber Risk, you will provide an IT and Cyber risk second line opinion to the IT and Cyber first line risk champions over related risks (within Riskonnect) to ensure that first line work within their risk appetite. Your responsibilities will include... The management of the IT and Cyber Risk Team and its delivery of the annual plan. this includes the line management of the … IT and Cyber Risk Team across the Group and supporting any external resource Ensure that IT and Cyber riskmanagement is aligned to the Group wider riskmanagement framework, industry good practice standards and regulatory expectations, ensuring consistency in application across all 1LOD business and control functions. Support and manage the process to conduct IT More ❯
Job Title: Risk and Compliance Manager Location: Cambridge (Hybrid) Salary: £65,000 to £70,000 plus package Function: Risk & Compliance within a Fintech/Technology-focused company Primary Objective To lead and manage compliance and riskmanagement operationsensuring the company remains compliant with internal policies, external standards (like ISO27001, GDPR), and regulatory bodies. Key Responsibilities Policy … Compliance Management Review and enhance existing compliance policies Draft new policies aligned with standards like ISO27001 Audits & Controls Conduct internal audits; support external audits Validate and test the effectiveness of risk controls Training & Awareness Organise workshops and training sessions for staff on compliance topics RiskManagement Perform risk assessments Define risk tolerance and implement … control measures Manage riskmanagement software and reporting Stakeholder Communication Prepare reports for executives Advise leadership on risk mitigation strategies External Engagement Keep up-to-date with evolving regulations Build relationships with regulators and industry bodies Required Skills & Experience Essential 5+ years in a similar Risk and Compliance role ISO27001 GDPR Experience managing audits Policy and More ❯
Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Vinarchy
in place, continuously improved, and fully compliant with Australian legislation and global standards. You'll take the lead in supplier engagement, reporting, and resolving quality issues, helping to minimise risk while maintaining strong controls. If you have a keen eye for detail, a collaborative mindset, and experience working with quality management systems like ISO 9001, BRC, IFS, or … HACCP we want to hear from you! Key Responsibilities Include: Evaluate and enhance the Quality Management Systems to drive continuous improvement and embed Best Practice philosophies. Manage large projects and end-to-end processes with minimal oversight, ensuring delivery to scope, quality, and timelines. Partner with third parties to ensure full compliance with Vinarchys Quality Management and Food … standards and implement system improvements to support quality audits across relevant sites. Embed compliance activities consistently across all internal operations and third-party partners. Produce monthly reports on Quality Management and Food Safety KPIs, identifying emerging trends and areas for intervention. Contribute to the Global RiskManagement Plan, shaping company policy and direction for Quality RiskMore ❯
Potters Bar, Hertfordshire, South East, United Kingdom Hybrid / WFH Options
Canada Life Group (UK) Ltd (The)
and strive to ensure that our behaviours, processes, and practices are aligned to this culture. Role Overview This new role will be responsible for second line oversight of technology risk and cyber security for the Europe Business segment including Irish Life Group, Canada Life UK and Canada Life Europe (Germany). In this role, you will help implement the … future roadmap for second line business partnering and oversight across the European business segment that reflects and supports the current and future needs of the organisation. Team Background Technology Risk and Operational Resilience Oversight sits within Canada Life Group and is accountable for independent "Second line of Defence" oversight of technology, cyber security and operational resilience activities across all … European entities including Irish Life Group, Canada Life UK and Canada Life Europe. Technology Risk and Operational Resilience Oversight is at an important stage in its evolution, following the introduction of the new first line Technology Risk and Security team operating model within the Office of the CIO (OCIO), Europe. The first line team is taking ownership of More ❯
City of London, London, England, United Kingdom Hybrid / WFH Options
WTW
WTW are seeking a highly skilled and experiencedTechnology and Cyber Risk Analytics Subject Matter Expert (SME)to lead and support the development, execution, and continuous improvement of our risk and control analytics capabilities. This role is pivotal in enhancing our understanding of technology and cyber risks through data-driven insights, supporting risk identification, assessment, and treatment activities … across the enterprise. The ideal candidate will have expertise in risk and control environments, strong analytical acumen, and a solid understanding of technology and cyber security frameworks. You will work closely with global stakeholders to ensure that risk data is accurately captured, analyzed, and reported to support informed decision-making and effective risk management. This role is … London and follows a hybrid work model, requiring travel to the London office when needed. The Role: This role will support the ongoing operations of WTW Technology and Cyber Risk and Controls & Regulatory engagement function in: Lead the design and execution of analytics to support risk identification, assessment, and treatment across technology and cyber domains. Collaborate with riskMore ❯
WTW are seeking a highly skilled and experienced Technology and Cyber Risk Analytics Subject Matter Expert (SME) to lead and support the development, execution, and continuous improvement of our risk and control analytics capabilities. This role is pivotal in enhancing our understanding of technology and cyber risks through data-driven insights, supporting risk identification, assessment, and treatment … activities across the enterprise. The ideal candidate will have expertise in risk and control environments, strong analytical acumen, and a solid understanding of technology and cyber security frameworks. You will work closely with global stakeholders to ensure that risk data is accurately captured, analyzed, and reported to support informed decision-making and effective risk management. This role … London and follows a hybrid work model, requiring travel to the London office when needed. The Role: This role will support the ongoing operations of WTW Technology and Cyber Risk and Controls & Regulatory engagement function in: Lead the design and execution of analytics to support risk identification, assessment, and treatment across technology and cyber domains. Collaborate with riskMore ❯
Bath, Somerset, United Kingdom Hybrid / WFH Options
Mayden
About The Role We are looking to appoint a highly experienced cyber and information security leadto join our growing business. Mayden has a flat management structure and a coaching culture, with team members working together and supporting one another to make things happen. This means that job titles can look a little different, but also means our roles focus … public sector. You may already be operating at CISO level in a small company, or have ambitions to reach the next level in your career. Mayden's flagship patient management system, iaptus, is used by more than 200 mental health services in the UK, Australia and Canada. Theseus, our case management system for addiction and healthy lifestyle services … lines. Compliance: Ensure the company's security posture meets the requirements of the NHS Data Security and Protection Toolkit (DSPT), Cyber Essentials Plus, ISO27001:2022 and other relevant frameworks. Riskmanagement: Lead the information security riskmanagement program, including identification, assessment, mitigation, and monitoring of information security risks across all systems, applications, and operations. Policy and More ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Raisin GmbH
our growth. Our success is your success. Couldn't find the right position? About Raisin About Raisin Bank About Raisin US About Raisin UK Team At Raisin UK, our Risk & Compliance team is at the forefront of responsible innovation in the fintech space. As part of our second line of defence, we help ensure our savings platform operates safely … compliance framework-giving you both strategic exposure and real impact. You'll be joining a small, hands-on team where your contributions will be seen and valued. From shaping risk frameworks to staying ahead of regulatory change, we collaborate across all parts of the business to support our growth and maintain our integrity. Tech Stack Your Responsibilities As Risk & Compliance Associate , you'll play a central role in managing Raisin UK's risk landscape and supporting our compliance monitoring. You'll help ensure our processes remain strong, scalable, and aligned with FCA requirements-while also having the chance to shape and improve how we operate. Your key responsibilities will include: RiskManagement Support the execution More ❯
Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Hargreaves Lansdown
in the delivery of security compliance assurance to frameworks such as PCI-DSS and NIST Cyber Security Framework. You will be managing security governance processes including Third Party Security RiskManagement, and delivering controls assurance. What you'll be doing Assisting in meeting compliance requirements within HL, such as PCI-DSS and in line with frameworks such as … SWIFT CSCF, CSA CCM and NIST CSF. Assist with the technical security aspects of third-party security risk by conducting security due diligence and risk assessments for vendors, suppliers, partners, and contractors. Develop and mature processes and procedures for third party security riskmanagement, including due diligence and third-party incident management. Work closely with stakeholders … to provide advice in relation to third party information security risks, recommending risk mitigation strategies and/or advising on risk exceptions based on the business' risk appetite. Driving policy & standard governance processes including creating new policies and standards where required. Managing framework alignments, identifying gaps and engaging stakeholders to remediate. Managing Security process documentation including review More ❯
Employment Type: Permanent, Part Time, Work From Home
compliance with international standards, and fostering a culture of security awareness. You'll work closely with IT, compliance, and executive teams to align security measures with business objectives. Responsibilities Risk Assessment: Conduct thorough risk assessments to identify vulnerabilities, threats, and potential impacts on information security. Strategy Development: Develop and implement riskmanagement strategies, policies, and procedures … to mitigate identified risks. Compliance: Ensure adherence to GDPR, ISO 27001, and other relevant regulatory requirements. Incident Management: Lead the response to security incidents, including root cause analysis and the implementation of corrective measures. Stakeholder Communication: Regularly report on security risks, incidents, and compliance to senior management and board members. Training: Oversee security awareness programs to educate employees … about security best practices. Vendor Management: Assess third-party security risks and manage security in vendor relationships. Requirements Education: Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred. Experience: Minimum of 7 years in information security with at least 3 years in a riskmanagement role. Certifications: Preferably CISSP, CISM More ❯
These five shared values lead every decision wemake and action we take, guiding us to deliver impact how and where it mattersmost . Connect to your opportunity The Cyber Risk Manager will be responsible for the following: Operational Develop and define key risk indicators to provide cyber risks insights to Deloitte Technology BISOs and executives. Gather requirements and … build dashboards that accurately depict Deloitte Technology's cyber risk exposure. Drive organizational change and work with multiple business units of a large organization to effect change. Understand the Deloitte global line of business, gain familiarity with priorities, and become an advocate for the cyber risk within the BISO organization. Collaborate with BISOs as a cyber risk expert, to assist then to identify, assess, and manage cyber risks within their respective lines of business. Actively govern cyber risk in the Deloitte Technology risk register. Partner effectively with Deloitte Technology and BISO teams to facilitate cyber security risk reviews and analysis. Empower Deloitte Technology teams to establish cyber risk ownership and agree on More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
Deloitte LLP
These five shared values lead every decision wemake and action we take, guiding us to deliver impact how and where it mattersmost . Connect to your opportunity The Cyber Risk Manager will be responsible for the following: Operational Develop and define key risk indicators to provide cyber risks insights to Deloitte Technology BISOs and executives. Gather requirements and … build dashboards that accurately depict Deloitte Technology's cyber risk exposure. Drive organizational change and work with multiple business units of a large organization to effect change. Understand the Deloitte global line of business, gain familiarity with priorities, and become an advocate for the cyber risk within the BISO organization. Collaborate with BISOs as a cyber risk expert, to assist then to identify, assess, and manage cyber risks within their respective lines of business. Actively govern cyber risk in the Deloitte Technology risk register. Partner effectively with Deloitte Technology and BISO teams to facilitate cyber security risk reviews and analysis. Empower Deloitte Technology teams to establish cyber risk ownership and agree on More ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Deloitte LLP
These five shared values lead every decision wemake and action we take, guiding us to deliver impact how and where it mattersmost . Connect to your opportunity The Cyber Risk Manager will be responsible for the following: Operational Develop and define key risk indicators to provide cyber risks insights to Deloitte Technology BISOs and executives. Gather requirements and … build dashboards that accurately depict Deloitte Technology's cyber risk exposure. Drive organizational change and work with multiple business units of a large organization to effect change. Understand the Deloitte global line of business, gain familiarity with priorities, and become an advocate for the cyber risk within the BISO organization. Collaborate with BISOs as a cyber risk expert, to assist then to identify, assess, and manage cyber risks within their respective lines of business. Actively govern cyber risk in the Deloitte Technology risk register. Partner effectively with Deloitte Technology and BISO teams to facilitate cyber security risk reviews and analysis. Empower Deloitte Technology teams to establish cyber risk ownership and agree on More ❯
Cambridge, Cambridgeshire, United Kingdom Hybrid / WFH Options
Deloitte LLP
These five shared values lead every decision wemake and action we take, guiding us to deliver impact how and where it mattersmost . Connect to your opportunity The Cyber Risk Manager will be responsible for the following: Operational Develop and define key risk indicators to provide cyber risks insights to Deloitte Technology BISOs and executives. Gather requirements and … build dashboards that accurately depict Deloitte Technology's cyber risk exposure. Drive organizational change and work with multiple business units of a large organization to effect change. Understand the Deloitte global line of business, gain familiarity with priorities, and become an advocate for the cyber risk within the BISO organization. Collaborate with BISOs as a cyber risk expert, to assist then to identify, assess, and manage cyber risks within their respective lines of business. Actively govern cyber risk in the Deloitte Technology risk register. Partner effectively with Deloitte Technology and BISO teams to facilitate cyber security risk reviews and analysis. Empower Deloitte Technology teams to establish cyber risk ownership and agree on More ❯
Milton Keynes, Buckinghamshire, United Kingdom Hybrid / WFH Options
Deloitte LLP
These five shared values lead every decision wemake and action we take, guiding us to deliver impact how and where it mattersmost . Connect to your opportunity The Cyber Risk Manager will be responsible for the following: Operational Develop and define key risk indicators to provide cyber risks insights to Deloitte Technology BISOs and executives. Gather requirements and … build dashboards that accurately depict Deloitte Technology's cyber risk exposure. Drive organizational change and work with multiple business units of a large organization to effect change. Understand the Deloitte global line of business, gain familiarity with priorities, and become an advocate for the cyber risk within the BISO organization. Collaborate with BISOs as a cyber risk expert, to assist then to identify, assess, and manage cyber risks within their respective lines of business. Actively govern cyber risk in the Deloitte Technology risk register. Partner effectively with Deloitte Technology and BISO teams to facilitate cyber security risk reviews and analysis. Empower Deloitte Technology teams to establish cyber risk ownership and agree on More ❯
We're looking for an experienced Head of Fraud to lead the enterprise fraud strategy across IAG Loyalty. You'll be responsible for designing and delivering a unified fraud riskmanagement strategy and framework while enabling tailored, risk-based solutions that meet the unique needs of each business. You'll work closely with the Chief Information Security … Officer (CISO) and the Head of Legal Operations and Compliance, ensuring alignment across fraud, cyber security, data privacy, and riskmanagement functions. This role is based out of our London office. We call our approach to hybrid working The Blend - it's about giving you the flexibility to choose where you do your best work, while staying connected … our other office or partner locations, based on your role and 'to do' list. What you'll get up to Strategic Leadership: Define and lead the group-wide fraud riskmanagement strategy and operating model. Act as the primary advisor to the CFO and executive leadership on fraud risks, threats, and mitigation across all types of fraud. Develop More ❯
Team/Directorate: National Flood Risk Services/Evidence, Policy and Permitting Starting salary: £32,544 rising to £35,377 per annum through annual increments being paid each year (pro rata for part time applicants) Contract type: Permanent Work pattern: Full time, 37 hours per week (Part time, annualised hours, compressed hours or term time working considered - discussions at … Play a key role in protecting communities from flooding by helping us manage and improve critical asset data across Wales. In this role, you'll support the National Flood Risk Services Team in delivering a range of tasks including data improvement programmes that underpin the sustainable management of NRW's flood risk assets. You'll work closely … assets team and operational colleagues across Wales to ensure our data is accurate, reliable, and useful. Your responsibilities will include: Organising and delivering work packages within the national asset management programme. Carrying out tactical tasks using the AMX Flood database, as well as maintaining and updating public facing GIS datasets such as the National Asset Database and FloodRisk Assessment More ❯
Employment Type: Permanent, Part Time, Work From Home
City of London, London, United Kingdom Hybrid / WFH Options
British Business Bank
Data and Information Governance Team. Reporting into the Senior Manager, Information Governance and Deputy Data Protection Officer supporting the further developing of the, dedicated first line capability for information risk, control frameworks and testing across the business, in information rights management, data protection, records management, and information risk, helping to evolve and improve the banks control … of product lines, control functions and subsidiaries, enabling effective oversight of information risk. You will develop elements of and implement an Information Governance Framework whilst developing and monitoring various risk controls within the RCSA framework in both Operations and as SME across the business. You will work directly with local 1LoD defence risk and control teams as well … as work closely with first line support functions such as the Financial Crime Team and the Banks Risk & Compliance and Internal Audit teams. To be considered for this role you must have an in-depth knowledge and practical experience in the following: - Data Protection - Information Rights - Records Management - Information Risk You will be able to demonstrate evidence More ❯
Sheffield, South Yorkshire, Yorkshire, United Kingdom Hybrid / WFH Options
British Business Bank
Data and Information Governance Team. Reporting into the Senior Manager, Information Governance and Deputy Data Protection Officer supporting the further developing of the, dedicated first line capability for information risk, control frameworks and testing across the business, in information rights management, data protection, records management, and information risk, helping to evolve and improve the banks control … of product lines, control functions and subsidiaries, enabling effective oversight of information risk. You will develop elements of and implement an Information Governance Framework whilst developing and monitoring various risk controls within the RCSA framework in both Operations and as SME across the business. You will work directly with local 1LoD defence risk and control teams as well … as work closely with first line support functions such as the Financial Crime Team and the Banks Risk & Compliance and Internal Audit teams. To be considered for this role you must have an in-depth knowledge and practical experience in the following: - Data Protection - Information Rights - Records Management - Information Risk You will be able to demonstrate evidence More ❯
Job title: Technology Risk Manager Location: London/Hybrid Duration: 6 months Adecco is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills … and unique experience in an inclusive environment that helps them thrive. The role: This role forms a key part of the 1LOD Technology RiskManagement function, supporting the Head of Technology Risk. The role holder will form a crucial component in the establishment of an enhanced riskmanagement framework and beyond that identify and assess potential … risks across Technology, as well as ensuring a comprehensive approach to risk mitigation. The key focus of this contract is to Support the enhancement of Technology Resilience and the maturity of riskmanagement practices Responsibilities: Process Documentation: Create and update process documentation across key technology processes to support governance, compliance, and operational consistency. SSSDLC Integration: Support the More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Adecco
Job title: Technology Risk Manager Location: London/Hybrid Duration: 6 months Adecco is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills … and unique experience in an inclusive environment that helps them thrive. The role: This role forms a key part of the 1LOD Technology RiskManagement function, supporting the Head of Technology Risk. The role holder will form a crucial component in the establishment of an enhanced riskmanagement framework and beyond that identify and assess potential … risks across Technology, as well as ensuring a comprehensive approach to risk mitigation. The key focus of this contract is to Support the enhancement of Technology Resilience and the maturity of riskmanagement practices Responsibilities: Process Documentation: Create and update process documentation across key technology processes to support governance, compliance, and operational consistency. SSSDLC Integration: Support the More ❯
About The Role FDM is a global business and technology consultancy seeking a Model Risk Capabilities Manager to work for our client within the consulting sector. This is initially a 6-month contract with the potential to extend and will be a fully remote role. Our client is looking for skilled individual to make tangible impact on their business … and customers. You'll be helping to improve their model risk framework, system and reporting requirements, delivery planning and control support across the wider team. As Model Risk Capabilities Manager, you'll be providing key input to the design and implementation of model risk framework elements which are compliant with regulatory and the client's requirements. Responsibilities … Helping to manage model risk across the bank through effective policies, standards, procedures, and system design Acting as a point of contact for queries relating to policies and procedures across model risk Helping to administer model risk governance in an efficient and effective manner Developing and leading educational materials and training on model riskmanagementMore ❯
Boston, Massachusetts, United States Hybrid / WFH Options
Fidelity Investments
Job Description: The Group Fidelity Digital Asset Management FDAM is building an investment platform offering digital asset products and services designed to meet the growing needs of Fidelity's retail customers and intermediary and institutional clients. The Investment Implementation team is a collaborative group proficient in off-chain and on-chain market structure, trading, liquidity venues, reconciliation and risk management. The team will work closely with Research, Investment Operations, Data Science and Risk across topics such as portfolio construction, rebalancing, collateral management, technology infrastructure and automating processes. The Role The Digital Assets Trader will be an integral member of the FDAM team to manage investment strategies, develop the operating platform and communicate on market trends. The … chain execution (CLOB, AMMs, mempools). Manage the daily execution of digital asset funds and separate accounts. Collaborate with research and technology on development and implementation of long-only, risk-managed and market neutral strategies, including operational and risk systems to support the activity. Understand the downstream process of the trading desk (i.e. accounting, settlement, reconciliation) and communicate More ❯