Global Resilience Risk Specialist Technology Risk Lead Global Operational and Resilience Risk (ORR) is a sub function of Group Risk. Its purpose is to make sure the bank understands, and is in control of its non-financial risk position. In addition, the function provides resilience risk stewardship to global businesses, functions and entities we operate … opining on the control environment of the First Line of Defence (1LOD) within Businesses Constructive challenge to the global businesses and functions on their control environment and assessment of risk Oversight of emerging risks, strategic business initiatives and local change activity and new/materially changed products Analysis of risk exposure across all bank operations and territories to … inform capital management and stress testing requirements Completing thematic reviews and aggregated reporting of the Non-Financial Risk profile of the bank Responsibility for the implementation of a RiskManagement Framework (RMF) that sets out governance, policies and practices to proactively identify, assess, measure and report on, mitigate and control operational risk exposures associated with More ❯
Press Tab to Move to Skip to Content Link Location: London Other locations: Primary Location Only Date: 8 Jul 2025 Requisition ID: The Opportunity Risk Consulting is a dynamic group of people focused on helping our clients solving tomorrow's problems today through integrated solution service offerings in the area of risk, such as internal audit, riskmanagement and financial controls. Risk continues to move up the agenda and our team work with many of today's front-running companies. Our clients want integrated, strategic, tech-enabled, end-to-end solutions and we deliver tailored risk offerings putting client value and relationships at the core of what we do. You can expect to … work with senior client personnel and drive high quality work products. Our Risk team consists of talented colleagues who invite you to bring your natural curiosity and innovative thoughts to work each day. Working within our team, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture, and More ❯
Cybersecurity Issue/Risk Service Manager page is loaded Cybersecurity Issue/Risk Service Manager Apply locations Birmingham, England, United Kingdom Krakow, Lesser Poland, Poland time type Full time posted on Posted Yesterday job requisition id R Location: Birmingham, England, United Kingdom Job ID: R Date Posted: 2024-07-17 Company Name: HITACHI ENERGY UK LIMITED Profession (Job … Category): IT, Telecom & Internet Job Schedule: Full time Remote: Yes Job Description: To grow Cybersecurity team we are lookinng for: Global Cybersecurity Risk Service Manager location: Remote from Poland, remote from UK Responsibilities: Owns the services related to Cybersecurity RiskManagement: Iidentify core requirements for RiskManagement in cooperation with stakeholders Develops requirements and frameworks … for Issue and RiskManagement in alignment within the subdepartment; Take care about area's processes and procedures Supervises a team of specialists, Deliver riskmanagement services to Hitachi Energy in cooperation with the te Work closely with the stakeholders to prioritize, create reporting, and oversee security findings. Improve management of security risks/issues More ❯
Primary Details Time Type: Full time Worker Type: Employee Senior IT Risk Analyst Permanent London/Hybrid At QBE, our purpose is to enable a more resilient future. We are an international insurer and reinsurer with a local presence in 27 countries. The Opportunity QBE Insurance is seeking a Senior IT Risk Analyst to join our Global IT … RiskManagement team , supporting the global Data, AI and Technology function within Technology Services. This is a permanent, hybrid role based out of our London office . The successful candidate will play a key role in assessing and improving technology controls to ensure compliance with the QBE Global IT RiskManagement Framework and Group Enterprise Risk Policies and Standards . Your New Role As a Senior IT Risk Analyst, you’ll support the monitoring and reporting of technology and transformation performance in risk and controls as part of Line 1. You’ll help identify and track risks and improvements, analyse data, and ensure alignment with Group Enterprise RiskManagement Standards. Main More ❯
IT RiskManagement Specialist City of London/Hybrid 6-months contract Up £750 per day (via Umbrella) cer Financial are working alongside a bank who are based in the City of London. They are seeking an IT RiskManagement Specialist to work with them on a contract. The responsibilities of the IT RiskManagement Specialist will include: Provide expert guidance to stakeholders on IT riskmanagement and control best practice. Awareness of Operational Resilience and DORA required Process Documentation: Create and update process documentation across key technology processes to support governance, compliance, and operational consistency. SSSDLC Integration: Support the integration of security controls and risk assessments throughout the Secure Software …/System Development Lifecycle. Controls Assurance: Review and challenge the design and operation of controls to ensure they mitigate risks effectively. Risk Register Monitoring: Maintain and update a register of Technology-related risk events, incidents, audit findings, exceptions, etc. Work with responsible areas to assess these, develop action plans, identify owners and track through to completion. The successful More ❯
About the team: The Data, IT and Cyber Risk Team is part of the wider riskmanagement function responsible for providing check and challenge to the first line over their risk profile. What you will be doing: As the new Senior Risk Manager - Data Risk, you will provide data risk second line opinion … over the data first line. This includes ensuring that data risk is managed in line with the Group's risk appetite as well as ensuring that Data Risk Framework follows best practice. Your responsibilities will include... The management of the Data Risk Team and its delivery of the annual plan. This includes the line management of the Data Risk Team across the Group and supporting any external resource as and when required. Supporting and engaging with 1LOD business and controls functions to ensure effective adherence to the Data riskmanagement principles and framework, ensuring that 1LOD fully adheres to the 3LOD disciplines based on defined 1LOD and 2LOD roles and responsibilities. More ❯
Newcastle upon Tyne, United Kingdom Hybrid / WFH Options
NHS Business Services Authority
Job summary Are you passionate about improving how we manage governance, risk, and compliance in digital services? We're looking for a proactive and detail-focused Governance, Risk and Compliance Analyst to join our Digital, Data and Technology (DDaT) directorate at NHSBSA. In this role, you'll help shape and maintain governance, risk and compliance frameworks across … We're looking for someone with strong communication and analytical skills who's confident working independently and as part of a team. You'll bring proven experience in Governance, Risk, Compliance, Assurance, or Audit -- ideally gained within the NHS or wider public sector -- to help us strengthen our frameworks and deliver real impact. What do we offer? o … networks o Excellent pension o NHS Car lease scheme o Access to a wide range of benefits and high street discounts! Main duties of the job As a Governance, Risk and Compliance (GRC) Analyst, you'll play a vital role in supporting the development, implementation, and continuous improvement of governance, risk, and compliance frameworks across our Digital, Data More ❯
Greater Bristol Area, United Kingdom Hybrid / WFH Options
Logiq
Dependent on Experience , plus car allowance, plus up to 10% performance bonus*, plus excellent benefits package. Logiq is a fast-growing Technology Company, providing cutting-edge solutions to high-risk clients across Private and Public Sector. Due to rapid growth in our Security Capability , we are looking for experienced Security Consultants to join our team. What is Cyber RiskManagement? Cyber riskmanagement ensures that organisations can anticipate, withstand, and recover from cyber incidents, aligning security efforts with business objectives, regulatory requirements, and industry best practices. It involves applying risk-based decision-making to ensure security measures are proportionate to the threats faced, balancing protection, operational effectiveness, and compliance with the organisations need and … context. As leading players in MOD’s cyber security transformation to Secure by Design (SbD), we are looking for team members and leaders who share our vision that cyber riskmanagement is driven by business requirements and a holistic view of security that can guide clients to secure solutions that support their business objectives. Why Join Us? Work More ❯
newport, wales, united kingdom Hybrid / WFH Options
Logiq
Dependent on Experience , plus car allowance, plus up to 10% performance bonus*, plus excellent benefits package. Logiq is a fast-growing Technology Company, providing cutting-edge solutions to high-risk clients across Private and Public Sector. Due to rapid growth in our Security Capability , we are looking for experienced Security Consultants to join our team. What is Cyber RiskManagement? Cyber riskmanagement ensures that organisations can anticipate, withstand, and recover from cyber incidents, aligning security efforts with business objectives, regulatory requirements, and industry best practices. It involves applying risk-based decision-making to ensure security measures are proportionate to the threats faced, balancing protection, operational effectiveness, and compliance with the organisations need and … context. As leading players in MOD’s cyber security transformation to Secure by Design (SbD), we are looking for team members and leaders who share our vision that cyber riskmanagement is driven by business requirements and a holistic view of security that can guide clients to secure solutions that support their business objectives. Why Join Us? Work More ❯
bath, south west england, united kingdom Hybrid / WFH Options
Logiq
Dependent on Experience , plus car allowance, plus up to 10% performance bonus*, plus excellent benefits package. Logiq is a fast-growing Technology Company, providing cutting-edge solutions to high-risk clients across Private and Public Sector. Due to rapid growth in our Security Capability , we are looking for experienced Security Consultants to join our team. What is Cyber RiskManagement? Cyber riskmanagement ensures that organisations can anticipate, withstand, and recover from cyber incidents, aligning security efforts with business objectives, regulatory requirements, and industry best practices. It involves applying risk-based decision-making to ensure security measures are proportionate to the threats faced, balancing protection, operational effectiveness, and compliance with the organisations need and … context. As leading players in MOD’s cyber security transformation to Secure by Design (SbD), we are looking for team members and leaders who share our vision that cyber riskmanagement is driven by business requirements and a holistic view of security that can guide clients to secure solutions that support their business objectives. Why Join Us? Work More ❯
bradley stoke, south west england, united kingdom Hybrid / WFH Options
Logiq
Dependent on Experience , plus car allowance, plus up to 10% performance bonus*, plus excellent benefits package. Logiq is a fast-growing Technology Company, providing cutting-edge solutions to high-risk clients across Private and Public Sector. Due to rapid growth in our Security Capability , we are looking for experienced Security Consultants to join our team. What is Cyber RiskManagement? Cyber riskmanagement ensures that organisations can anticipate, withstand, and recover from cyber incidents, aligning security efforts with business objectives, regulatory requirements, and industry best practices. It involves applying risk-based decision-making to ensure security measures are proportionate to the threats faced, balancing protection, operational effectiveness, and compliance with the organisations need and … context. As leading players in MOD’s cyber security transformation to Secure by Design (SbD), we are looking for team members and leaders who share our vision that cyber riskmanagement is driven by business requirements and a holistic view of security that can guide clients to secure solutions that support their business objectives. Why Join Us? Work More ❯
packages. Most specifically SFDC but others as well. • Train and coordinate with systems application owners, data custodians, technical leads, and business impact analysts on security standards, guidelines, and vendor riskmanagement of the systems within the organization and sub organizations. • Build relationships with Dynatrace Business Systems application teams. • Create, conduct, and report on security audits and assessments for … all systems applications (custom, SaaS and 3rd Party applications). • Provide guidance and support over the teams and ensure they can meet riskmanagement requirements and industry control frameworks for their systems/applications. • Contribute to the development and implementation of security policies, procedures, and controls. • Serve as a bridge between the Dynatrace business units and the Security … RiskManagement organization to promote and facilitate the adaptation and involvement with the Dynatrace RiskManagement Framework What will help you succeed Technical skills: Experience with Salesforce (SFDC) implementations and integrations. Experience performing secure application configurations of other large ERP type Software packages. Knowledge of configuration and integration security (API, etc.) for SaaS solutions Understanding Secure More ❯
Team supports analytic and generative AI products for decisioning, analytics, and fraud and identity globally. As a Lead Data Scientist, you will use your coding expertise (Python, SAS), model riskmanagement and Gen AI knowledge and experience, and analytic consulting skills to lead client and internal engagements for Experian's new global product launch and early client success … training, and client success activities to maximize client value. Leverage Gen AI and model development tools to create and maintain new model document templates to help clients meet Model RiskManagement regulatory requirements. Stay informed about regulatory changes, technological advancements, and model riskmanagement processes and controls to ensure the technology stack meets all compliance requirements. … in Dublin, Ireland. Learn more at Experience and Skills Data science background with development expertise in Python (preferred) or SAS Experience developing models and creating model documentation for Model RiskManagement teams in credit or fraud risk and decisioning Understand model riskmanagement regulatory environment and governance requirements for model documentation, validation, and monitoring Experience More ❯
Support the implementation of a comprehensive business resilience framework aligned with DORA and other regulatory requirements (e.g., NIST, ISO 22301, ISO 27001). Develop training materials, policies, controls, and risk assessment methodologies to ensure adherence to regulatory standards. Support key pillars of the DORA program, including ICT RiskManagement, Digital Resilience Testing, and Third-Party RiskManagement (TPRM). Stakeholder Coordination & Engagement: Design and execute DORA related workshops to support the successful delivery of the DORA programme. Ensure all stakeholders are engaged and informed during the DORA compliance implementation and transition to BAU. Facilitate program delivery requirements and track progress towards compliance objectives. Work closely with SMEs, legal teams, and business functions to ensure … adherence. Training & Awareness: Design and execute DORA related workshops to support the successful delivery of the DORA programme. Develop and deliver training programs to educate employees on resilience and riskmanagement practices. Foster a culture of preparedness and continuous improvement across ION Markets. Experience, Skills and Qualifications: Bachelor's or Master's degree in Business, RiskManagementMore ❯
blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the … client organization, generating results that allow our clients to thrive. What You'll Do As a Senior Consultant, RiskManagement you'll be at the forefront of redefining risk for the digital age. We advise leading organizations on risk strategy, regulatory transformation, cybersecurity, fraud, compliance, and tech-driven innovation across industries. Our work spans the intersection … of business, risk, and technology-delivering actionable, high-impact outcomes. We're building a team of forward-thinking consultants with a passion for tackling risk through cutting-edge tech and data strategy. Whether it's blueprinting GRC platforms, operationalizing data governance, or unlocking GenAI for control functions-we thrive on solving the problems that others shy away from. More ❯
agencies in government, defense, and security. Join our more than 4,500 employees worldwide who engineer and deploy automated, secure, and resilient power and technology systems; and deliver the management platforms essential for long-term system sustainability. Together we are creating the integrated systems and technologies that shape the built and cyber-physical world. We offer an excellent benefits … support the CIM Business Unit. The candidate will be required to travel to CONUS and OCONUS Government and Commercial facilities to support the development and implementation of the DoD RiskManagement Framework (RMF) process. Location: Onsite at JBAB Responsibilities Position Responsibilities: • Conduct ICS/SCADA system inventories following guidance including, but not limited to U.S. Army ICS Inventory … Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems. • Conduct vulnerability scanning and document system vulnerabilities. • Work in a team environment alongside other cybersecurity engineers and RiskManagement Framework (RMF) analysts. Required Education & Experience: Active TS/SCI w/polygraph clearance is required. • 3+ Years of Experience with a Master's Degree in Information More ❯
The role will sit at the intersection of technology, riskmanagement, procurement, and cybersecurity. The role will implement management controls to ensure critical suppliers deliver services in an appropriately secure and resilient manner within organisational risk appetite, as well as in line with contractual and regulatory requirements. The main duties and responsibilities of the role will … include the following: Third-Party RiskManagement Be responsible for the technology supplier riskmanagement policy and supporting procedures. Lead the completion of third-party risk assessment processes with a focus on information security, data protection and operational resilience. Ensure timely identification, documentation, and mitigation/escalation of third-party related risks. Partner with procurement … internal security management, IT/OT, DPO and Legal teams to complete supplier due diligence and associated control non-conformity remediations. Lead technology tender processes from specification to evaluation and selection, collaborating with technology, procurement and legal teams Facilitate the ongoing supervision of critical suppliers in line with contractual and security requirements. Implement and manage the governance framework in More ❯
The Data Privacy Senior Analyst is responsible for providing governance and oversight, riskmanagement and controls leadership across the enterprise for all activities associated with Privacy. This individual will have responsibility for covering privacy related capabilities and requirements including: compliance with the Citi Global Privacy Policy, identification and management of operational risks associated with Privacy and working … the 1LOD (First Line of Defense) Businesses and Functions Assess, evaluate, and validate controls through processes and tools such as the MCA and KRIs as appropriate for data privacy risk Monitor key privacy risk indicators Support the preparation and facilitation of enterprise privacy oversight forums Perform trend analysis on metrics and Issues to identify emerging risks Support the … implementation of global, regional and local Data Privacy, regulatory and risk and control projects Support periodic reviews of data privacy processes and controls and validate changes as a result of such reviews Track and review deviations and risk acceptances when raised and at the time of renewal to assess the need for deviations and ascertain that the business More ❯
our ever-growing talented team. Responsibilities Collaborate with Operations & Back Office teams to identify and assess operational risks in daily processes, including transaction handling, settlements, and reconciliation. Conduct regular risk assessments and control reviews, documenting potential vulnerabilities and recommending improvements. Monitor risk exposures and operational trends that could impact Ops/Back Office functions. Develop and maintain dashboards … and reporting tools to provide real-time risk information to senior management. Prepare and present risk reports for governance forums, such as risk committees, highlighting critical issues and potential impact on business continuity. Design and implement key risk controls in partnership with operational teams to manage identified risks within acceptable limits. Perform periodic control testing to … needed based on testing outcomes and feedback from internal audits. Investigate operational incidents, documenting root causes, and coordinating with relevant departments to implement corrective actions. Support the development of risk mitigation strategies to reduce the likelihood of repeat incidents, ensuring lessons learned are incorporated into the process. Ensure compliance with internal policies, regulatory requirements, and industry standards applicable to More ❯
Job Description - Cyber Risk Assurance Analyst (16065) Job Description Cyber Risk Assurance Analyst ( 16065 ) Description Cyber Risk Assurance Analyst Luton/Hybrid Company When it comes to innovation and achievement there are few organisations with a better track record. Join us and you'll be able to play a big part in the success of our highly … are as engrained as Aircraft Safety. This means close alignment to Operational, Commercial along with Regulatory and Audit functions. The role requires working closely with the Senior Digital Safety Risk Manager, the Head of Digital Safety Assurance and the Technical Security and Business Partner functions to support the Digital Safety vision . The Cyber Risk Assurance Analyst role … to identify, measure, and track cyber security risks within easyJet. This role requires collaboration with various business areas to gather the necessary information that enables the creation of informative risk reports, aiding decision making in the relevant forums supporting the Digital Safety Assurance team's objectives and assists in shedding light on key areas pertaining to our regulatory compliance More ❯
Derby, Derbyshire, United Kingdom Hybrid / WFH Options
ICS.AI Limited
Act as the primary point of contact with major clients during project delivery and represent the company on Project Steering Groups Manage all elements of the PRINCE2 Agile project management lifecycle for AI transformation programmes Coordinate technical implementation teams for projects and solutions across multiple concurrent workstreams Manage project budgets, resourcing, riskmanagement and stakeholder engagement across … multiple council departments Provide client communications and reporting, including regular Highlight reports and project status updates Ensure accountability for project quality through test plans, governance reviews and riskmanagement Create and maintain project documentation including Project Initiation Documentation, Project Plans, RAID Logs, and Change Management Trackers Deliver RiskManagement, Stakeholder Management, Budget Management, Benefits Realisation, Business Intelligence and Renewal management Effective resource planning to ensure maximum billable resource allocation Provide consultancy services and gather solution requirements from stakeholders Support the Project Management Office team with PMO continuous improvement initiatives Required Skills and Experience Minimum 5 years in a Project Management Office role PRINCE2 Foundation certification (PRINCE2 Practitioner and ITIL More ❯
and oversee governance frameworks that mitigate risks associated with Active Directory infrastructure within a highly regulated banking environment. This role ensures the security, compliance, and operational integrity by conducting risk assessments, establishing governance policies, and aligning technical practices with industry regulations and audit standards. • Acting as a subject matter expert, the specialist bridges the gap between technical security controls … and business riskmanagement, supporting audit readiness and regulatory compliance while enhancing the organization's overall cybersecurity posture. Candidate Value Proposition: • The successful candidate will play a key role in shaping IT governance within a global banking environment-leading strategic initiatives, driving compliance and risk mitigation, and collaborating with senior stakeholders. • This is a unique opportunity to … role that values leadership, technical excellence, and continuous improvement Typical Day in Role: • Maintain and update governance frameworks and policies to align with cybersecurity standards and banking regulations. • Conduct risk assessments on Active Directory infrastructure, identifying vulnerabilities and evaluating mitigation strategies. • Collaborate with technical teams and business stakeholders to translate security risks into actionable governance improvements. • Support internal and More ❯
Job title: RiskManagement Specialist Location: London/Hybrid Duration: 6 months Adecco is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents … skills, and unique experience in an inclusive environment that helps them thrive. The role: This role forms a key part of the 1LOD Technology RiskManagement function, supporting the Head of Technology Risk. The role holder will form a crucial component in the establishment of an enhanced riskmanagement framework and beyond that identify and assess … potential risks across Technology, as well as ensuring a comprehensive approach to risk mitigation. The key focus of this contract is to Support the enhancement of Technology Resilience and the maturity of riskmanagement practices Responsibilities: Process Documentation: Create and update process documentation across key technology processes to support governance, compliance, and operational consistency. SSSDLC Integration: Support More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Adecco
Job title: RiskManagement Specialist Location: London/Hybrid Duration: 6 months Adecco is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents … skills, and unique experience in an inclusive environment that helps them thrive. The role: This role forms a key part of the 1LOD Technology RiskManagement function, supporting the Head of Technology Risk. The role holder will form a crucial component in the establishment of an enhanced riskmanagement framework and beyond that identify and assess … potential risks across Technology, as well as ensuring a comprehensive approach to risk mitigation. The key focus of this contract is to Support the enhancement of Technology Resilience and the maturity of riskmanagement practices Responsibilities: Process Documentation: Create and update process documentation across key technology processes to support governance, compliance, and operational consistency. SSSDLC Integration: Support More ❯
bring strong technology leadership and governance, be passionate about customer centric innovation, have a track record leading and executing organisational change and demonstrate excellent proven stakeholder, vendor and partner management skills. The successful candidate will be a PCF role holder under the CBI regime, ensuring compliance with required standards, regulations and guidelines. Key Accountabilities Technology Strategy & Innovation • Develop and … training and upskilling programs. • Foster a DevSecOps and cloud-first culture to improve speed and scalability. • Champion cross-functional innovation labs to experiment with emerging technologies. Stakeholder, Partner & Vendor Management • Lead, negotiate and manage IT vendor and partner contracts, ensuring value-driving, cost-effective and future-proof solutions. • Partner with senior business stakeholders to understand key strategic priorities and … complex technical topics so they can be easily understood by stakeholders and users. • Oversee and optimise the Central Technology (Shared) Services into Canada Life Europe, including SLAs, budget, relationship management, supplier riskmanagement, compliance, GDPR etc. Technology RiskManagement, Compliance and Governance • Ensure IT investments support business growth, efficiency, and regulatory compliance. • Establish strong IT More ❯