Job Search

We are seeking an experienced Cyber Security Business Partner / Cyber Risk Lead to support the effective management of cyber security risk across a complex organisation. This is a contract opportunity, operating inside IR35, and is suited to a security professional who can combine strong technical understanding with excellent stakeholder engagement and business-focused risk management.

The successful candidate will act as a trusted adviser to senior business and technology stakeholders, helping them understand cyber security risks, regulatory obligations and appropriate controls. You will identify, assess and prioritise cyber risks; maintain clear risk records; support the development and monitoring of remediation plans; and provide regular reporting on risk exposure, control effectiveness and emerging threats.

Key responsibilities will include partnering with delivery, technology and operational teams to embed security by design; challenging and advising on risk decisions; supporting risk acceptance and exception processes; contributing to security governance forums; and ensuring that cyber risks are aligned with wider enterprise risk management principles. You will also help interpret security policies and standards, support audits and assurance activity, and promote practical improvements in security awareness and control maturity.

Applicants should have proven experience in cyber security risk management, information security governance, security assurance or a related discipline. You will need a strong understanding of cyber risk frameworks, control assessment and risk treatment, together with experience of producing clear reports for senior audiences. Familiarity with recognised standards such as ISO 27001, NIST or CIS would be advantageous, as would experience working within regulated or highly complex environments.

Excellent communication, influencing and relationship-building skills are essential. You should be comfortable translating technical issues into clear business impacts, managing competing priorities and working collaboratively with stakeholders at all levels. The ability to operate independently, demonstrate sound judgement and deliver tangible risk reduction in a fast-paced environment is also required.

This contract role offers the opportunity to make a meaningful contribution to cyber resilience, strengthen risk management practices and support informed, proportionate security decision-making across the organisation.

We are seeking an experienced Director – Technology Risk to lead the development and delivery of a robust technology risk management framework across a complex organisation. This is a senior leadership role, responsible for providing independent challenge, strategic oversight and practical guidance on technology, cyber and information risks.

You will define the technology risk strategy, policies and appetite, ensuring these remain aligned with business objectives, regulatory expectations and recognised industry standards. You will oversee the identification, assessment and treatment of risks relating to infrastructure, applications, data, cloud services, cyber security, operational resilience and third-party technology providers.

The role will involve partnering closely with senior technology, security, operational risk, audit and business stakeholders. You will provide clear, constructive challenge on major change programmes, technology investments, control design and risk acceptance decisions. You will also establish effective reporting, using meaningful management information to communicate the organisation’s technology risk profile, material issues, emerging threats and remediation progress to senior governance forums.

As a leader, you will build and develop a high-performing team, promote a strong risk culture and ensure consistent standards across all areas of technology risk. You will lead responses to regulatory reviews, internal audits and significant incidents, ensuring lessons are captured and corrective actions are delivered effectively.

The successful candidate will have substantial experience in technology risk, information security, IT audit, operational resilience or a closely related discipline, gained within a large and highly regulated environment. You will have a strong understanding of technology control frameworks, risk assessment methodologies, cyber threats, cloud governance, third-party risk and regulatory requirements. Excellent communication and influencing skills are essential, together with the ability to translate complex technical issues into clear business implications for senior audiences.

A relevant professional qualification, such as CISM, CRISC, CISSP, CISA or an equivalent risk, audit or technology certification, would be advantageous. You should be comfortable operating strategically while retaining sufficient technical understanding to challenge effectively and support sound, risk-based decisions.

An opportunity has arisen for a Senior IT Risk and Governance Analyst to support the development, implementation and continuous improvement of technology risk and governance practices. This role will help strengthen the organisation’s control environment, promote effective risk management and provide clear insight to senior stakeholders across technology and the wider business.

Working closely with technology, security, audit, compliance and business teams, you will identify, assess and monitor IT risks, ensuring that appropriate controls and mitigation plans are in place. You will maintain risk registers, track remediation activity and provide regular reporting on key risks, issues, control effectiveness and emerging threats. The role will also involve supporting governance forums and preparing concise, accurate information for senior management.

Your responsibilities will include developing and maintaining IT policies, standards, procedures and control frameworks; coordinating risk and control self-assessments; supporting internal and external audits; and monitoring compliance with relevant regulatory, legal and industry requirements. You will contribute to the review of third-party technology risks, assist with information security and operational resilience activities, and help embed a consistent risk-aware culture across technology teams.

The successful candidate will have substantial experience in IT risk, governance, controls, audit or information security, ideally within a complex or regulated environment. You will be confident interpreting technical and business information, assessing risk and translating complex issues into clear, practical recommendations. Experience with recognised frameworks such as COBIT, ITIL, ISO 27001, NIST or similar would be advantageous.

Strong analytical, organisational and stakeholder management skills are essential, together with excellent written and verbal communication. You will be comfortable challenging constructively, managing competing priorities and working independently while contributing effectively to a collaborative team. Relevant professional qualifications, such as CISA, CRISC, CISM, CISSP or equivalent experience, would be desirable.

We are seeking an experienced Cyber Security Risk Manager to lead the identification, assessment and management of information and cyber security risks across a complex organisation. This is an excellent opportunity for a security professional who can combine strong technical awareness with sound commercial judgement, clear communication and a practical approach to risk management.

You will maintain and develop the cyber security risk management framework, ensuring that risks are consistently recorded, assessed, treated and reported. Working with technology, operational and business stakeholders, you will identify emerging threats, evaluate vulnerabilities and recommend proportionate controls that support organisational objectives. You will also oversee risk acceptance, mitigation and remediation activities, challenging decisions where appropriate and ensuring that actions are completed within agreed timescales.

Key responsibilities will include producing risk reports and management information, supporting security assurance and governance forums, and advising on the security implications of new projects, suppliers, systems and technology changes. You will contribute to regulatory, audit and compliance activity, help maintain security policies and standards, and promote a positive risk-aware culture through effective engagement, guidance and training.

The successful candidate will have proven experience in cyber security, information security, technology risk or a closely related discipline, together with a strong understanding of risk assessment methodologies and security control frameworks. Experience of working with standards such as ISO 27001, NIST, CIS Controls or equivalent is highly desirable. You should be confident analysing complex information, prioritising competing risks and translating technical issues into clear business language for senior stakeholders.

Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are advantageous. You will be organised, credible and collaborative, with excellent written and verbal communication skills. A proactive mindset, strong attention to detail and the ability to influence without direct authority are essential. In return, you will have the opportunity to shape cyber security risk management, strengthen organisational resilience and make a meaningful contribution in a role with broad visibility and impact.

We are seeking an experienced Technology Risk Manager to oversee technology risk and control activities supporting post-trade regulatory reporting. This is an opportunity to join a complex, highly regulated environment where you will help ensure that reporting platforms, data flows and operational processes remain resilient, controlled and compliant with applicable regulatory obligations.

You will work closely with technology, risk, compliance, operations and change teams to identify, assess and manage risks across the post-trade reporting landscape. Responsibilities will include maintaining technology risk assessments, reviewing key controls, monitoring remediation activity and challenging control owners where weaknesses or emerging risks are identified. You will also support the investigation of incidents, control failures and data quality issues, ensuring that root causes are understood and corrective actions are delivered within agreed timescales.

The role will involve assessing the technology risk implications of regulatory change, system enhancements, outsourcing arrangements and operational change. You will contribute to governance forums, prepare clear management information and provide regular updates on risk exposure, control effectiveness, audit actions and remediation progress. You will also help ensure that appropriate evidence is maintained for internal and external reviews, including regulatory examinations.

To succeed, you will have experience in technology risk management, IT controls, operational risk or technology assurance within financial services or another highly regulated sector. A good understanding of post-trade processing, regulatory reporting, data governance, system interfaces and technology resilience would be highly beneficial. You should be comfortable interpreting regulatory requirements and translating them into practical controls and risk management activities.

Strong communication and stakeholder management skills are essential, together with the ability to influence colleagues at all levels and work effectively across multiple teams. Experience with risk and control frameworks, audit management, incident management and recognised technology or risk standards will be advantageous. Professional qualifications in technology, audit, risk or information security are welcomed but not essential.

We are seeking an experienced Lead Cyber Security Risk Manager – Head of Secure Design to provide strategic leadership across cyber security risk management, secure design and security assurance. This is a senior role for an established security professional who can translate complex risks into clear, actionable recommendations and embed security principles across technology, change and business operations.

You will lead the development and continuous improvement of secure design standards, principles, patterns and governance processes. Working closely with architecture, engineering, technology delivery and risk teams, you will ensure that security is considered from the earliest stages of initiative and product development through to implementation and ongoing operation. You will also oversee security risk assessments, challenge design decisions where appropriate and provide proportionate advice that supports delivery while protecting critical assets and information.

Key responsibilities will include managing and developing a team of cyber security risk and secure design specialists; establishing effective assurance and risk acceptance processes; maintaining security controls, policies and design guidance; and producing clear reports for senior stakeholders and governance forums. You will monitor emerging threats, regulatory expectations and industry practice, using these insights to strengthen the organisation’s security posture. The role will also involve supporting audit activity, tracking remediation plans and promoting a consistent risk-based approach across a complex technology environment.

Applicants should have substantial experience in cyber security risk management, security architecture, secure-by-design practices or a closely related discipline. You will be confident engaging with senior leaders and technical specialists, influencing decisions and communicating complex issues in straightforward language. Experience of risk frameworks, control assessments, threat modelling, cloud security and modern technology delivery methods would be highly advantageous.

Relevant professional qualifications, such as CISSP, CISM, CRISC, SABSA or equivalent experience, are desirable. Above all, you will bring sound judgement, strong leadership, excellent stakeholder management skills and a practical approach to managing cyber security risk. This is an opportunity to shape secure design capability and make a measurable contribution to resilience, trust and long-term business performance.

We are seeking an experienced Technology Risk Manager to lead the identification, assessment and management of technology and information security risks across a complex business environment. This is an opportunity to influence risk management practices, strengthen governance and support the delivery of secure, resilient and compliant technology services.

You will maintain and enhance the technology risk management framework, ensuring that risks are accurately recorded, assessed and monitored through to resolution. Working closely with technology, information security, compliance, audit and operational teams, you will provide constructive challenge and practical advice on risk mitigation, control design and remediation planning.

Your responsibilities will include overseeing risk and control assessments, reviewing key risk indicators, analysing incidents and control weaknesses, and preparing clear reports for senior stakeholders and relevant governance forums. You will also support the management of third-party technology risks, resilience assessments, regulatory requirements, audit activity and improvements to policies, standards and procedures.

The successful candidate will have proven experience in technology risk, IT governance, information security risk, technology controls or a closely related discipline. You will have a strong understanding of risk management principles, control frameworks and common technology risks, including cyber security, access management, change management, data protection, service resilience and cloud technology.

Excellent communication and stakeholder management skills are essential, together with the ability to explain complex issues clearly and influence positive outcomes. You should be analytical, organised and confident working independently while managing competing priorities. Experience with recognised frameworks such as ISO 27001, COBIT, NIST or ITIL, alongside relevant professional qualifications, would be advantageous.

This role offers the chance to make a meaningful contribution to technology governance and organisational resilience. We welcome applications from candidates who can bring sound judgement, a collaborative approach and a strong commitment to continuous improvement.

We are seeking a Senior Risk Manager – Technology Risk and Transformation to provide experienced leadership across technology risk, change and transformation initiatives. This is an opportunity to shape a proactive risk management approach, helping ensure technology services, systems and strategic programmes are resilient, well controlled and aligned with regulatory and business expectations.

You will lead the identification, assessment and management of technology and information risks, working closely with senior stakeholders across technology, change, cyber security, operational resilience, compliance and business functions. You will provide constructive challenge and practical advice on risk appetite, control design, risk acceptance, remediation planning and the delivery of sustainable improvements.

Your responsibilities will include overseeing technology risk assessments, supporting major transformation and change programmes, monitoring key risk indicators and reviewing control effectiveness. You will maintain clear risk reporting for senior governance forums, track actions through to completion and ensure emerging risks are identified, escalated and addressed appropriately. You will also contribute to the development of technology risk frameworks, policies, standards and methodologies.

The successful candidate will have substantial experience in technology risk management, IT governance, technology transformation or a related discipline. You will have a strong understanding of technology controls, risk and control self-assessments, third-party risk, operational resilience, information security and regulatory expectations. Experience of working within complex, highly regulated environments and supporting large-scale change programmes would be advantageous.

You will be a confident communicator, capable of influencing senior stakeholders and translating complex technical issues into clear business implications. Strong analytical, organisational and report-writing skills are essential, alongside the judgement to balance effective challenge with a pragmatic, solutions-focused approach. Relevant professional qualifications in risk, technology, audit, information security or governance are desirable.

This role offers the opportunity to make a visible contribution to the effectiveness and resilience of technology services while helping embed strong risk management practices across a changing environment.

We are seeking an experienced Information Technology Risk Manager to lead the identification, assessment and management of technology-related risks across a complex business environment. This is an opportunity to shape risk strategy, strengthen governance and support the secure delivery of critical technology services and change initiatives.

You will maintain and enhance the information technology risk management framework, ensuring risks are consistently identified, recorded, assessed, treated and reported. Working closely with technology, cyber security, compliance, internal audit and business stakeholders, you will provide constructive challenge and practical advice on risk mitigation, control design and emerging threats.

Key responsibilities will include conducting risk assessments, reviewing technology controls, overseeing remediation plans and monitoring risk indicators. You will contribute to governance forums, prepare clear reports for senior management and ensure significant issues are escalated appropriately. The role will also involve supporting regulatory, audit and assurance activities, as well as assessing risks associated with third-party suppliers, cloud services, system changes and business continuity.

The successful candidate will have proven experience in IT risk management, technology governance, information security or a closely related discipline. You will have a sound understanding of risk and control frameworks, cyber security principles, data protection, resilience and common technology risks. Experience with frameworks such as ISO 27001, COBIT, NIST or ITIL would be advantageous, along with a relevant professional qualification or certification.

You will be an effective communicator who can translate technical issues into clear business implications and influence stakeholders at all levels. Strong analytical, organisational and report-writing skills are essential, together with the confidence to challenge constructively and manage competing priorities. You should be proactive, commercially aware and comfortable working independently while contributing positively to a collaborative team.

In return, you will have the opportunity to make a visible impact on technology risk maturity, work with a broad range of stakeholders and help build a resilient, well-governed technology environment.

We are seeking a Cyber Governance & Risk Analyst to support the development, operation and continuous improvement of cyber security governance and risk management across the organisation. This role will help ensure that information security risks are identified, assessed and managed effectively, while supporting compliance with relevant policies, standards and regulatory requirements.

You will maintain cyber security risk registers, coordinate risk assessments and monitor the progress of remediation activities. Working with colleagues across technology, operational teams and business functions, you will provide practical advice on risk treatment, control effectiveness and security obligations. You will also support the preparation of risk reports, management information and governance papers for senior stakeholders and relevant committees.

Key responsibilities will include reviewing and updating security policies, standards and procedures; supporting internal and external audits; tracking security exceptions and waivers; and helping to assess the cyber security implications of new projects, suppliers and technology changes. You will contribute to assurance activities, control testing and evidence gathering, ensuring that actions are clearly documented and completed within agreed timescales. The role may also involve supporting incident reviews and lessons-learned activities where governance or control improvements are identified.

The successful candidate will have experience in cyber security governance, information security, technology risk or a related discipline. You will be confident interpreting security frameworks and applying them in a practical business environment, with knowledge of standards such as ISO 27001, NIST or CIS Controls. Experience of risk assessment, audit support, policy management and reporting to stakeholders is desirable.

You should have strong analytical and organisational skills, excellent written and verbal communication, and the ability to work collaboratively with both technical and non-technical colleagues. Professional qualifications such as CISA, CRISC, CISSP, ISO 27001 or equivalent experience would be advantageous. Above all, you will demonstrate sound judgement, attention to detail and a proactive approach to improving cyber resilience.