Technology / Cyber Governance, Risk and Compliance

4 weeks ago


London, United Kingdom eFinancialCareers Full time

**Technology / Cyber Governance, Risk and Compliance Manager**

12 month Fixed term contract

Exciting opportunity to join a leading insurer in the city of London as a Technology / Cyber Governance, Risk and Compliance Manager. If you have experience on the development/implementation of technology risk framework and processes this could be the idealrole for you.

This is a crucial position to the function to establish a detective and preventive control framework over security threats, as well as to operationalise control assessments.

Positioned within the Operational Risk Management team, the main purpose of the Role is to design, implement and manage the company's Cyber Governance, Risk & Control (GRC) policy and framework. The position is responsible for risk oversight and challengeof 1st-line cyber security controls, ensuring all risk & assurance activities combine.

Responsibilities include:

- Develop, implement, and continuously review the Cybersecurity Risk Management Policy, Framework and Control Environment.
- Define acceptable control maturity, required to achieve operational risk tolerance. Act as 2nd line representative for cybersecurity programme oversight.
- Act as the company's focal point with PRA, Lloyds and other, relevant market and national regulators; collating reports and ensuring controls and remediation align with regulatory expectations.
- Ensure successful definition and implementation of the 2nd Line of Defence (LoD) Information Risk management within the Operational Risk framework in accordance with risk management policies and the 3 LoD model, with a specific focus on information securitycontrol framework
- Be the key contact for the Risk & Control Self-Assessment (RCSA) process and have continued dialogue with information security control owners
- Perform business reviews to assess the level of internal control, and demonstrate that risks are managed within risk appetite, and advise management of the results and recommendations
- Ensure successful implementation of information security risk management framework through deep dives, risk control self-assessment (RCSA), management actions, and development and testing of formal internal controls
- Develop, monitor, evaluate and report key information security metrics to provide management with accurate and meaningful information regarding the effectiveness of the information security controls (design and operation)

Skills required:

- Bachelor's and/or Master's degree in Information Technology, Cybersecurity, or similar/equivalent education or experience
- Extensive experience in Information Security Risk Management
- Practical and applied knowledge of the main information and cybersecurity frameworks such as ISO 27001/ISO 27005, NIST Cybersecurity Framework, and general legal and regulatory framework such as EU GDPR, EU NIS 2, etc
- Experience of working within or alongside key Operational Risk processes in a first or second line of defence capacity and understanding of the principles of risk management
- Excellent stakeholder management skills, including technical members of staff and senior executives as well as a proven track record of constructive business partnering approach and negotiation/positive influencing skills.
- Ability to understand and analyse business processes and technologies to make sound recommendations to non-technical constituents
- Use and knowledge of Governance, Risk and Compliance platforms preferred.
- Familiarity with the management of operational risk within the financial services sector, prior experience working in a financial services industry would be advantageous



  • City of London, United Kingdom BCT Resourcing Full time

    Cyber Governance, Risk and Compliance Manager - FTC City of London £65,000 - £95,000 per annum Company client is recruiting for a Cyber Governance, Risk and Compliance Manager for a specialty Insurance business. They are looking for the Cyber Governance, Risk and Compliance Manager to establish a control framework over security threats, as well as...

  • Governance, Risk

    6 days ago


    London, United Kingdom Millennium Management LLC Full time

    Information Security GRC Lead Securing Millennium’s complex and robust technical environment from external and internal threats is a top priority. This individual will be responsible for development and management of the Firm’s Information Security Governance structure that will include alignment to industry standard risk and control frameworks and the...


  • London, United Kingdom Hays Specialist Recruitment Limited Remote Work Freelance Full time

    Your new companyA high-profile Ministerial Department supporting businesses to invest, grow and export Your new roleInterim Head of GRC (Governance, Risk and Compliance) - SC Cleared What you'll need to succeedWe are working exclusively with a Public Sector Client, recruiting for the role of Interim Head of Governance, Risk and Compliance (GRC).The role is a...

  • Head of GRC

    2 days ago


    City of London, Greater London, United Kingdom Security Cleared Jobs Full time

    Your new company A high-profile Ministerial Department supporting businesses to invest, grow and export Your new role Interim Head of GRC (Governance, Risk and Compliance) - SC Cleared What you'll need to succeed We are working exclusively with a Public Sector Client, recruiting for the role of Interim Head of Governance, Risk and Compliance (GRC).The...


  • London, United Kingdom eFinancialCareers Full time

    Gresham Hunt are currently partnered with a renowned banking institution in the search for a well-rounded Cyber Risk professional, to join their growing second line of defence Risk Oversight function. This is an exciting to opportunity to provide SME guidance to the organisation in its regulatory requirements around Cyber, IT, Data Security and Operational...


  • London, United Kingdom Lutine Bell Full time

    Lutine Bell are proud to be assisting a Tier 1 Group Asset Management Company. Our client is looking to hire a Cyber and Technology Risk Manager & you will be reporting into the Head of Risk who also oversees the Cyber, Technology Risk and Resilience areas of the company. Our client helps institutions, intermediaries and individuals around the world invest...


  • London, United Kingdom Millennium Management LLC Full time

    Information Security GRC Lead Securing Millennium’s complex and robust technical environment from external and internal threats is a top priority. This individual will be responsible for development and management of the Firm’s Information Security Governance structure that will include alignment to industry standard risk and control frameworks and the...


  • London, United Kingdom Willis Towers Watson Full time

    Technology and Cyber Regulatory Engagements Lead - London, GB June 13, 2023 The role includes leadership of a global regulatory engagements team whilst driving continuous improvements and cross-leverage of common details to support request for information more effectively and consistently. The role will report to the Head of Governance, Risk and Controls,...

  • Head of GRC

    1 day ago


    London, United Kingdom Hays Full time

    Head of GRC (Governance, Risk and Compliance) - SC Cleared Your new company A high-profile Ministerial Department supporting businesses to invest, grow and export Your new role Interim Head of GRC (Governance, Risk and Compliance) - SC Cleared What you'll need to succeed We are working exclusively with a Public Sector Client, recruiting for the...


  • London, United Kingdom 83zero Full time

    Cyber Security Governance Manager 83zero is working with a leading IT consultancy that partners with global organisations to deliver IT operations along with business advancements through the adoption of new and innovative technologies. Our client partners with a number of international private businesses in shipping, real estate, energy, banking, and...


  • London, United Kingdom Bestmansolutions Full time

    Senior Governance and Compliance Consultant Location: London, United Kingdom Contract Type: Contract Bestman Solutions is working with a global consumer firm that is looking for a Senior Governance and Compliance Consultant / Governance Risk and Compliance Consultant to help transform its compliance processes. This role would suit a consultant with...

  • Governance, Risk

    4 weeks ago


    London, United Kingdom Morson Talent Full time

    Morson Talent are partnering with a key account, UK Power Networks. UKPN Services provides innovative electrical technology solutions and traditional electrical contracting to large and SME businesses throughout the UK in the rail, defence, airport, nuclear,and commercial and industrial private networks’ markets. **About the Role** The role we are...

  • Cyber Risk Consultant

    1 month ago


    London, United Kingdom REED Full time

    Cyber Risk Consultant Cyber Risk Consultant/ Cyber Risk Specialist/ Cyber Security SME/ Cyber Security Consultant/ Cyber Security Risk Management/ Cyber Security Awareness/ Cyber Strategy/ CISM/ CRISC Farringdon/Remote £700-800 Per Day - Inside IR35 5 Month Contract-Extensions Likely A Cyber Risk Consultant is required by our Global client to join a...

  • Head of Cyber

    4 weeks ago


    London, United Kingdom eFinancialCareers Full time

    Gresham Hunt are currently partnered with a leading investment bank who are seeking an experienced Cyber and IT Resilience professional for their growing 2nd Line of Defence function. This is a Director level position in which you will lead the 2LOD oversightof Technology Resilience across the Group. - Previous experience working a 2nd Line of Defence...


  • London, United Kingdom ubs Full time

    United Kingdom Information Technology (IT) Group Functions Job Reference # 289548BR City London Job Type Full Time Your role Do you have a strong technical cyber security background? Do you have proven experience in cyber risk governance? We’re looking for a Cyber Security Risk Governance Specialist to: •serve as a subject matter...


  • London, United Kingdom Broadgate Search Full time

    **Technology and Resilience Risk Associate** Join our Risk and Compliance team as a Technology and Resilience Risk Associate in a permanent role. Reporting to the Technology and Resilience Oversight Manager, you can choose to work from either Edinburgh or London. **About The Role** You'll provide essential oversight, advice, and challenge to ensure the...


  • London, United Kingdom James Adams Group Full time

    Cyber Security Risk and Assurance Manager Position Overview: We are seeking an experienced and dynamic Cyber Security Risk and Assurance Manager to join our clients team. In this role, you will be responsible for managing and enhancing our cyber security risk management and assurance program, ensuring that our organisation operates in a secure and...

  • Technology Risk

    4 days ago


    London, United Kingdom Finitas Full time

    Job Description Technology Risk And Governance Manager | Leading London Market Insurer Finitas are excited to be working with this leading London Market Insurance company in their search for a Technology Risk and Governance Manager to support in the 1st LoD. 5+ years expereince in Technology Risk Management ~ Knowledge of Technology, Security, and Risk...

  • Senior Analyst

    2 weeks ago


    London, United Kingdom Locke and McCloud Full time

    Locke & McCloud are seeking a GRC specialist to join a reputable and established governance function. Develop and implement effective framework policies, procedures, and standards that align with industry best practices. Design and implement risk mitigation strategies and incident response plans. Stay up-to-date with the latest cybersecurity threats,...


  • London, United Kingdom Lorien Remote Work Freelance Full time

    Technology Risk Governance Analyst- Insurance We are currently hiring for an Analyst with Technology Risk Management experience to join one of our Insurance clients on a 6-month contract. Inside IR35 Hybrid- 2 days a week onsite in the London office. Responsibilities: Embed line 1 risk management framework and practices in Technology to ensure we manage...