26 jobs found

The NXP Product Security Incident Response Team (PSIRT) is committed to rapidly address security vulnerabilities in NXP products, by responding and documenting reported vulnerabilities and by providing customers with clear guidance on the impact, severity and mitigation. See also .Our organization is growing and therefore we have this new opportunity. We're looking for an experienced security expert to work on different initiatives and projects with the goal of improving our security posture. In addition, you will be responsible for identifying, triaging, and supporting resolution of product-related security incidents. You'll get the opportunity to collaborate across engineering, security teams, product managers and others with the goal of protecting our products and customers. In this role, you: Empower our software development community in managing vulnerabilities in Third Party Components (TPS) and Open Source Software (OSS), ensuring robust security Define and develop best practices, streamline processes, and drive continuous improvement initiatives. Contribute to new regulations and standardization activities that may impact product security or our way of working such as the upcoming EU Cyber Resilience Act. Collaborate with innovators - partner with external security researchers, academia and research organizations on cutting-edge projects and vulnerability submissions. Be a key player in risk management by supporting and leading triage and vulnerability assessments of product vulnerabilities. Work cross-functionally with internal teams (engineering, product management, legal, etc.) to ensure timely resolution of incidents. Own the process by generating and managing PSIRT JIRA tickets for validated vulnerabilities. Provide updates about incident status, impact, and mitigation actions to relevant stakeholders. Manage incoming Third Party vendor vulnerability pre-notifications andmonitor internal and external sources to identify signs of security incidents related to our products. Your profile 3+ years of experience in product security incident response, investigation and vulnerability management across hardware and software products. Bachelor's/master's degree in engineering - Computer Science, Electrical Engineering, Cybersecurity, or a related field. Familiarity in a Security Operations Center or PSIRT or similar security incident response teams. Familiarity with industry-standard security frameworks, standards, and regulations. Understanding of security in the following areas - embedded systems, hardware and software; ability to quickly learn where needed Interests in security concepts, secure coding, and security best practices Excellent collaboration and communication skills to work effectively with cross-functional teams. Ability to work independently, taking ownership of security initiatives and improving processes.Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.For Austrian applicants: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) "Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung", this position (fulltime) is graded in Employment Group V. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more. Bright Minds. Bright Futures.We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills.

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients. We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications. We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals. About the role The Risk, Compliance & Resilience Advisor shall help to manage compliance and assurance for supporting the Senior Manager - Risk & Compliance and Risk & Resilience Lead by ensuring that: Risk Assessment: Assist in identifying, assessing, and prioritising risks across the organisation. Conduct risk assessments to evaluate the likelihood and potential impact of risks on business operations and objectives Compliance Monitoring: Monitor regulatory developments and changes in laws, regulations, and industry standards. Assess the organisation's compliance with applicable regulations, standards, and internal policies Resilience Planning: Support the Global Risk & Resilience Lead in the Development and maintenance of IT resilience and business continuity plans to ensure the organisation's ability to respond to and recover from IT disruptions Incident Response and Management: Provide support in DR related incident response activities, including investigating IT security incidents, breaches, and disruptions Issue Identification: Identify and document risk deficiencies, compliance gaps, and areas for improvement. Collaborate with stakeholders to develop actionable recommendations and corrective action plans to address identified issues Documentation and Reporting: Maintain accurate documentation of risk assessments, compliance reviews, control testing activities, and remediation efforts. Prepare regular reports for management and stakeholders on the status of risk, compliance, and control activities Policy and Procedure Development: Assist in the development and maintenance of risk management, compliance, and control related policies, procedures, and guidelines. Ensure alignment with regulatory requirements and industry best practices in alignment with the Global IS Governance Lead Vendor Risk Management Support: Assist in assessing and managing risks associated with third party vendors and service providers. Evaluate vendor controls and adherence to contractual obligations Continuous Improvement: Identify opportunities for enhancing risk management, compliance, and control processes. Recommend and implement improvements to strengthen the organisation's risk and control environment Project Work: Contribute to project activities as required to ensure GRC requirements are understood and addressed Areas of Accountability, Responsibility and Competence Level Works with the Global Risk & Compliance Senior Manager to support IS in the delivery of governance, compliance, and risk activities, whilst supporting the Integration projects Supports the execution of the security, audit, and compliance activities Supports the Global Risk & Compliance Senior Manager by ensuring the successful delivery of initiatives and projects within the Risk and Compliance environment Supports the Risk & Compliance Senior Manager, and Risk & Resilience Lead in any required activities which support improvements in assurance, compliance, and audit activities Addresses findings from identified risks or audits Ensures the ISMS contains an accurate record of risks, events, and issues Supports the internal and external audit investigations Ensures that the audit tests, self certifications, and audit reviews are relevant, consistent, and conducted in accordance with professionally accepted auditing standards Works with minimal supervision, using clearly defined processes and procedures Facilitates the use of performance metrics to improve output May be required to provide out of hours support via an on call rota Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate compliance and risk related concepts to technical and non technical audiences Substantial relevant experience in control management for governance, compliance, IT audits, IS assurance and risk management programmes CISA, CISM or equivalent preferred BSc or equivalent qualification in IT based degree preferred 3+ years relevant IT work experience Proven ability to communicate with technical teams to elicit information and requirements Understanding of regulatory requirements, including cross industry regulations (e.g., GDPR, Data Protection Act) and industry specific regulations Skilled in implementing compliance and control frameworks Proficient in IT governance and quality standards Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including and Cybersecurity Framework Excellent stakeholder management skills High level of personal integrity, as well as the ability to professionally handle confidential matters and show an appropriate level of judgement and maturity Knowledge of OneTrust risk management toolset or similar preferred At Sword, our core values and culture are based on caring about our people, investing in training and career development, and building inclusive teams where we are all encouraged to contribute to achieve success. We offer comprehensive benefits designed to support your professional development and enhance your overall quality of life. In addition to a Competitive Salary, here's what you can expect as part of our benefits package: Personalised Career Development: We create a development plan customised to your goals and aspirations, with a range of learning and development opportunities within a culture that encourages growth. Flexible working: Flexible work arrangements to support your work life balance. We can't promise to always be able to meet every request, however, are keen to discuss your individual preferences to make it work where we can. A Fantastic Benefits Package: This includes generous annual leave allowance, enhanced family friendly benefits, pension scheme, access to private health, well being, and insurance schemes. At Sword we are dedicated to fostering a diverse and inclusive workplace and are proud to be an equal opportunities employer, ensuring that all applicants receive fair and equal consideration for employment, regardless of whether they meet every requirement. If you don't tick all the boxes but feel you have some of the relevant skills and experience we're looking for, please do consider applying and highlight your transferable skills and experience. We embrace diversity in all its forms, valuing individuals regardless of age, disability, gender identity or reassignment, marital or civil partner status, pregnancy or maternity status, race, colour, nationality, ethnic or national origin, religion or belief, sex, or sexual orientation. Your perspective and potential are important to us.

Senior Cyber Security Governance Manager required to lead and evolve enterprise-wide cyber governance within a large global organisation in Glasgow. This is a senior role with responsibility for strengthening governance, risk oversight and control frameworks across a complex, international environment. The position sits within InfoSec (not IT), giving it true independence and strategic visibility across the business. You'll play a key role in ensuring cyber security governance supports business growth, innovation and regulatory obligations particularly as the organisation continues to mature its security capability and explore emerging technologies such as AI. The Organisation Over the past three years, the organisation has significantly enhanced its cyber security maturity - strengthening frameworks, investing in tooling, and embedding better risk practices across the enterprise. That journey continues, with strong executive sponsorship and ongoing investment in governance and resilience. Security is viewed as a strategic enabler, not just a compliance requirement. The InfoSec function operates globally, partnering with senior stakeholders across regions and business units to ensure consistent standards and effective risk management. As the business explores greater use of AI and advanced technologies, there is a growing focus on ensuring appropriate governance, controls and risk frameworks are in place from the outset. The Role You will take ownership of cyber governance frameworks and oversight processes, ensuring they remain aligned to varying international standards and evolving regulatory expectations. Leading and developing a skilled team, you'll set direction, establish priorities, and ensure consistent delivery of risk oversight, policy development, reporting and control assurance activities. You'll work closely with regional stakeholders, Risk & Compliance, procurement and senior leadership to embed governance into business processes and strategic initiatives. A key aspect of the role will be ensuring the organisation is well positioned to manage emerging risks, particularly those associated with AI adoption, helping define appropriate controls, risk assessment approaches and oversight mechanisms. This role combines strategic thinking with practical execution. You'll influence at executive level while also driving measurable improvements in risk visibility, reporting and control effectiveness. What You'll Be Doing Leading the ongoing evolution of the cyber governance framework to ensure it remains aligned with international standards and business priorities. Driving enterprise cyber risk oversight, ensuring risks are identified, assessed and clearly communicated to senior stakeholders globally. Embedding governance across global teams, creating consistency while accommodating regional regulatory requirements. Strengthening reporting and metrics, providing meaningful insight into security posture and maturity. Overseeing third party and supplier security risk, ensuring external partners meet required standards. Supporting secure innovation, particularly around AI initiatives, helping shape governance and control structures for emerging technologies. Championing continuous improvement, building on the significant progress made in recent years to further enhance security maturity. What They're Looking For Proven experience in cyber security governance or enterprise security risk leadership within a complex environment. Strong knowledge of recognised frameworks such as ISO 2700 and NIST CSF. Ability to engage and influence senior global stakeholders, translating technical risk into business relevant insight. Experience assessing emerging risks, ideally including exposure to AI, data governance or advanced technologies. Professional certifications such as CISSP, CISM, CRISC or similar are desirable. A strategic mindset combined with practical delivery capability, comfortable operating at both executive and operational levels. The Offer A competitive salary and benefits package is on offer, alongside hybrid working (typically 2 days per week in a modern city centre office. This is an opportunity to join a global Information Security function at a pivotal stage in its maturity journey - influencing governance at scale, shaping how emerging risks and technologies are controlled, and playing a visible role in the organisation's continued evolution. If this sounds of interest, please apply or reach out to Murray Simpson.

Expedia Group brands power global travel for everyone, everywhere. We design cutting edge tech to make travel smoother and more memorable, and we create groundbreaking solutions for our partners. Our diverse, vibrant, and welcoming community is essential in driving our success. Why Join Us? To shape the future of travel, people must come first. Guided by our Values and Leadership Agreements, we foster an open culture where everyone belongs, differences are celebrated and know that when one of us wins, we all win. We provide a full benefits package, including exciting travel perks, generous time off, parental leave, a flexible work model (with some pretty cool offices), and career development resources, all to fuel our employees' passion for travel and ensure a rewarding career journey. We're building a more open world. Join us. Role summary As the Operational Resilience Manager you will lead the design and delivery of practical, effective business continuity solutions that help us power global travel for everyone, everywhere. You will partner with teams across technology, cyber, workforce, facilities, and third party management to identify and manage operational risks, align resilience capabilities, and ensure readiness for disruption. In this role, you will map critical operational dependencies, develop and validate continuity strategies and plans, and drive the implementation of resilience measures that keep our most important services running. What you'll do Support the design, development and implementation of the Operational Resilience Framework (ORF) outlining Business Continuity (BCM) and Disaster Recovery (DR) program requirements based on industry standards (ISO 22301, NIST, SOC2) and applicable regulatory requirements. Lead the update of relevant policy updates to reflect program development and application of requirements to the business based on criticality. Lead the implementation of the Business Continuity Management (BCM) and support the continued development of the Disaster Recovery (DR) program enabling technology teams to develop a deeper customer centric posture in managing disruptions. Conduct business impact analyses (BIA) and support dependency mapping across applications, infrastructure, and operations to establish accountability across mission critical apps. Support the establishment of targeted cross company working groups to ensure the alignment of annual and quarterly planning priorities and activities amongst key stakeholders to drive year on year development aligned to the operational resilience strategy. Engage and partner with engineering, platform, and security teams to develop and embed measures that create resilience by design, including immutable backup validation and CI/CD integration. Govern and execute business continuity, disaster recovery, and crisis response plans, facilitating tabletop and live disaster simulations with Security, IT, Facilities, HR, and Legal. Who you are Minimum qualifications You have experience in establishing/supporting the establishment of Business Continuity Management, Incident Management and Crisis Management programs including the development of planning, roadmaps, coordinationand delivery of requirements, and launch of new programs. Excellent written and verbal communication skills, with the ability to influence and align diverse stakeholders. You are an effective influencer, comfortable engaging with engineers, business leaders, security, compliance and executive leadership. You are skilled at leading tabletop and live recovery simulations and building governance frameworks that drive awareness and embed resilience culture. You are a team player, highly collaborative with a learner mindset and strong focus on delivery. You are driven by challenges and the opportunity to apply your knowledge, learn constantly and adapt your approach where necessary to ensure the best outcome for the organization. Preferred qualifications 6+ years experience in Business Continuity, Disaster Recovery, Operational Resilience, or related discipline. You have proven success building and/or leading Business Continuity, Disaster Recovery, programs in large scale, real time environments (preferably eCommerce). You have deep knowledge in Business Continuity Management in fast paced ecommerce environments and a successful track record of delivery with proven and demonstratable high level of adaptability to meet the organizations needs. You bring experience across technical and non technical continuity practices. You are fluent in external compliance and audit frameworks (ISO 22301, NIST 800-34, SOC2, GDPR) and skilled in preparing evidence for assessments. Accommodation requests If you need assistance with any part of the application or recruiting process due to a disability, or other physical or mental health conditions, please reach out to our Recruiting Accommodations Team through Accommodation Request. We are proud to be named as a Best Place to Work on Glassdoor in 2024 and be recognized for award winning culture by organizations like Forbes, TIME, Disability:IN, and others. Expedia Group's family of brands includes: Brand Expedia Expedia Partner Solutions, Vrbo , trivago , Orbitz , Travelocity , Hotwire , Wotif , ebookers , CheapTickets , Expedia Group Media Solutions, Expedia Local Expert and Expedia Cruises . 2024 Expedia, Inc. All rights reserved. Trademarks and logos are the property of their respective owners. CST: -50 Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you're confident who the recipient is. Expedia Group does not extend job offers via email or any other messaging tools to individuals with whom we have not made prior contact. Our email domain The official website to find and apply for job openings at Expedia Group is Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability or age.

Job Description Are you eager to support the delivery of Product cyber resilience, at the cutting edge of fighter aircraft development? Our Electronic Warfare and Future Combat Air Systems (EW and FCAS) Design Integrity department are seeking a Lead Security Engineer to join their team working to develop the defence products of the future across all domains. As a Lead Security Engineer, you will be responsible for the delivery of product security. Working alongside product teams as part of the EW and FCAS business areas. Responsibilities Defining product security requirements, advising development teams on suitable implementation standards and techniques and supporting product development activities. Develop and manage security protocols, tools, and processes that keep our technologies ahead of emerging threats. Creation and management of key artefacts such as Risk Assessments, and Remediation Action Plans. Drive Security Assurance through the full product lifecycle, ensuring every design is robust, compliant, and resilient. Contributing to continual improvement of the engineering capability. Contribute to Leonardo's UK-wide Security and IA community - shaping best practice and influencing security strategy. Liaison with Security experts, including the head of product security and Product Cyber Resilience Managers to support ongoing Security Assurance. What you'll bring Practical experience of ISO27001/27004/27005 and NIST Risk Management Framework (RMF). Experience of supporting a security risk management system for highly regulated products based on recognised frameworks such as aerospace, nuclear, automotive, rail or oil and gas. Understanding and appreciation of the Engineering development lifecycles and how the Product Security specialism aligns. Ability to interpret Penetration Test Reports and support remediation action. Awareness of UK Government Assurance Processes (such as the legacy JSP 604 Assurance or the CAF GovAssure processes). This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre-employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work-life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we're here to help you thrive. Time to Recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi-days each year. Secure your Future: Benefit from our award-winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee-led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity). Rewarding Performance: All employees at management level and below are eligible for our bonus scheme. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Refer a friend: Receive a financial reward through our referral programme. Tailored Perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more. Flexible working: Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role. For a full list of our company benefits please visit our website. About Leonardo Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Locations & Details Primary Location: GB - Luton - Cap. Green 300 Additional Locations: GB - Basildon, GB - Bristol - Coldharbour Lane, GB - Lincoln, GB - Southampton Contract Type: Permanent Hybrid Working: Hybrid

Join a dynamic Cyber Risk & Security practice within Technology & Transformation, delivering incident response, threat hunting, and resilience services to major clients. Based in London or Manchester with hybrid working, this permanent role is for technical experts who thrive in high-stakes environments, leading teams to evict advanced threats and build response maturity across networks, hosts, and cloud. What You'll Do Lead cyber incident response engagements, supervising teams to identify root causes, evict threats, and prevent business disruption. Conduct network forensics, host/memory analysis, malware triage, and cloud investigations (AWS, GCP, Azure) to detect malicious activity. Deliver proactive services like incident response advisory, maturity improvements, cyber war-gaming, and response automation. Manage multi-discipline teams during incidents, prioritizing analysis and remediation; contribute to service development and team coaching. Build client relationships, communicate findings to diverse stakeholders, and participate in on-call roster with UK/EMEA travel. What We're Looking For Proven incident response experience supervising teams, managing incidents in-house or consulting; strong network forensics and security intelligence skills. Expertise in forensic/memory analysis on Windows/Unix/Linux, cloud IR (AWS/GCP/Azure), malware analysis, and current hacking techniques/vulnerabilities. Excellent communication for tailoring reports to all levels; interpersonal skills for stakeholder relationships and team leadership. Experience in proactive IR advisory, war-gaming, and leading technical responses; willingness for on-call and travel. Relevant certifications (e.g., CISSP, GCIH, GCFA, GREM); security clearance or eligibility preferred. What's on Offer Flexible hybrid model with office (London/Manchester), client sites, virtual spaces, and remote work to balance career and home life. Access to 300+ talented cyber professionals for collaboration, training, mentoring, and world-class development to build leadership skills. Inclusive, values-driven culture focused on impact, wellbeing, recognition, and continuous growth in a high-demand practice.

Job title: IT Director Salary: Competitive + benefits Location: London Purpose of role Lawes Group is working with a well-established Lloyd's Broker to appoint an IT Director. The IT Director will have full responsibility for the leadership, strategy, security, and day to day operation of the IT function for the organisation. This role combines hands on operational oversight with senior level strategic input, ensuring IT systems, data, and cyber resilience effectively support the business now and in the future. Responsibilities Overall ownership of IT strategy, architecture, and delivery across the business Lead, manage, and develop a small internal IT team Responsibility for IT governance, policies, procedures, and internal controls Ensure compliance with Lloyd's Minimum Standards and regulatory requirements Ownership of cyber security, IT risk, resilience, and business continuity Manage third party suppliers, contracts, and service levels Own and manage the IT budget and technology investment planning Lead IT change initiatives, system upgrades, replacements, and improvement projects Act as the senior IT point of contact for the business and senior stakeholders Day to day Managing the IT team Oversee IT operations and helpdesk support for company Manage and support core insurance IT systems Ensure system availability, performance, and data integrity Support management with accurate MI, reporting, and data insights Monitor cyber threats, incidents, and control effectiveness Work closely with the wider business to identify and deliver technology improvements Liaise with vendors and service providers to ensure effective delivery Skills Minimum 10 years post graduate IT experience Strong background within the insurance sector, ideally the Lloyd's market Proven experience running IT for a small to mid sized organisation Strong knowledge of cyber security, IT risk management, and compliance Experience managing IT budgets, suppliers, and third party providers Track record delivering IT change, upgrades, and improvement initiatives Experience with insurance systems such as Brokersure, IMR, and ECF (or similar) Strong leadership, communication, and stakeholder management skills If you have the relevant experience or know someone that does, please contact me now on or email us at

Join a dynamic Cyber Risk & Security practice within Technology & Transformation, delivering incident response, threat hunting, and resilience services to major clients. Based in London or Manchester with hybrid working, this permanent role is for technical experts who thrive in high-stakes environments, leading teams to evict advanced threats and build response maturity across networks, hosts, and cloud. What You'll Do Lead cyber incident response engagements, supervising teams to identify root causes, evict threats, and prevent business disruption. Conduct network forensics, host/memory analysis, malware triage, and cloud investigations (AWS, GCP, Azure) to detect malicious activity. Deliver proactive services like incident response advisory, maturity improvements, cyber war-gaming, and response automation. Manage multi-discipline teams during incidents, prioritizing analysis and remediation; contribute to service development and team coaching. Build client relationships, communicate findings to diverse stakeholders, and participate in on-call roster with UK/EMEA travel. What We're Looking For Proven incident response experience supervising teams, managing incidents in-house or consulting; strong network forensics and security intelligence skills. Expertise in forensic/memory analysis on Windows/Unix/Linux, cloud IR (AWS/GCP/Azure), malware analysis, and current hacking techniques/vulnerabilities. Excellent communication for tailoring reports to all levels; interpersonal skills for stakeholder relationships and team leadership. Experience in proactive IR advisory, war-gaming, and leading technical responses; willingness for on-call and travel. Relevant certifications (e.g., CISSP, GCIH, GCFA, GREM); security clearance or eligibility preferred. What's on Offer Flexible hybrid model with office (London/Manchester), client sites, virtual spaces, and remote work to balance career and home life. Access to 300+ talented cyber professionals for collaboration, training, mentoring, and world-class development to build leadership skills. Inclusive, values-driven culture focused on impact, wellbeing, recognition, and continuous growth in a high-demand practice.

We are seeking an experienced and commercially minded Chief Information Officer (CIO) for our World Services division, to lead and govern a lean, high performing global IT function that delivers secure, reliable and business enabling technology services. About the role This is a senior leadership role accountable for overall IT strategy, operating model design, governance and performance. The CIO provides clear direction and oversight across Service Operations, Technical Operations, and Cybersecurity and Productivity Solutions Operations, ensuring technology services are aligned with business priorities, risk appetite and compliance obligations. Operating within a security first, cloud centric environment, the CIO ensures that IT delivers predictable, transparent and measurable outcomes, balancing operational stability with continuous improvement and transformation. The role acts as a trusted partner to senior business leadership, translating business strategy into a coherent technology roadmap while maintaining strong control, accountability and financial discipline. The CIO leads a small, highly skilled internal team augmented by managed service partners, ensuring that internal capability is focused on leadership, governance, architecture and assurance rather than commodity delivery. This role reports directly to the World Services Chief Operating Officer (COO) with a functional report through to the M+C Saatchi Group CIO. What you'll do IT leadership and strategy Define and own the World Services IT strategy aligned to business objectives, growth plans and risk appetite. Establish clear priorities, outcomes and success measures across all IT domains. Act as the senior information technology advisor to World Services leadership, providing clear, pragmatic guidance on technology decisions and trade offs. Work closely with peers and ensure strategic alignment. Operating model ownership Own and evolve the IT operating model, ensuring clear accountability across Service Operations, Technical Operations, and Cybersecurity and Productivity Solutions Operations. Chair and lead the IT Leadership Group, ensuring effective cross domain coordination, decision making and escalation. Ensure the operating model remains lean, scalable and fit for purpose as business needs evolve. Governance, risk and compliance Provide executive oversight of IT governance, risk management and compliance activities. Ensure alignment with recognised frameworks including ITIL, ISO27001, NIST , NIST , Essential 8 and Cyber Essentials Plus. Maintain executive visibility of risk, control effectiveness, audit readiness and remediation activities. Security and resilience Set clear expectations for a 'security by default' culture across all IT services and delivery activities. Ensure appropriate investment and prioritisation of cyber security, resilience, disaster recovery and business continuity capabilities. Act as the senior escalation point for major incidents and security events, ensuring effective communication and decision making . Service performance and accountability Hold domain leads accountable for service quality, availability, performance and user experience. Ensure clear metrics, reporting and transparency of IT performance to business stakeholders. Drive a culture of continuous improvement, automation and operational maturity. Technology roadmap and investment Own the end to end technology roadmap, ensuring alignment with business strategy and architectural principles. Approve major initiatives, investments and changes, balancing cost, risk, value and long term sustainability. Ensure technology spend is well governed, transparent and delivers measurable business value. Project and change oversight Provide executive sponsorship and oversight for IT projects and change programmes. Ensure project managers within IT are empowered to coordinate across World Services business units. Maintain visibility of delivery progress, risks and dependencies, intervening where required. Vendor and partner management Set strategy and governance for managed service providers and information technology partners. Ensure strong commercial management, performance oversight and accountability. Ensure internal teams remain focused on leadership, governance and value adding activities. Outcomes A secure, stable and predictable IT environment supporting global operations. Clear accountability and visibility across all IT domains. Strong alignment between information technology delivery, business priorities and information risk management. Consistent compliance with security and governance frameworks. A trusted, transparent IT function recognised as a business partner. A scalable operating model capable of supporting future growth and change. About you You are a senior information technology leader with experience operating at executive level within complex, securitised and highly regulated environments. You bring a strong balance of strategic vision, governance discipline and operational pragmatism. You are comfortable leading small, high impact teams, working with managed service partners and influencing senior stakeholders. You understand that effective IT leadership is about clarity, accountability and outcomes rather than scale. You'll bring with you experience and capabilities including: Proven experience as a CIO, IT Director or equivalent senior information technology leadership role. Strong understanding of IT operating models, service management and governance. Experience operating within fast paced regulated or security focused environments. Demonstrable knowledge of frameworks such as ITIL, ISO27001 and NIST 800-53 and 800-171. Experience overseeing cyber security, information security risk and compliance at executive level. Strong commercial acumen and experience governing technology spend and vendors. Excellent communication and stakeholder management skills. You're good at: Setting clear direction and expectations. Balancing risk, cost, security and business enablement. Holding leaders accountable while empowering them to deliver. Translating business strategy into actionable technology outcomes. Creating clarity, structure and focus in complex environments. WHAT YOU'LL GET A competitive salary and benefits package that includes 27 days holiday per year, pension contributions, private healthcare, discounted dental insurance, enhanced maternity/parental leave, plus a whole host of others including: Cultural stimulation allowance - £250 per person per year Half days off before bank holidays Emergency care days for dependants Up to 5 days volunteering leave per year to work for a registered charity Up to 10 days special emergency leave per year Season Ticket loan Payroll Giving Scheme Thursday drinks to unwind and socialize An annual Summer and Christmas party Our commitment to Diversity and Inclusion sees us offer inclusive bank holidays We also offer learning opportunities around D&I, targeted mentoring programmes and the opportunity to participate in several active Employee Led Networks and associated events. Finally, this role will be supported with all the necessary personal development required to set someone up for success. ABOUT M&C SAATCHI GROUP M&C Saatchi Group is a creative company that connects specialist expertise, fuelled by data, technology, and culture, to help clients navigate, create, and lead meaningful change. The Group operates across five core divisions: Connected Creativity; Passion Marketing; Global & Social Issues; Brand, Experience & Innovation; and Performance Media. Headquartered in London, operations span 23 countries with major hubs in the UK, Europe, US, Middle East & Africa, Asia and Australia. M&C Saatchi Group's two principles, Diversity of Thought and Brutal Simplicity of Thought, guide how they build teams and solve problems. M&C Saatchi Group is an Equal Opportunity Employer which does not discriminate, celebrates diversity and bases all hiring and promotion decisions solely on talent and capability, without regard for any personal characteristics. All employee information is kept confidential according to General Data Protection Regulation (GDPR).

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients. We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications. We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals. About the role The Risk, Compliance & Resilience Advisor shall help to manage compliance and assurance for supporting the Senior Manager - Risk & Compliance and Risk & Resilience Lead by ensuring that: Risk Assessment: Assist in identifying, assessing, and prioritising risks across the organisation. Conduct risk assessments to evaluate the likelihood and potential impact of risks on business operations and objectives Compliance Monitoring: Monitor regulatory developments and changes in laws, regulations, and industry standards. Assess the organisation's compliance with applicable regulations, standards, and internal policies Resilience Planning: Support the Global Risk & Resilience Lead in the Development and maintenance of IT resilience and business continuity plans to ensure the organisation's ability to respond to and recover from IT disruptions Incident Response and Management: Provide support in DR related incident response activities, including investigating IT security incidents, breaches, and disruptions Issue Identification: Identify and document risk deficiencies, compliance gaps, and areas for improvement. Collaborate with stakeholders to develop actionable recommendations and corrective action plans to address identified issues Documentation and Reporting: Maintain accurate documentation of risk assessments, compliance reviews, control testing activities, and remediation efforts. Prepare regular reports for management and stakeholders on the status of risk, compliance, and control activities Policy and Procedure Development: Assist in the development and maintenance of risk management, compliance, and control related policies, procedures, and guidelines. Ensure alignment with regulatory requirements and industry best practices in alignment with the Global IS Governance Lead Vendor Risk Management Support: Assist in assessing and managing risks associated with third party vendors and service providers. Evaluate vendor controls and adherence to contractual obligations Continuous Improvement: Identify opportunities for enhancing risk management, compliance, and control processes. Recommend and implement improvements to strengthen the organisation's risk and control environment Project Work: Contribute to project activities as required to ensure GRC requirements are understood and addressed Areas of Accountability, Responsibility and Competence Level Works with the Global Risk & Compliance Senior Manager to support IS in the delivery of governance, compliance, and risk activities, whilst supporting the Integration projects Supports the execution of the security, audit, and compliance activities Supports the Global Risk & Compliance Senior Manager by ensuring the successful delivery of initiatives and projects within the Risk and Compliance environment Supports the Risk & Compliance Senior Manager, and Risk & Resilience Lead in any required activities which support improvements in assurance, compliance, and audit activities Addresses findings from identified risks or audits Ensures the ISMS contains an accurate record of risks, events, and issues Supports the internal and external audit investigations Ensures that the audit tests, self certifications, and audit reviews are relevant, consistent, and conducted in accordance with professionally accepted auditing standards Works with minimal supervision, using clearly defined processes and procedures Facilitates the use of performance metrics to improve output May be required to provide out of hours support via an on call rota Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate compliance and risk related concepts to technical and non technical audiences Substantial relevant experience in control management for governance, compliance, IT audits, IS assurance and risk management programmes CISA, CISM or equivalent preferred BSc or equivalent qualification in IT based degree preferred 3+ years relevant IT work experience Proven ability to communicate with technical teams to elicit information and requirements Understanding of regulatory requirements, including cross industry regulations (e.g., GDPR, Data Protection Act) and industry specific regulations Skilled in implementing compliance and control frameworks Proficient in IT governance and quality standards Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including and Cybersecurity Framework Excellent stakeholder management skills High level of personal integrity, as well as the ability to professionally handle confidential matters and show an appropriate level of judgement and maturity Knowledge of OneTrust risk management toolset or similar preferred At Sword, our core values and culture are based on caring about our people, investing in training and career development, and building inclusive teams where we are all encouraged to contribute to achieve success. We offer comprehensive benefits designed to support your professional development and enhance your overall quality of life. In addition to a Competitive Salary, here's what you can expect as part of our benefits package: Personalised Career Development: We create a development plan customised to your goals and aspirations, with a range of learning and development opportunities within a culture that encourages growth. Flexible working: Flexible work arrangements to support your work life balance. We can't promise to always be able to meet every request, however, are keen to discuss your individual preferences to make it work where we can. A Fantastic Benefits Package: This includes generous annual leave allowance, enhanced family friendly benefits, pension scheme, access to private health, well being, and insurance schemes. At Sword we are dedicated to fostering a diverse and inclusive workplace and are proud to be an equal opportunities employer, ensuring that all applicants receive fair and equal consideration for employment, regardless of whether they meet every requirement. If you don't tick all the boxes but feel you have some of the relevant skills and experience we're looking for, please do consider applying and highlight your transferable skills and experience. We embrace diversity in all its forms, valuing individuals regardless of age, disability, gender identity or reassignment, marital or civil partner status, pregnancy or maternity status, race, colour, nationality, ethnic or national origin, religion or belief, sex, or sexual orientation. Your perspective and potential are important to us.