Find your next tech and IT Job or contract Governance, risk and compliance (GRC)

🔑 Principales responsabilités Piloter et maintenir le SMSI. Réaliser et suivre les analyses de risques. Maintenir les politiques, procédures et documents ISO 27001. Préparer et coordonner les audits internes et de certification. Suivre les non-conformités et plans d'actions. Assurer une veille réglementaire et normative. Sensibiliser les collaborateurs aux exigences de sécurité. Suivre les indicateurs de conformité et présenter les résultats à la Direction. 🧠 Qualités Leadership, rigueur, capacité d'analyse, sens de la communication, autonomie et capacité à travailler avec des interlocuteurs métiers et techniques.

ContexteL'équipe de sécurité opérationnelle PSIRT (Production Security Incident Response Team) EMEA est en charge des missions suivantes pour l'ensemble des infrastructures de production d'une grande institution financière EMEA : Intégration, évolution et maintien en condition opérationnelle des architectures de collecte des logs et de détection d'incident de sécurité (SIEM/SOAR) Mise en place et évolution permanente des Use cases/Règles de corrélation Analyse et réponse aux incidents de sécurité Threat Hunting Investigation / Forensics Intégration, évolution et maintien en conditions opérationnelles du Global Security Dashboard Interventions au sein d'un environnement de production où les équipes d'infrastructure et d'applications mondiales sont sollicitées quotidiennement. Coordination avec de multiples interlocuteurs issus d'organisations complexes, nécessitant une communication claire et adaptée. Cadence de livraison rapide suivant la méthodologie Agile, avec des itérations courtes et des revues fréquentes.

Notre client dans le secteur Banque et finance recherche un/une Senior AI IT Risk, Compliance & Operational Resilience Consultant H/F Description de la mission : Job Description – Senior AI IT Risk, Compliance & Operational Resilience Consultant Context and objective of the mission With the growing importance of Cloud solutions, Artificial Intelligence (AI), and IT process automation, a large organization is continuing its transformation towards an AI-enabled IT model. This evolution requires stronger governance, risk management, regulatory compliance, operational resilience, and fraud prevention related to AI systems. The mission is to support the IT, Data, Application Technologies & Architecture, Digital Technologies & AI teams in identifying, assessing, and managing the risks associated with AI adoption, while strengthening compliance with applicable regulations such as the AI Act, DORA, GDPR, CRA, and related requirements. Main responsibilities The consultant will be responsible for: • Strengthening the ICT and AI risk management framework within the IT organization • Supporting teams in conducting Business Risk Assessments and identifying operational, cyber, regulatory, contractual, and fraud risks • Defining and monitoring remediation plans in collaboration with stakeholders • Contributing to the implementation and improvement of AI governance • Ensuring alignment with regulatory requirements related to AI, operational resilience, and outsourcing • Advising teams on exit strategies, critical supplier management, compliance controls, and requirements from the National Bank of Belgium • Participating in the development of risk management dashboards and indicators • Supporting AI4IT transformation programmes by integrating risk, compliance, resilience, and fraud prevention dimensions Profile required Business experience: • Senior experience in IT Risk and IT Governance • Senior experience in operational risk and compliance • Senior experience in audit, internal control, or risk management • Experience in the financial or insurance sector Technical skills: • Microsoft suite, including Word, Excel, and PowerPoint • Understanding of AI and Generative AI technologies • Knowledge of obligations under the European AI Act • Experience in identifying and assessing risks related to AI models, training data, LLMs, and AI services provided by third parties • Knowledge of operational resilience and cybersecurity challenges related to AI systems Functional skills: • Ability to work with IT, Architecture, Cybersecurity, Data, and Digital teams • Experience with cloud environments, outsourced services, and ICT risks • Knowledge of DORA, GDPR, and third-party management frameworks Language requirements: • English: fluent, mandatory • Dutch: preferable • French: preferable Expected deliverables • AI risk management framework and AI Governance Framework • Risk assessments and risk registers for AI solutions • Regulatory impact assessments covering the AI Act, DORA, GDPR, and CRA • Remediation plans and control strengthening plans • Executive dashboards for risk and compliance monitoring • Opinions and recommendations on AI solutions, cloud services, and strategic suppliers • Support materials for internal audits, external audits, and regulatory inspections Compétences / Qualités indispensables : AI risk and compliance, IT risk and governance, Operational resilience and cybersecurity, DORA / GDPR / AI Act compliance, Cloud and third-party ICT risk, English fluency Compétences / Qualités qui seraient un + : Dutch or French language skillsInformations concernant le télétravail : Oui — 3 jours/semaine

Pour l'un de nos clients du secteur de la gestion d'actifs, nous recherchons un(e) Expert(e) Aladdin BLK – Investment Risk & Compliance. Le consultant interviendra sur la définition, la mise en place et le paramétrage des contraintes d'investissement, règles de conformité et guidelines au sein de l'environnement Aladdin. Il/elle devra notamment maîtriser les fonctionnalités du module Compliance Workbench ainsi que celles du module eFront, afin de traduire les exigences métiers et réglementaires en règles de contrôle adaptées. Le consultant sera également amené à analyser les besoins, contribuer au paramétrage des règles, réaliser les contrôles et tests associés et accompagner les équipes dans la résolution des problématiques fonctionnelles.

Notre client dans le secteur Services publics recherche un/une Security Risk Manager H/F Description de la mission : Job offer – Security Risk Manager Context and objective of the mission As a Security Risk Manager within the CISO Office, the consultant will join a growing Security Risk Management team whose mission is to strengthen the organisation's ability to identify, assess, manage, and report security risks. The role contributes to the development of efficient risk management processes, promotes a risk-aware culture across the enterprise, and acts as a key liaison between business stakeholders and security architects. The mission directly supports compliance with regulatory frameworks such as NIS2, ISO 27001, and GDPR, and helps reinforce the organisation's overall security and resilience. Main responsibilities • Contribute to the setup of risk management processes and tools within the CISO team • Conduct and support risk assessments, including identification, documentation, and evaluation of risks across IT and security domains • Participate in project and architecture reviews to identify, assess, and document security risks • Ensure appropriate mitigation measures are defined, tracked, and aligned with the organisation's risk management framework • Propose and track risk responses that are proportionate and effective, ensuring mitigation plans are actionable and monitored • Follow up on action plans defined in the risk response to ensure timely execution and closure • Maintain and continuously improve the central risk register, ensuring it reflects current risk exposure and mitigation status • Promote awareness initiatives to foster a risk-conscious culture across the organisation • Contribute to the implementation and monitoring of NIS2 controls related to risk management, including reporting and documentation Profile sought Experience • 10+ years of experience in cybersecurity, risk management, or related fields Technical and functional skills • Strong technical experience in control selection and implementation guidance across Network, IAM, SSDLC, Crypto, and related areas • Proven experience in regulatory compliance, cybersecurity governance, risk management, or audit programmes • Experience translating regulatory requirements into operational controls and measurable compliance activities • Experience coordinating compliance programmes across multiple departments and stakeholders • Strong knowledge of control frameworks, policy management, and compliance monitoring practices • Experience preparing evidence packages for audits and regulatory reviews Soft skills • Strong analytical, documentation, and reporting skills • Ability to communicate effectively with technical teams, management, auditors, and regulatory stakeholders • Excellent organisational and project coordination skills • Fluent in English; Dutch and/or French is a plus Compétences / Qualités indispensables : Cybersecurity risk management, Risk assessments, Regulatory compliance (NIS2, ISO 27001, GDPR), Control frameworks and mitigation tracking, Security architecture review, English fluency Compétences / Qualités qui seraient un + : Dutch and/or FrenchInformations concernant le télétravail : Hybrid

Supply Chain & Governance Manager - -West Midlands About the role Sits within the new Business Supply Chain function and creates one governance route across suppliers, logistics providers, internal partners The role turns contractual commitments into operational measures, strengthens accountability and leads improvement across service, cost, risk and performance. What you'll be doing * Establish scorecards, review meetings and improvement plans for key suppliers and logistics providers. * Coordinate action with Commercial, Procurement, Legal, Finance, Operations and partners. * Lead resolution of material service, inventory, logistics, returns and data issues. Key decisions you will own * Set the partner governance, scorecard and performance framework. * Prioritise supplier improvement, recovery and escalation according to customer, cost and risk impact. * Recommend partner consolidation, * Key partners operate through one clear governance and escalation route. * Contractual obligations, measures and accountable owners are visible and understood. Skills/experience Essential * Significant supplier management, commercial governance, supply chain or logistics partnership experience. * Strong commercial judgement and ability to connect contracts to operational outcomes. * Experience building scorecards, governance forums and improvement plans. * Confident negotiation, issue resolution and escalation management. * Financial and analytical capability and ability to influence across functions. Desirable * Experience managing several partners and service models. * Knowledge of warehousing, carriers, logistics or technology supply chains. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.

GRC Analyst £45,000 - £55,000 DOE + Private Medical Insurance + Dental & Vision Cover + Enhanced Annual Leave + Pension + Wellbeing Support UK - Remote Are you a GRC professional with a strong background in cybersecurity, cloud security and compliance frameworks who wants to join a rapidly growing consultancy where you can work with a diverse client base, lead high-value security initiatives and play a key role in improving organisations' security and compliance posture? This is an exciting opportunity to join an established and expanding cybersecurity and compliance consultancy supporting clients across a variety of industries. You'll work alongside experienced security professionals, helping organisations achieve and maintain compliance while strengthening their overall security programmes. In this role, you will support clients through audits, risk assessments, compliance activities and security programme development. You will engage directly with stakeholders, manage security and compliance initiatives, conduct tabletop exercises and help clients implement security best practices across modern cloud environments. The ideal candidate will have experience across governance, risk and compliance activities, strong knowledge of frameworks such as ISO 27001, SOC 2, GDPR and DORA, and a solid understanding of cloud platforms including AWS, Azure and GCP. Strong communication skills and a customer-focused approach are essential. The Role: Deliver GRC, compliance and security consulting services to clients Conduct audits, risk assessments and compliance gap analyses Support cloud security monitoring and security tool implementation Lead compliance evidence collection and auditor engagements Facilitate incident response, business continuity and disaster recovery exercises Work directly with clients to improve security programmes and regulatory compliance The Person: Good years of experience within cybersecurity, technology or GRC Strong understanding of ISO 27001, SOC 2, GDPR, DORA and related frameworks Experience with AWS, Azure and/or GCP environments Degree qualified in Cyber Security, IT or a related discipline, or equivalent experience Reference Number: BBBH277934 Rise Technical Recruitment Ltd acts an employment agency for permanent roles and an employment business for temporary roles. The salary advertised is the bracket available for this position. The actual salary paid will be dependent on your level of experience, qualifications and skill set and will be decided by our client, the employer. Rise are not responsible or liable for any hiring decisions made by the end client. We are an equal opportunities company and welcome applications from all suitable candidates.

ContexteDans le cadre d'un projet ServiceNow à forte dimension métier et à forts enjeux de gouvernance, de risque et de conformité, nous recherchons un Consultant ServiceNow Technico-Fonctionnel spécialisé en Integrated Risk Management (IRM), anciennement GRC. Au sein d'un environnement transverse, vous interviendrez à l'interface entre les équipes Risques, Conformité, Audit, Sécurité, IT et les équipes techniques ServiceNow. Votre rôle consistera à comprendre les enjeux métier, challenger les besoins, concevoir les solutions fonctionnelles et assurer leur traduction dans ServiceNow, de la conception jusqu'à la mise en production. Vos missionsEn tant que Consultant ServiceNow Technico-Fonctionnel IRM, vous serez notamment amené à : Animer les ateliers avec les équipes Risques, Conformité, Audit, Sécurité et IT. Recueillir, analyser et challenger les besoins métier. Traduire les besoins fonctionnels en solutions ServiceNow robustes, maintenables et évolutives. Concevoir et paramétrer les workflows, processus et fonctionnalités liés à l'IRM. Rédiger les User Stories, spécifications fonctionnelles et documents de conception. Participer à la définition et à la réalisation des stratégies de tests. Contribuer aux phases de recette et de validation avec les métiers. Accompagner les mises en production et les évolutions de la plateforme. Assurer l'interface entre les équipes métier, fonctionnelles et techniques. Accompagner les utilisateurs et les équipes techniques dans l'appropriation des solutions mises en place. Contribuer à l'amélioration continue des processus et de la plateforme ServiceNow. Périmètre fonctionnelVous interviendrez principalement sur les fonctionnalités ServiceNow Integrated Risk Management (IRM), notamment : Risk Management : identification, évaluation, traitement et suivi des risques. Policy & Compliance Management : gestion des politiques, exigences, contrôles et dispositifs de conformité. Audit Management : préparation, réalisation, suivi et pilotage des audits. Issue Management : gestion des écarts, constats, incidents de conformité et plans de remédiation. Vendor / Third-Party Risk Management : évaluation et suivi des risques liés aux fournisseurs et tiers. Gestion des référentiels, contrôles et indicateurs de risque. Conception et gestion des workflows de validation et des plans d'actions. Reporting, tableaux de bord et pilotage de la conformité et des risques. Gestion des rôles, habilitations, ACL et règles de confidentialité.

Technology Planning and Governance Manager Be responsible for the ongoing development and maintenance of the technology alignment roadmap for Corporate working closely with senior stakeholders, systems owners and 3 parties to deliver innovation. Lead day-to-day support and management of the core business Applications Portfolio lifecycle including but not limited to Finance, Legal, Property, Pensions, Treasury, HR, Business Development, Payroll and our Corporate Intranet ensuring that delivery of change is fit for purpose, of high quality, reliable and secure. Role Responsibilities Drive customer-centricity and stakeholder engagement, work closely with Corp functions to align application roadmaps with the combined Corp IT / SSC annual technology plans and dependencies. Work with senior stakeholders to build, document and map business capability to solution architecture across the Corp. Take ownership and develop a technology roadmap that meets the application requirements of the Corp to support the wider Company businesses. Evaluate the potential impacts of application workloads moving to cloud, notwithstanding the threats and opportunities for Corp functions. Shape, create and present business cases for high level initiatives, seek approval, funding and prioritisation with senior stakeholders. Understand the capital allocation requirement across the Corp functions plus the overall impact of application change on the operational expenditure budget. Align technology roadmaps and annual budget planning, use as the foundation for reporting on the state of the Corp Application portfolio. Provide technical leadership for Corp initiatives engaging across the Company where corporate applications service the wider businesses. Solve complex business problems with process and technology that cut across Corp group such as Identity and Access Management. Document and review IT standards, procedures and policies to ensure compliance with legal and regulatory requirements. Liaise with internal and external audit teams. Develop and adapt innovation tools and processes to drive operational excellence within Corp IT. Establish and maintain a consistent and integrated approach to information security and data protection governance in line with audit requirements. Create alignment on how to utilise governance forums such as User Experience and Architecture to improve services delivered to Corp functions. Manage solution architects, contractors, 3 Parties and business analyst in the future. Experience Required Significant and relevant progressive IT experience Experience of being in a practical solution planning and technical architecture design role is essential e.g. SaaS, Identity and Access Management Good understanding of emerging and innovative technologies, how to shape, deliver and leverage those technologies Experience of architecture business capability mapping, data management governance, technology roadmaps and project delivery lifecycle processes. Experience of ensuring compliance between corporate business application roadmaps and IT roadmaps. Experience of working within an ITIL service management environment with strong knowledge of business systems or applications within a corporate environment. Ability to deal with and manage conflicts whilst building successful business relationships across a range of stakeholder groups both internal and external to the organisation. Proven leadership skills, setting objectives and ensuring delivery of services to target Proven contract management, supplier management, procurement, and vendor selection experience Experience of systems such as Microsoft Office 365, Dynamics 365, SAP Success Factors, Treasury Openlink Findur, CMS, BACs Payment Platforms, Microsoft Power BI, Integration/ETL, Azure Active Directory Single Sign On and other bespoke applications Experience in executing business continuity planning and IT DRP Creating solution and technical application architectures, IT standards and policies Day-to-Day management of the Application Portfolio, its currency, dependencies and risk Technical lead on major system changes and upgrades Responsible for the development and management of Solution Architects, Business Analyst and contract resources Provide support to Corporate functions and wider businesses to enable them to optimise their use of corporate applications Vendor Management and selection (RFIs / RFP support) The Client is based in Central London. Please do send your CV to us in Word format along with your salary and availability.

Mission de l'équipe : Le Data Office intervient sur le contrôle et la gouvernance des données au sein d'un environnement CIB, notamment sur des données utilisées par les équipes internes et pouvant être partagées avec les régulateurs. Le périmètre couvre notamment les données liées aux contrôles pré trade, aux communications électroniques, à la voix et au Record Keeping, avec un enjeu de conformité aux réglementations Data, notamment GDPR. L'équipe Strategy, Projects & Governance est responsable de l'alignement de la gouvernance du Data Office et du pilotage de projets stratégiques liés aux réponses réglementaires, aux projets métier et à la transformation des modes de fonctionnement. La mission consiste à accompagner le responsable de l'équipe dans le cadrage, la planification, l'exécution et la clôture des initiatives stratégiques du Data Office, tout en assurant une gouvernance homogène et un reporting transparent auprès du management. 1. Cadrage et planification des projets Le consultant sera notamment responsable de : • Élaborer les Project Charters avec les principales parties prenantes afin de formaliser les objectifs, bénéfices attendus, périmètres et critères de succès. • Structurer les projets en work packages, jalons et livrables et construire les roadmaps associées. • Intégrer les activités de conduite du changement dans les plans projets. • Coordonner la planification des ressources humaines, outils, budgets et prestations externes nécessaires à la réalisation des projets. 2. Pilotage de l'exécution et de la delivery Le consultant assurera la coordination opérationnelle des différentes parties prenantes impliquées dans les projets : • Équipes IT. • Équipes Operations. • Compliance. • Fonctions et équipes du Groupe. • Prestataires et partenaires externes. Il devra également : • Adapter les méthodologies projet aux différents contextes de delivery, en Waterfall et/ou Agile. • Piloter les activités, jalons, dépendances et livrables. • Maintenir les tableaux de bord et indicateurs permettant au management de disposer d'une vision claire de l'avancement. • Identifier, suivre et escalader les risques, problèmes et points bloquants. • Maintenir un Risk Register et contribuer à la résolution des difficultés avec les comités de pilotage. 3. Gouvernance et reporting La mission comporte une forte dimension de gouvernance projet. Le consultant devra notamment : • Préparer les agendas, supports de gouvernance et présentations destinées aux différentes instances. • Structurer et standardiser les artefacts de gouvernance. • Mettre en œuvre les modèles de Terms of Reference, comptes rendus de réunions, Decision Logs et checklists de contrôle qualité. • Garantir l'application des standards internes de gouvernance Data, de conformité réglementaire et de sécurité sur les différents projets. 4. Gestion des parties prenantes et communication Le consultant jouera un rôle central de coordination entre le Data Office et son écosystème. Il devra : • Assurer l'alignement entre le CDO, l'IT, les Operations, les fonctions transverses et les différentes activités. • Communiquer de manière claire sur les objectifs, délais, risques et décisions des projets. • Préparer des éléments synthétiques et orientés données permettant au responsable de l'équipe de prendre rapidement des décisions sur les évolutions de périmètre, allocations budgétaires ou ajustements de planning. • Être le point de contact privilégié des projets, comités de pilotage et partenaires externes. 5. Support opérationnel au Data Office Le consultant interviendra également sur les activités suivantes : • Suivi financier des projets avec comparaison Forecast vs Actual et identification des écarts. • Support à l'intégration et au partage de connaissances au sein de l'équipe Strategy, Projects & Governance et du Data Office. • Identification et mise en œuvre d'améliorations permettant de fluidifier le pilotage des projets, les processus de gouvernance et le reporting. Prestations demandées La mission interviendra principalement sur les dimensions suivantes : • Pilotage de projets stratégiques Data Office. • Gouvernance et reporting auprès du management. • Coordination transverse entre IT, Operations, Compliance et fonctions métier. • Gestion des risques, dépendances et plans d'action. • Suivi budgétaire des projets. • Accompagnement des sujets réglementaires et de conformité Data. • Amélioration continue des processus de gouvernance et de pilotage. Secteur d'activité : CIB Calendrier : du 14/09/2026 au 31/12/2026

Mission de l'équipe : Le Data Office intervient sur le contrôle et la gouvernance des données au sein d'un environnement CIB, notamment sur des données utilisées par les équipes internes et pouvant être partagées avec les régulateurs. Le périmètre couvre notamment les données liées aux contrôles pré trade, aux communications électroniques, à la voix et au Record Keeping, avec un enjeu de conformité aux réglementations Data, notamment GDPR. L'équipe Strategy, Projects & Governance est responsable de l'alignement de la gouvernance du Data Office et du pilotage de projets stratégiques liés aux réponses réglementaires, aux projets métier et à la transformation des modes de fonctionnement. La mission consiste à accompagner le responsable de l'équipe dans le cadrage, la planification, l'exécution et la clôture des initiatives stratégiques du Data Office, tout en assurant une gouvernance homogène et un reporting transparent auprès du management. 1. Cadrage et planification des projets Le consultant sera notamment responsable de : · Élaborer les Project Charters avec les principales parties prenantes afin de formaliser les objectifs, bénéfices attendus, périmètres et critères de succès. · Structurer les projets en work packages, jalons et livrables et construire les roadmaps associées. · Intégrer les activités de conduite du changement dans les plans projets. · Coordonner la planification des ressources humaines, outils, budgets et prestations externes nécessaires à la réalisation des projets. 2. Pilotage de l'exécution et de la delivery Le consultant assurera la coordination opérationnelle des différentes parties prenantes impliquées dans les projets : · Équipes IT. · Équipes Operations. · Compliance. · Fonctions et équipes du Groupe. · Prestataires et partenaires externes. Il devra également : · Adapter les méthodologies projet aux différents contextes de delivery, en Waterfall et/ou Agile. · Piloter les activités, jalons, dépendances et livrables. · Maintenir les tableaux de bord et indicateurs permettant au management de disposer d'une vision claire de l'avancement. · Identifier, suivre et escalader les risques, problèmes et points bloquants. · Maintenir un Risk Register et contribuer à la résolution des difficultés avec les comités de pilotage. 3. Gouvernance et reporting La mission comporte une forte dimension de gouvernance projet. Le consultant devra notamment : · Préparer les agendas, supports de gouvernance et présentations destinées aux différentes instances. · Structurer et standardiser les artefacts de gouvernance. · Mettre en œuvre les modèles de Terms of Reference, comptes rendus de réunions, Decision Logs et checklists de contrôle qualité. · Garantir l'application des standards internes de gouvernance Data, de conformité réglementaire et de sécurité sur les différents projets. 4. Gestion des parties prenantes et communication Le consultant jouera un rôle central de coordination entre le Data Office et son écosystème. Il devra : · Assurer l'alignement entre le CDO, l'IT, les Operations, les fonctions transverses et les différentes activités. · Communiquer de manière claire sur les objectifs, délais, risques et décisions des projets. · Préparer des éléments synthétiques et orientés données permettant au responsable de l'équipe de prendre rapidement des décisions sur les évolutions de périmètre, allocations budgétaires ou ajustements de planning. · Être le point de contact privilégié des projets, comités de pilotage et partenaires externes. 5. Support opérationnel au Data Office Le consultant interviendra également sur les activités suivantes : · Suivi financier des projets avec comparaison Forecast vs Actual et identification des écarts. · Support à l'intégration et au partage de connaissances au sein de l'équipe Strategy, Projects & Governance et du Data Office. · Identification et mise en œuvre d'améliorations permettant de fluidifier le pilotage des projets, les processus de gouvernance et le reporting.

IT Technology Planning & Governance Manager with Enterprise Architect Solutions Our Client is a leading company in the UK who are looking to recruit a candidate with at least 10 years expertise in IT technology and governance planning with Enterprise Architect Solutions experience. The role is Technology Planning Manager where you be responsible for the ongoing development and maintenance of the technology alignment roadmap for Corporate working closely with senior stakeholders, systems owners and 3 parties to deliver innovation. Lead day-to-day support and management of the core business Applications Portfolio lifecycle including but not limited to Finance, Legal, Property, Pensions, Treasury, HR, Business Development, Payroll and our Corporate Intranet ensuring that delivery of change is fit for purpose, of high quality, reliable and secure. Role Responsibilities Drive customer-centricity and stakeholder engagement, work closely with Corp functions to align application roadmaps with the combined Corp IT / SSC annual technology plans and dependencies. Work with senior stakeholders to build, document and map business capability to solution architecture across the Corp. Take ownership and develop a technology roadmap that meets the application requirements of the Corp to support the wider Company businesses. Evaluate the potential impacts of application workloads moving to cloud, notwithstanding the threats and opportunities for Corp functions. Shape, create and present business cases for high level initiatives, seek approval, funding and prioritisation with senior stakeholders. Understand the capital allocation requirement across the Corp functions plus the overall impact of application change on the operational expenditure budget. Align technology roadmaps and annual budget planning, use as the foundation for reporting on the state of the Corp Application portfolio. Provide technical leadership for Corp initiatives engaging across the Company where corporate applications service the wider businesses. Solve complex business problems with process and technology that cut across Corp group such as Identity and Access Management. Document and review IT standards, procedures and policies to ensure compliance with legal and regulatory requirements. Liaise with internal and external audit teams. Develop and adapt innovation tools and processes to drive operational excellence within Corp IT. Establish and maintain a consistent and integrated approach to information security and data protection governance in line with audit requirements. Create alignment on how to utilise governance forums such as User Experience and Architecture to improve services delivered to Corp functions. Manage solution architects, contractors, 3 Parties and business analyst in the future. Experience Required Significant and relevant progressive IT experience Experience of being in a practical solution planning and technical architecture design role is essential e.g. SaaS, Identity and Access Management Good understanding of emerging and innovative technologies, how to shape, deliver and leverage those technologies Experience of architecture business capability mapping, data management governance, technology roadmaps and project delivery lifecycle processes. Experience of ensuring compliance between corporate business application roadmaps and IT roadmaps. Experience of working within an ITIL service management environment with strong knowledge of business systems or applications within a corporate environment. Ability to deal with and manage conflicts whilst building successful business relationships across a range of stakeholder groups both internal and external to the organisation. Proven leadership skills, setting objectives and ensuring delivery of services to target Proven contract management, supplier management, procurement, and vendor selection experience Experience of systems such as Microsoft Office 365, Dynamics 365, SAP Success Factors, Treasury Openlink Findur, CMS, BACs Payment Platforms, Microsoft Power BI, Integration/ETL, Azure Active Directory Single Sign On and other bespoke applications Experience in executing business continuity planning and IT DRP Creating solution and technical application architectures, IT standards and policies Day-to-Day management of the Application Portfolio, its currency, dependencies and risk Technical lead on major system changes and upgrades Responsible for the development and management of Solution Architects, Business Analyst and contract resources Provide support to Corporate functions and wider businesses to enable them to optimise their use of corporate applications Vendor Management and selection (RFIs / RFP support) The Client is based in Central London. The salary for this role will be in the range of £90K - £110K + Benefits. Please do send your CV to us in Word format along with your salary and availability.

Mission de l'équipe : Au sein du département Transformation, l'équipe Innovation renforce la gouvernance IA et modernise ses outils collaboratifs afin de garantir la traçabilité, la cohérence et la conformité des actions liées à l'intelligence artificielle. L'objectif de la mission est de centraliser les outils de gouvernance IA, harmoniser les registres existants et structurer le suivi des actions validées par l'AI Risk Committee, en articulation avec les politiques de Risk Management. La gouvernance couvre différentes équipes situées notamment aux États Unis, en EMEA et en Asie. 1. Structuration de l'environnement SharePoint dédié à la Gouvernance IA La mission sera responsable de créer ou mettre à jour le site SharePoint consacré à la Gouvernance IA. Les travaux porteront notamment sur : · La définition et le paramétrage de l'architecture SharePoint. · La structuration des métadonnées. · La gestion des règles de sécurité. · La documentation et l'homogénéisation du partage d'information entre les équipes. 2. Harmonisation des registres IA · La mission devra aligner et harmoniser les métadonnées entre les différents registres IA, notamment le registre IA IM et les cas d'usage AM. · L'objectif est de disposer d'un registre et d'une cartographie IA cohérents, centralisés et à jour. 3. Workflow de suivi des actions AI Risk Committee La mission devra concevoir et mettre en œuvre un workflow permettant de suivre les actions validées par l'AI Risk Committee, instance officielle d'évaluation des ratings de risque. Les travaux couvriront : · Le design du workflow. · Sa configuration. · Les phases de tests. · La mise en œuvre opérationnelle. · La rédaction du manuel d'utilisation. · La mission apportera également un support opérationnel au secrétariat de l'AIRC sur la gestion documentaire, le suivi des actions et le reporting. 4. Articulation avec les processus Risk Management Le dispositif devra être aligné avec les politiques de Risk Management, notamment : · Model Risk Rating, MRR. · Independent Risk Review, IRR. La mission devra également mettre en place un template US pour les Independent Reviews ainsi qu'un SLA précisant les niveaux de service, les responsabilités et les modalités de suivi. Prestations demandées : La mission interviendra principalement sur les activités suivantes : · Paramétrer et structurer le site SharePoint dédié à la Gouvernance IA. · Harmoniser les métadonnées des différents registres IA. · Concevoir, configurer et tester un workflow de suivi des actions AIRC. · Intégrer ce workflow aux politiques de Risk Management, notamment MRR et IRR. · Mettre en place un template US pour les Independent Reviews et un SLA de suivi. · Assister l'exécution de la gouvernance de l'AI Risk Committee. · Assurer la gestion documentaire, le suivi des actions et le reporting. · Produire la documentation et les guides de bonnes pratiques associés. Livrables attendus : · Site SharePoint fonctionnel, sécurisé et documenté. · Registre IA et cartographie IA à jour. · Workflow opérationnel accompagné de son manuel d'utilisation. · Template US et SLA définissant les niveaux de service et les responsabilités. · Guide d'utilisation et de bonnes pratiques pour la gouvernance IA intégrant MRR et IRR. Secteur d'activité : Asset Management Expertises : Gouvernance IA, Gouvernance digitale, Microsoft 365, SharePoint, Conception de workflows, Risk Management, Gouvernance et sécurité des environnements collaboratifs, Coordination transverse Compétences requises : Secteurs : Asset Management apprécié Métiers : Consultant Gouvernance IA, Consultant M365, Consultant SharePoint, Consultant Gouvernance Digitale Périmètre fonctionnel : Gouvernance IA, Structuration SharePoint, Harmonisation de registres IA, Workflow AIRC, Gestion documentaire, Suivi des actions, Reporting, Model Risk Rating, Independent Risk Review Parties prenantes : Legal, Compliance, Risk, IT, Innovation, Data Privacy Langues : Français courant, anglais courant

Information Security Manager with Network Engineering Skills Our Client is a bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications · Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. · Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. · Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. · Demonstrated network engineering experience (eg, routing, switching, firewalls, VPNs, secure network design). · Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. · Experience with regulatory and compliance frameworks (eg, ISO 27001, GDPR, NIST) and security best practices. · Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. · Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber ​​​​Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc. Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber ​​Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITER ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber ​​Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The rate for this role will be in the range £500 pd to £650 pd. This is a 3-month assignment. Do send your CV to us in Word format along with your salary and notice period.

Objectifs et livrables Intégrer à notre équipe dans un environnement 100% SAP, la mission consiste à : Participer à l'amélioration continu de nos produits SAP ACCESS : Améliorer continuellement notre produit GRC (Governance Risks and Compliance) Participer à l'industrialisation du projet d'automatisation de la gestion des droits. Participer à la réduction de notre dette technico-fonctionnelle. Réaliser un support niveau 3 pour rester proche du terrain : Participer à la chasse du geste à non valeur ajouté en enrichissant l'intelligence artificielle. Résoudre les problématiques utilisateurs puis analyser et remonter les évolutions et améliorations possibles.