National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Risk Lead

Cambridge
3 months ago
Applications closed

Related Jobs

View all jobs

Security Architecture and Risk Lead

IT Security Manager

Chief Information Security Officer

Information Security Consultant Secure Change

Security Architect

Security Architect

Risk Lead

Salary: £57,100 - £76,450

Location: Cambridge, Hybrid (2 days per week in the office)

Contract: Full time, permanent, 35 hours per week

Lead with Impact: Shape the Future of Risk Management and Assurance at Cambridge University Press & Assessment.

This is an exciting opportunity for an experienced Risk Lead to join a passionate and fast-paced Exam Technology department.

We are Cambridge University Press & Assessment, a world-leading academic publisher and assessment organisation and a proud part of the University of Cambridge, an institution which is respected across the globe for its long heritage and ethos of excellence.

About the role

As the Risk Lead, you will play a key role in leading risk management work across high-stakes exam products and services. You will manage risk assessment campaigns, assurance reviews, and contribute to the design and launch of new assessment products. The role involves collaborating with various stakeholders, ensuring governance and compliance, and acting as the Risk Champion.

The Risk Lead will maintain the strategic risk register and develop the ETO risk framework. The Lead role involves strengthening risk management practices across the department. As the Risk Lead you will engage with third-party investigations to ensure compliance. Building effective partnerships and facilitating discussions with stakeholders are also key responsibilities.

Key Responsibilities:

Leadership and Responsibility: Demonstrate a passion for risk management, leading by example and embodying CUP&A behaviours. Take ownership of risk guidelines and frameworks to manage risk within Exam Technology effectively.

Governance & Compliance: Engage with third-party investigations, ensuring compliance with external requirements. Lead ongoing risk assessment campaigns, assurance reviews, and risk reports.

Stakeholder Collaboration: Build trusted relationships with stakeholders, facilitate constructive discussions, and implement risk management processes across Exam Technology.

Communicating and Influencing: Communicate purposefully and clearly, simplifying complexities and influencing others to agree on prevention measures, controls, and solutions.

About you

We are looking for an experienced Risk Lead who can bring a wealth of knowledge and expertise to our team. You are a strategic and collaborative leader with a passion for excellence.

You will have a keen interest in enterprise risk management and how it can help an organisation deliver its strategy and objectives. This may come from a background in risk management, project management or assurance, or in working with senior decision-making functions in your organisation. Although a qualification in risk management is not required to apply for this role, we actively promote learning and development and will support you to develop your risk expertise.

Key skills and experience:

Risk Management Frameworks: familiarity with ISO 31000, NIST, and COSO.

Integrated Risk and Quality Management: knowledge of integrated processes.

Cybersecurity Principles: understanding of threat modelling, vulnerability assessment, and incident response.

Incident Management: knowledge of detection, response, recovery, and post-incident analysis.

Compliance and Regulatory Knowledge: awareness of external requirements and relevant laws like GDPR.

IT Infrastructure and Architecture: knowledge of networks, servers, databases, and cloud services.

The job offers an opportunity to lead our risk management efforts, shaping effective risk management across the Exam Technology and our Solutions teams, in a fast paced, regulated environment.

If you would like to know more about this opportunity and what will make you successful, please see the full job description attached to the bottom of this vacancy on our careers site.

Rewards and benefits

We will support you to be at your best in work and to live well outside of it. In addition to competitive salaries, we offer a world-class, flexible rewards package, featuring family-friendly and planet-friendly benefits including:



28 days annual leave plus bank holidays

*

Private medical and Permanent Health Insurance

*

Discretionary annual bonus

*

Group personal pension scheme

*

Life assurance up to 4 x annual salary

*

Green travel schemes

We are a hybrid working organisation, and we offer a range of flexible working options from day one. We expect most hybrid-working colleagues to spend 40-60% of their time at their dedicated office or location. We will also consider other work arrangements if you wish to work more flexibly or require adjustments due to a disability.

Ready to pursue your potential? Apply now.

We review applications on an ongoing basis, with a closing date for all applications being 25th April although we may close it earlier if suitable candidates are identified. Interviews are scheduled to take place on week commencing 12th May.

Please note that successful applicants will be subject to satisfactory background checks including DBS due to working in a regulated industry.

Cambridge University Press & Assessment is an approved UK employer for the sponsorship of eligible roles and applicants under the Skilled Worker visa route. Please refer to the gov uk website for guidance to understand your own eligibility based on the role you are applying for.

Why join us

Joining us is your opportunity to pursue potential. You'll belong to a collaborative team that's exploring new and better ways to serve students, teachers and researchers across the globe – for the benefit of individuals, society and the world. Sharing our mission will inspire your own growth, development and progress, in an environment which embraces difference, change and aspiration.

Cambridge University Press & Assessment is committed to being a place where anyone can enjoy a successful career, where it's safe to speak up, and where we learn continuously to improve together. We welcome applications from all candidates, regardless of demographic characteristics (age, disability, educational attainment, ethnicity, gender, marital status, neurodiversity, religion, sex, gender identity and sexual identity), cultural, or social class/background.

We believe better outcomes come through diversity of thought, background and approach. We welcome applications from people from all backgrounds and communities, actively seeking to employ people from a wide range of different communities

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Jobs Skills Radar 2026: Emerging Frameworks, Tools & Certifications to Learn Now

Cyber threats are evolving—and so must the people defending against them. As ransomware, AI-enhanced phishing, and supply chain attacks grow more advanced, UK employers are urgently hiring cyber security professionals with the right mix of strategic and hands-on skills. Welcome to the Cyber Security Jobs Skills Radar 2026, your go-to guide for the most in-demand tools, frameworks, certifications, and technologies shaping the UK's cyber workforce. Whether you're a SOC analyst, penetration tester, or cloud security architect, this annual radar is designed to help you stay ahead of the market.

How to Find Hidden Cyber Security Jobs in the UK Using Professional Bodies like BCS, CIISec & More

The demand for skilled cyber security professionals in the UK has never been higher. With threats increasing in sophistication and frequency, organisations are urgently hiring ethical hackers, threat analysts, GRC specialists, and security architects. But many of the most valuable roles—particularly in government, defence, and critical infrastructure—are never publicly advertised. Instead, these jobs are shared behind the scenes through trusted networks, private communities, and professional bodies. In this article, we explore how to uncover hidden cyber security jobs in the UK using organisations like the BCS (The Chartered Institute for IT), CIISec (The Chartered Institute of Information Security), ISACA, and ISC² UK Chapter. We’ll show you how to use membership directories, special interest groups, CPD events and informal networks to gain early access to roles most people never see.

How to Get a Better Cyber Security Job After a Lay-Off or Redundancy

Redundancy is never easy—especially in a fast-moving field like cyber security, where your skills and experience are constantly evolving. But if you’ve recently been made redundant from a cyber security role, know this: the UK cyber workforce remains in high demand, and your expertise is more valuable than ever. Whether you’re a SOC analyst, penetration tester, incident responder, security architect or GRC specialist, there are still thousands of opportunities across sectors including finance, defence, government, retail, and critical infrastructure. This guide will help you turn redundancy into a career relaunch, with a clear action plan tailored to the UK cyber security job market.