Risk Lead

Cambridge
11 months ago
Applications closed

Related Jobs

View all jobs

Head of Cyber Security Governance, Risk and Compliance

Third Party Cyber Risk Manager

Information Security Manager

Cyber Risk Analyst

Security Awareness Lead

Operational Technology Risk Manager

Risk Lead

Salary: £57,100 - £76,450

Location: Cambridge, Hybrid (2 days per week in the office)

Contract: Full time, permanent, 35 hours per week

Lead with Impact: Shape the Future of Risk Management and Assurance at Cambridge University Press & Assessment.

This is an exciting opportunity for an experienced Risk Lead to join a passionate and fast-paced Exam Technology department.

We are Cambridge University Press & Assessment, a world-leading academic publisher and assessment organisation and a proud part of the University of Cambridge, an institution which is respected across the globe for its long heritage and ethos of excellence.

About the role

As the Risk Lead, you will play a key role in leading risk management work across high-stakes exam products and services. You will manage risk assessment campaigns, assurance reviews, and contribute to the design and launch of new assessment products. The role involves collaborating with various stakeholders, ensuring governance and compliance, and acting as the Risk Champion.

The Risk Lead will maintain the strategic risk register and develop the ETO risk framework. The Lead role involves strengthening risk management practices across the department. As the Risk Lead you will engage with third-party investigations to ensure compliance. Building effective partnerships and facilitating discussions with stakeholders are also key responsibilities.

Key Responsibilities:

Leadership and Responsibility: Demonstrate a passion for risk management, leading by example and embodying CUP&A behaviours. Take ownership of risk guidelines and frameworks to manage risk within Exam Technology effectively.

Governance & Compliance: Engage with third-party investigations, ensuring compliance with external requirements. Lead ongoing risk assessment campaigns, assurance reviews, and risk reports.

Stakeholder Collaboration: Build trusted relationships with stakeholders, facilitate constructive discussions, and implement risk management processes across Exam Technology.

Communicating and Influencing: Communicate purposefully and clearly, simplifying complexities and influencing others to agree on prevention measures, controls, and solutions.

About you

We are looking for an experienced Risk Lead who can bring a wealth of knowledge and expertise to our team. You are a strategic and collaborative leader with a passion for excellence.

You will have a keen interest in enterprise risk management and how it can help an organisation deliver its strategy and objectives. This may come from a background in risk management, project management or assurance, or in working with senior decision-making functions in your organisation. Although a qualification in risk management is not required to apply for this role, we actively promote learning and development and will support you to develop your risk expertise.

Key skills and experience:

Risk Management Frameworks: familiarity with ISO 31000, NIST, and COSO.

Integrated Risk and Quality Management: knowledge of integrated processes.

Cybersecurity Principles: understanding of threat modelling, vulnerability assessment, and incident response.

Incident Management: knowledge of detection, response, recovery, and post-incident analysis.

Compliance and Regulatory Knowledge: awareness of external requirements and relevant laws like GDPR.

IT Infrastructure and Architecture: knowledge of networks, servers, databases, and cloud services.

The job offers an opportunity to lead our risk management efforts, shaping effective risk management across the Exam Technology and our Solutions teams, in a fast paced, regulated environment.

If you would like to know more about this opportunity and what will make you successful, please see the full job description attached to the bottom of this vacancy on our careers site.

Rewards and benefits

We will support you to be at your best in work and to live well outside of it. In addition to competitive salaries, we offer a world-class, flexible rewards package, featuring family-friendly and planet-friendly benefits including:



28 days annual leave plus bank holidays

*

Private medical and Permanent Health Insurance

*

Discretionary annual bonus

*

Group personal pension scheme

*

Life assurance up to 4 x annual salary

*

Green travel schemes

We are a hybrid working organisation, and we offer a range of flexible working options from day one. We expect most hybrid-working colleagues to spend 40-60% of their time at their dedicated office or location. We will also consider other work arrangements if you wish to work more flexibly or require adjustments due to a disability.

Ready to pursue your potential? Apply now.

We review applications on an ongoing basis, with a closing date for all applications being 25th April although we may close it earlier if suitable candidates are identified. Interviews are scheduled to take place on week commencing 12th May.

Please note that successful applicants will be subject to satisfactory background checks including DBS due to working in a regulated industry.

Cambridge University Press & Assessment is an approved UK employer for the sponsorship of eligible roles and applicants under the Skilled Worker visa route. Please refer to the gov uk website for guidance to understand your own eligibility based on the role you are applying for.

Why join us

Joining us is your opportunity to pursue potential. You'll belong to a collaborative team that's exploring new and better ways to serve students, teachers and researchers across the globe – for the benefit of individuals, society and the world. Sharing our mission will inspire your own growth, development and progress, in an environment which embraces difference, change and aspiration.

Cambridge University Press & Assessment is committed to being a place where anyone can enjoy a successful career, where it's safe to speak up, and where we learn continuously to improve together. We welcome applications from all candidates, regardless of demographic characteristics (age, disability, educational attainment, ethnicity, gender, marital status, neurodiversity, religion, sex, gender identity and sexual identity), cultural, or social class/background.

We believe better outcomes come through diversity of thought, background and approach. We welcome applications from people from all backgrounds and communities, actively seeking to employ people from a wide range of different communities

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Penetration Tester Jobs in the UK: What Employers Actually Want in 2026

The demand for skilled professionals in cyber security has never been higher, and penetration testers sit at the very heart of this rapidly evolving industry. As organisations across the UK continue to digitise their operations, protect sensitive data, and defend against increasingly sophisticated threats, the need for ethical hackers has grown dramatically. If you are considering a career in this field—or looking to advance within it—it is essential to understand what employers are really looking for in 2026. This guide breaks down the current expectations, required skills, certifications, and practical experience that can help you stand out in a competitive job market.

SOC Analyst Jobs UK 2026: Salaries, Skills & How to Get Hired

Cyber security is one of the UK's fastest-growing career paths — and SOC analyst is where most people begin. It's in high demand, genuinely accessible, and you don't need a degree or years of experience to get started. But knowing what UK employers actually want in 2026 — what they pay, which certs matter, and how to stand out — is a different matter. This guide covers all of it.

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.