Be at the heart of actionFly remote-controlled drones into enemy territory to gather vital information.

Apply Now

Risk Lead

Cambridge
6 months ago
Applications closed

Related Jobs

View all jobs

Security Risk Lead

OT Cyber Security Engineer

Information Security Management Specialist

Information Security Management Specialist

Senior Risk Manager

Senior Risk Manager - Data Risk

Risk Lead

Salary: £57,100 - £76,450

Location: Cambridge, Hybrid (2 days per week in the office)

Contract: Full time, permanent, 35 hours per week

Lead with Impact: Shape the Future of Risk Management and Assurance at Cambridge University Press & Assessment.

This is an exciting opportunity for an experienced Risk Lead to join a passionate and fast-paced Exam Technology department.

We are Cambridge University Press & Assessment, a world-leading academic publisher and assessment organisation and a proud part of the University of Cambridge, an institution which is respected across the globe for its long heritage and ethos of excellence.

About the role

As the Risk Lead, you will play a key role in leading risk management work across high-stakes exam products and services. You will manage risk assessment campaigns, assurance reviews, and contribute to the design and launch of new assessment products. The role involves collaborating with various stakeholders, ensuring governance and compliance, and acting as the Risk Champion.

The Risk Lead will maintain the strategic risk register and develop the ETO risk framework. The Lead role involves strengthening risk management practices across the department. As the Risk Lead you will engage with third-party investigations to ensure compliance. Building effective partnerships and facilitating discussions with stakeholders are also key responsibilities.

Key Responsibilities:

Leadership and Responsibility: Demonstrate a passion for risk management, leading by example and embodying CUP&A behaviours. Take ownership of risk guidelines and frameworks to manage risk within Exam Technology effectively.

Governance & Compliance: Engage with third-party investigations, ensuring compliance with external requirements. Lead ongoing risk assessment campaigns, assurance reviews, and risk reports.

Stakeholder Collaboration: Build trusted relationships with stakeholders, facilitate constructive discussions, and implement risk management processes across Exam Technology.

Communicating and Influencing: Communicate purposefully and clearly, simplifying complexities and influencing others to agree on prevention measures, controls, and solutions.

About you

We are looking for an experienced Risk Lead who can bring a wealth of knowledge and expertise to our team. You are a strategic and collaborative leader with a passion for excellence.

You will have a keen interest in enterprise risk management and how it can help an organisation deliver its strategy and objectives. This may come from a background in risk management, project management or assurance, or in working with senior decision-making functions in your organisation. Although a qualification in risk management is not required to apply for this role, we actively promote learning and development and will support you to develop your risk expertise.

Key skills and experience:

Risk Management Frameworks: familiarity with ISO 31000, NIST, and COSO.

Integrated Risk and Quality Management: knowledge of integrated processes.

Cybersecurity Principles: understanding of threat modelling, vulnerability assessment, and incident response.

Incident Management: knowledge of detection, response, recovery, and post-incident analysis.

Compliance and Regulatory Knowledge: awareness of external requirements and relevant laws like GDPR.

IT Infrastructure and Architecture: knowledge of networks, servers, databases, and cloud services.

The job offers an opportunity to lead our risk management efforts, shaping effective risk management across the Exam Technology and our Solutions teams, in a fast paced, regulated environment.

If you would like to know more about this opportunity and what will make you successful, please see the full job description attached to the bottom of this vacancy on our careers site.

Rewards and benefits

We will support you to be at your best in work and to live well outside of it. In addition to competitive salaries, we offer a world-class, flexible rewards package, featuring family-friendly and planet-friendly benefits including:



28 days annual leave plus bank holidays

*

Private medical and Permanent Health Insurance

*

Discretionary annual bonus

*

Group personal pension scheme

*

Life assurance up to 4 x annual salary

*

Green travel schemes

We are a hybrid working organisation, and we offer a range of flexible working options from day one. We expect most hybrid-working colleagues to spend 40-60% of their time at their dedicated office or location. We will also consider other work arrangements if you wish to work more flexibly or require adjustments due to a disability.

Ready to pursue your potential? Apply now.

We review applications on an ongoing basis, with a closing date for all applications being 25th April although we may close it earlier if suitable candidates are identified. Interviews are scheduled to take place on week commencing 12th May.

Please note that successful applicants will be subject to satisfactory background checks including DBS due to working in a regulated industry.

Cambridge University Press & Assessment is an approved UK employer for the sponsorship of eligible roles and applicants under the Skilled Worker visa route. Please refer to the gov uk website for guidance to understand your own eligibility based on the role you are applying for.

Why join us

Joining us is your opportunity to pursue potential. You'll belong to a collaborative team that's exploring new and better ways to serve students, teachers and researchers across the globe – for the benefit of individuals, society and the world. Sharing our mission will inspire your own growth, development and progress, in an environment which embraces difference, change and aspiration.

Cambridge University Press & Assessment is committed to being a place where anyone can enjoy a successful career, where it's safe to speak up, and where we learn continuously to improve together. We welcome applications from all candidates, regardless of demographic characteristics (age, disability, educational attainment, ethnicity, gender, marital status, neurodiversity, religion, sex, gender identity and sexual identity), cultural, or social class/background.

We believe better outcomes come through diversity of thought, background and approach. We welcome applications from people from all backgrounds and communities, actively seeking to employ people from a wide range of different communities

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Recruitment Trends 2025 (UK): What Job Seekers Must Know About Today’s Hiring Process

Summary: UK cyber security hiring has shifted from title‑led CV screens to capability‑driven assessments that emphasise incident readiness, cloud & identity security, detection engineering, governance/risk/compliance (GRC), measurable MTTR/coverage gains & secure‑by‑default engineering. This guide explains what’s changed, what to expect in interviews, & how to prepare—especially for SOC analysts, detection engineers, blue/purple teamers, penetration testers, cloud security engineers, DFIR, AppSec, GRC & security architecture. Who this is for: SOC & detection engineers, security operations leads, DFIR analysts, penetration testers/red teamers, purple teamers, AppSec/DevSecOps engineers, security architects, cloud security engineers, identity/IAM engineers, vulnerability managers, GRC/compliance specialists, product security & security programme managers targeting roles in the UK.

Why Cyber Security Careers in the UK Are Becoming More Multidisciplinary

Cyber security used to be viewed primarily as a technical discipline: firewalls, encryption, intrusion detection, penetration testing. In the UK today, it’s far broader. Organisations now face complex legal frameworks, ethical dilemmas, human-behaviour risks, communication challenges & usability hurdles. This shift means cyber security careers are becoming more multidisciplinary. From protecting NHS patient records to defending financial services, securing supply chains & safeguarding national infrastructure, cyber security now touches every sector. Employers increasingly want professionals who understand law, ethics, psychology, linguistics & design alongside traditional technical skills. In this article, we’ll explore why UK cyber security careers are expanding in this way, how these five disciplines shape the profession, and what job-seekers & employers need to know to thrive in this new landscape.

Cyber Security Team Structures Explained: Who Does What in a Modern Cyber Security Department

Cyber security has become a top priority for UK organisations of all sizes. From small businesses to financial institutions, healthcare providers, and government bodies, the risk of cyber attack is now a constant concern. Threats are more sophisticated, regulations more demanding, and customers more aware of data privacy than ever before. But defending against cyber threats isn’t simply about having the right tools — it’s about having the right team. A modern cyber security department relies on clearly defined roles and responsibilities to ensure that defences are proactive, incidents are managed swiftly, and compliance is maintained. This article explains the structure of a modern cyber security team, the roles you’ll typically find within it, how they collaborate, and what skills, qualifications, and salaries are expected in the UK job market.