Risk Manager
Clearance required: SC (Home Office SC preferred)
Interview process: Initial interview with Capgemini. Potential for second interview.
Location: Hybrid - 1 to 2 days per month on client
Sector: Public
End User: Client
IR35 Status: PAYE via Umbrella company only

We are heading up a recruitment drive for a global consultancy that require a SC Cleared Risk Manager to join them on a major government project that's based remotely.

Job Description:
1. Risk Identification and Assessment: Evaluate AWS services and infrastructure, such as EC2, S3, RDS, and VPC configurations, to identify potential risks, including misconfigurations, resource overprovisioning, or security vulnerabilities.
2. Risk Mitigation Planning: Develop and implement strategies to minimize AWS-specific risks, such as enforcing IAM best practices.
3. Risk Monitoring and Reporting: Continuously monitor AWS environments using tools like AWS Config, CloudWatch, and Trusted Advisor, reporting critical risks such as cost anomalies, resource misalignment, or security threats.
4. Compliance and Standards Adherence: Ensure AWS-hosted platforms meet regulatory and industry standards (eg, SOC 2, GDPR, HIPAA), leveraging AWS compliance programs and tools like Artifact and Security Hub.
5. Collaboration with Cross-Functional Teams: Partner with DevOps, security, and development teams to enforce AWS-specific governance, ensure proper tagging strategies, and align platform risk management with business goals.
6. Training and Awareness: Conduct AWS-specific risk management training, educating teams on topics such as shared responsibility, secure architecture design, and proper usage of AWS services to reduce exposure.
7. Meet regularly with the Project/Delivery teams to understand, capture and update Risks/Issues
8. Ensure the Project/Delivery teams understand the Risks/Issue management process
9. Ensure the Project/Delivery teams are capturing and updating Risks/Issues in the agreed format
10. Meet regularly with the client to ensure that Risks/Issues are shared and being actioned within the HO
11. Agree and update the Risk/Issue management process with all EBSA stakeholders
12. Work with the HO and the EBSA team to ensure that the Risk/Issue process is maintained on the appropriate solution
13. Follow the HO process to maintain Risks/Issues within Jira and ServiceNow as appropriate
14. Understand and classify the Risks/Issues according to the HO guidelines
15. Provide Dashboards and analysis of risks to support the HO governance processes
16. Support the contract, relationship and SLT meetings with updated views of risks/issues
17. Ensure that the SLT are aware of risks requiring attention
18. Ensure that all risks/issue have appropriate mitigations and action plans and target dates are being tracked and escalated if necessary