Senior Manager, Information & Data Risk (Hybrid)

Atomic Weapons Establishment; Reading; Hybrid; GBP 45,000 - 55,000; Full time

Benefits offered by this job

9‑day working fortnight

Generous pension

270 hours annual leave

Professional development support

Job summary

Atomic Weapons Establishment seeks an Information and Data Risk Senior Manager to lead the development and continual improvement of KIDM risk management across the organisation. You will enable consistent identification, assessment, oversight and escalation of KIDM risks, supporting informed decision-making and resilience.

The role requires expertise in information governance, risk management and regulatory compliance within a security-critical environment.

Qualifications

• Understanding of knowledge, information, records and data risk management within regulated environments.
• Experience developing risk assessments, reporting or governance approaches.

Responsibilities

• Develop and maintain KIDM risk management arrangements for knowledge, information, records and data risks across AWE.
• Develop risk assessment methodologies and guidance for consistent KIDM risk management across AWE.
• Support Information Asset Owners and Data Owners in assessing and managing KIDM risks.
• Establish KIDM risk reporting for insights into emerging risks and vulnerabilities.
• Support development of organisational risk maturity and ownership of KIDM risks.
• Assist readiness for audits, inspections and regulatory activities.

Skills

KIDM risk management

Stakeholder engagement

Regulated environments

Digital information platforms

Education

Degree in Information Management or related

Tools

Microsoft 365

SharePoint

Job description

Atomic Weapons Establishment seeks an Information and Data Risk Senior Manager to lead the development and continual improvement of KIDM risk management across the organisation. You will enable consistent identification, assessment, oversight and escalation of KIDM risks, supporting informed decision-making and resilience.

The role requires expertise in information governance, risk management and regulatory compliance within a security-critical environment.