At a Glance
- Tasks: Lead risk management for Defence programmes, ensuring strategic decision-making and opportunity maximisation.
- Company: Join a leading Defence organisation committed to excellence and innovation.
- Benefits: Competitive salary, flexible working options, and opportunities for professional growth.
- Other info: Collaborative culture with a focus on continuous improvement and stakeholder engagement.
- Why this job: Make a real impact in Defence by shaping risk strategies and enhancing capability outcomes.
- Qualifications: Proven experience in risk management within Defence or large-scale regulated environments.
The predicted salary is between 60000 - 80000 € per year.
We are seeking a senior Risk Manager to lead programme-wide risk and opportunity management, ensuring alignment with HM Treasury Orange Book principles and MOD governance frameworks. This role goes beyond traditional risk reporting - positioning the Risk Manager as a trusted advisor to Senior Responsible Owners (SROs), Programme Boards, and assurance bodies, enabling risk-informed decision-making, shaping strategic trade-offs, and ensuring both threats and opportunities are actively managed to protect and enhance Defence capability outcomes.
Key Responsibilities
- Risk Management Strategy & Planning: Develop, implement, and continuously refine the Programme Risk Management Strategy and Risk Management Plan, aligned to NAD, MOD, and HMG best practice. Define risk appetite, tolerance, thresholds, and escalation frameworks across project, programme, and portfolio levels. Ensure integration of risk management into overall programme governance, planning, and delivery life cycle.
- Threat & Opportunity (Upside Risk) Management: Lead proactive identification and management of both threats and opportunities, ensuring balanced consideration of risk and value. Embed opportunity management practices to maximise programme benefits and outcomes. Align risk and opportunity management with benefits realisation and Defence capability delivery, not just milestones.
- Risk-Informed Decision Making: Act as a trusted advisor to SROs and Programme Boards, providing clear analysis of risks, opportunities, and trade-offs. Present decision options with associated impacts on cost, schedule, performance, and operational outcomes. Support informed decision-making through evidence-based insights and scenario analysis.
- Schedule Threshold Management & Escalation: Define and manage risk thresholds and escalation triggers, including schedule, cost, and performance tolerances. Monitor delivery against thresholds and ensure timely escalation from project to programme and portfolio governance levels. Provide early warning of risks that may impact critical paths, approvals, or operational readiness.
- Tooling & Quantitative Risk Analysis: Lead the use of Active Risk Manager (ARM) and Predict! (or equivalent) to manage risk data, reporting, and analysis. Deliver quantitative risk analysis (QRA), including schedule and cost risk modelling where appropriate. Ensure data quality, consistency, and auditability across all risk artefacts.
- Commercial & Contractual Risk Integration: Integrate risk management with commercial strategies, supplier performance, and contractual frameworks. Identify and manage risks associated with multi-vendor delivery environments, including misaligned incentives and dependencies. Support commercial teams in embedding risk considerations into procurement and supplier management.
- Security, Accreditation & Cyber Risk: Lead management of security, accreditation, and cyber risks as core programme risk domains. Ensure alignment with Defence security policies, accreditation requirements, and cyber assurance processes. Provide visibility and escalation of risks impacting authority to operate and operational deployment.
- People, Skills & Clearance Risks: Identify and manage risks related to SC clearance constraints, key personnel dependencies, and skills shortages. Highlight risks associated with succession gaps and single points of failure across programme and supplier teams. Support workforce planning through proactive identification of people-related risks.
- Governance, Assurance & Independent Challenge: Maintain comprehensive and auditable risk registers and RAID logs across programme levels. Provide high-quality reporting to Programme Boards, SROs, and assurance bodies (eg, IPA, Cabinet Office). Exercise independent challenge, ensuring risks are accurately represented and not understated. Escalate material concerns without compromise, ensuring transparency and integrity in reporting.
- Stakeholder Engagement: Engage with senior stakeholders across NAD, MOD, suppliers, and wider HMG organisations. Facilitate risk workshops, reviews, and governance forums to ensure shared understanding and ownership of risk. Provide clear, concise communication tailored to both technical and non-technical audiences.
- Continuous Improvement & Risk Culture: Promote a proactive, transparent, and risk-aware culture across multidisciplinary teams. Drive continuous improvement in risk management practices, tools, and maturity. Capture and share lessons learned across programmes and portfolios.
Requirements
Essential: Proven experience as a Risk Manager within Defence, government, or large-scale regulated environments. Extensive experience supporting HMG Category A or Major Programmes, including approvals and assurance processes. Strong knowledge of HM Treasury Orange Book and risk management best practice. Demonstrated experience developing Risk Management Strategies and Plans. Hands-on experience with Active Risk Manager (ARM), Predict!, or equivalent tools. Experience delivering quantitative risk analysis (QRA), including schedule and/or cost modelling. Strong understanding of commercial, supplier, and multi-vendor risk environments. Experience managing security, accreditation, and cyber risks within Defence or similar contexts. Ability to influence senior stakeholders and provide independent challenge at Board level. Excellent analytical, communication, and reporting skills.
Desirable: Experience within NAD/Defence Digital, Land ISTAR, or digital transformation programmes. Knowledge of HM Treasury Green Book and business case development. Familiarity with Infrastructure and Projects Authority (IPA) and GMPP assurance processes. Professional certification in risk management (eg, APM Risk, MoR, PMI-RMP).
Defence - Cost Engineer/Risk Manager (SC Cleared) - Outside IR35 - UK in Andover employer: Cactus IT Solutions UK Ltd
As a leading employer in the Defence sector, we offer a dynamic work environment that fosters innovation and collaboration. Our commitment to employee growth is reflected in our comprehensive training programmes and opportunities for advancement, ensuring that you can develop your skills while contributing to critical national projects. Located in the UK, we pride ourselves on a supportive culture that values transparency and encourages proactive risk management, making us an excellent choice for professionals seeking meaningful and impactful careers.
StudySmarter Expert Advice🤫
We think this is how you could land Defence - Cost Engineer/Risk Manager (SC Cleared) - Outside IR35 - UK in Andover
✨Tip Number 1
Network like a pro! Get out there and connect with people in the Defence sector. Attend industry events, join relevant online forums, and don’t be shy about reaching out on LinkedIn. You never know who might have the inside scoop on job openings!
✨Tip Number 2
Prepare for interviews by researching the company and its projects. Understand their risk management strategies and be ready to discuss how your experience aligns with their needs. We want you to shine, so practice common interview questions and think of examples that showcase your skills.
✨Tip Number 3
Follow up after interviews! A quick thank-you email can go a long way in showing your enthusiasm for the role. It’s also a chance to reiterate why you’re the perfect fit for their team. Keep it short and sweet, but make sure it stands out!
✨Tip Number 4
Don’t forget to apply through our website! We’ve got loads of opportunities waiting for you, and applying directly can sometimes give you an edge. Plus, it’s super easy to keep track of your applications and updates all in one place.
We think you need these skills to ace Defence - Cost Engineer/Risk Manager (SC Cleared) - Outside IR35 - UK in Andover
Some tips for your application 🫡
Tailor Your Application:Make sure to customise your CV and cover letter to highlight your experience in risk management, especially within Defence or similar environments. Use keywords from the job description to show that you understand what we're looking for.
Showcase Your Skills:Don’t just list your skills; demonstrate them! Provide examples of how you've developed and implemented risk management strategies in past roles. This will help us see how you can bring value to our team.
Be Clear and Concise:When writing your application, keep it straightforward. Use clear language and avoid jargon unless it's relevant. We want to easily understand your experience and how it aligns with the role.
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it shows you're keen on joining our team!
How to prepare for a job interview at Cactus IT Solutions UK Ltd
✨Know Your Risk Management Frameworks
Familiarise yourself with HM Treasury Orange Book principles and MOD governance frameworks. Be ready to discuss how you’ve applied these in your previous roles, as this will show your understanding of the standards expected in the Defence sector.
✨Prepare for Scenario-Based Questions
Expect questions that require you to analyse risks and opportunities in hypothetical situations. Practice articulating your thought process and decision-making strategies, especially how you would balance risk and value in a Defence context.
✨Showcase Your Technical Skills
Be prepared to discuss your hands-on experience with tools like Active Risk Manager (ARM) and Predict!. Highlight specific projects where you’ve delivered quantitative risk analysis, as this will demonstrate your technical proficiency and relevance to the role.
✨Engage with Stakeholders
Illustrate your experience in engaging with senior stakeholders and facilitating risk workshops. Share examples of how you’ve communicated complex risk information to both technical and non-technical audiences, as effective communication is key in this role.
