Security Analyst - Risk

Reference: exkq3dt9bfo3162o5rs4

We are seeking a Security Analyst – Risk to support the identification, assessment and management of information security and technology risks across the organisation. The successful candidate will work with stakeholders across business and technical teams to help maintain a clear understanding of the risk landscape, support informed decision-making and promote effective security practices.

Key responsibilities will include conducting security risk assessments for projects, systems, suppliers and business processes; documenting risks, controls, assumptions and remediation actions; and monitoring the progress of agreed treatment plans. You will contribute to the review and development of security policies, standards and procedures, helping to ensure they remain aligned with relevant regulatory obligations and recognised industry frameworks. The role will also involve supporting third-party and supply-chain risk reviews, assisting with audit and assurance activities, preparing risk reports and dashboards, and escalating material issues where appropriate. You will help provide practical advice on security controls and contribute to awareness activities that strengthen risk ownership throughout the organisation.

Applicants should have experience in information security, technology risk, governance, compliance or a related field, together with an understanding of risk assessment methodologies and security control frameworks such as ISO 27001, NIST or CIS. Familiarity with regulatory requirements, supplier assurance, vulnerability management and security principles across cloud and on-premises environments would be advantageous. Strong analytical, organisational and communication skills are essential, along with the ability to interpret complex information, challenge constructively and explain security risks to both technical and non-technical audiences. Relevant qualifications in information security, risk management or audit are desirable, as is experience using governance, risk and compliance tools.

COMPETITIVE SALARY
Added 25/08/2026
Reference: exkq3dt9bfo3162o5rs4

Other similar jobs

Security Manager - Risk and Consulting

Added 23/09/2026

We are seeking an experienced Security Manager – Risk and Consulting to lead the delivery of high-quality security risk management and advisory services. In this role, you will work with clients and internal stakeholders to understand business objectives, identify security risks, and develop practical, proportionate solutions that strengthen resilience and support regulatory compliance. You will manage engagements from planning through to completion, ensuring that work is delivered to a consistently high standard, on time and within agreed budgets. Key responsibilities will include conducting security risk assessments, threat and vulnerability reviews, control evaluations, security maturity assessments, and third-party risk reviews. You...

Learn more

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Vice President, Enterprise Risk Management & Legal Entity Risk

Added 25/08/2026

We are seeking a Vice President, Enterprise Risk Management & Legal Entity Risk to provide strategic leadership across the enterprise risk framework and legal entity governance environment. This senior role will oversee the identification, assessment, monitoring and management of key risks, ensuring that risk practices support business objectives, regulatory expectations and sustainable growth. The successful candidate will serve as a trusted adviser to senior leaders and governance committees, providing clear, independent insight into the organisation’s risk profile and emerging exposures. Key responsibilities include leading the development and ongoing enhancement of the enterprise risk management framework, risk appetite statement, policies, standards...

Learn more

Security Risk Analyst (FTC)

Added 25/09/2026

We are seeking a Security Risk Analyst for a fixed-term contract to support the identification, assessment and management of information and technology security risks. You will work with stakeholders across the organisation to understand business processes, assess control effectiveness and provide practical recommendations that strengthen the overall security posture. This role is suited to an analytical professional who can interpret complex information, communicate clearly and contribute confidently in a collaborative environment. Key responsibilities will include conducting security risk assessments, documenting findings and maintaining accurate risk registers; reviewing security controls, policies and procedures against relevant standards and regulatory requirements; supporting third-party...

Learn more

Cyber Security Risk Analyst

Added 24/09/2026

We are seeking a Cyber Security Risk Analyst to support the identification, assessment and management of information security risks across a complex organisational environment. In this role, you will work with technology, operational and business stakeholders to understand the risk landscape, evaluate existing controls and recommend practical improvements that protect systems, data and services. You will contribute to a proactive security culture by helping teams understand their responsibilities and make informed, risk-based decisions. Your responsibilities will include conducting cyber security and technology risk assessments, maintaining risk registers, monitoring remediation plans and preparing clear reports for management and governance forums. You...

Learn more

IT Security Governance, Risk & Controls Analyst

Added 22/09/2026

We are seeking an IT Security Governance, Risk & Controls Analyst to support the development, operation and continuous improvement of information security governance and risk management processes. In this role, you will help ensure that technology environments, business processes and third-party services are aligned with internal policies, regulatory expectations and recognised security frameworks. You will work closely with technology, risk, compliance, audit and business stakeholders to identify security risks, assess control effectiveness and support practical remediation plans. Key responsibilities will include maintaining security policies, standards, procedures and control frameworks; coordinating periodic risk and control assessments; documenting risks, findings, action plans...

Learn more

Senior Information Security Risk Analyst

Added 09/09/2026

We are seeking a Senior Information Security Risk Analyst to support the identification, assessment and management of technology and information security risks across a complex environment. This role will work closely with stakeholders across technology, compliance, audit and business functions to strengthen risk governance, improve resilience and promote effective security practices. The successful candidate will provide expert advice on risk matters and help ensure that security risks are understood, appropriately owned and managed within agreed tolerance levels. Responsibilities will include conducting information security and technology risk assessments; evaluating controls against internal policies, regulatory expectations and recognised industry frameworks; maintaining risk...

Learn more

Group Information Security Risk Analyst

Added 01/09/2026

We are seeking a Group Information Security Risk Analyst to support the identification, assessment and management of information security risks across a diverse, international environment. In this role, you will work with technology, business and control owners to maintain a clear view of the organisation’s risk profile and help ensure that security risks are managed within agreed policies, frameworks and risk appetite. You will contribute to a consistent, practical and risk-based approach to information security governance. Key responsibilities will include conducting risk assessments for systems, processes, projects, suppliers and emerging technologies; reviewing security controls and documenting gaps; maintaining risk registers,...

Learn more

Certification and Assurance - Senior Security/Technology Risk Analyst

Added 20/08/2026

We are seeking a skilled and experienced Senior Security/Technology Risk Analyst to join our dynamic team. In this role, you will be responsible for identifying, assessing, and managing risks associated with technology and security across various platforms. You will conduct thorough risk assessments, ensuring compliance with regulatory requirements and internal policies. This includes evaluating the effectiveness of existing security controls and making recommendations for enhancements to safeguard our systems and data. You will also collaborate with cross-functional teams to implement security best practices and promote a culture of risk awareness within the organization. The ideal candidate will possess a deep...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and operational risks across a complex business environment. This role will help strengthen the control framework, promote consistent risk management practices and provide insight into the organisation’s cyber and technology risk profile. You will work with stakeholders across technology, security, risk, compliance and business functions, building constructive relationships and helping teams understand and manage their control responsibilities. Key responsibilities will include maintaining risk and control documentation, coordinating control assessments and supporting the identification, evaluation and treatment of cyber and technology...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and cyber risks across a complex business environment. The role will help strengthen the control framework, improve risk visibility and provide constructive challenge to ensure that key risks are identified, assessed and managed within agreed appetite. Responsibilities will include maintaining risk and control documentation, supporting risk and control assessments, and helping to identify gaps, weaknesses and opportunities for improvement. You will coordinate control testing and assurance activity, review evidence, track remediation plans and monitor actions through to completion. The role...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. Working with stakeholders across technology, cyber security, risk, audit and the wider business, you will help strengthen the control environment and promote consistent, risk-based practices across the organisation. Your responsibilities will include maintaining risk and control registers, coordinating control assessments, reviewing evidence and monitoring remediation activity. You will support the design, implementation and testing of controls relating to areas such as access management, vulnerability management, change management, incident response, third-party risk, data protection and business...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. This role will work with stakeholders across technology, security, risk and business functions to assess the design and operating effectiveness of controls, identify areas for improvement and promote consistent risk management practices. Responsibilities will include maintaining risk and control assessments, supporting the development and monitoring of key risk and performance indicators, and contributing to the management of issues, actions and remediation plans. You will assist with control testing, evidence gathering and the preparation of clear...

Learn more

Information Risk Analyst

Added 30/09/2026

We are seeking an Information Risk Analyst to support the identification, assessment and management of information and technology risks across the organisation. In this role, you will work with stakeholders across business and technical teams to help protect sensitive information, strengthen risk management practices and support compliance with relevant policies, regulations and industry standards. Your responsibilities will include maintaining information risk registers, conducting risk and control assessments, reviewing security and privacy requirements, and supporting the tracking and remediation of identified issues. You will analyse incidents, audit findings, vulnerability information and other risk indicators to identify trends and recommend proportionate actions....

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.