Cyber Risk Analyst

Reference: tu7bvgwqw7cfqmazw6y6

We are seeking a Cyber Risk Analyst to support the identification, assessment and management of information security and technology risks across the organisation. The successful candidate will help strengthen the cyber risk framework, improve visibility of the threat landscape and provide clear, practical advice to stakeholders. This role will work closely with technology, security, compliance, audit and business teams to ensure that cyber risks are understood, appropriately prioritised and managed in line with internal policies and regulatory expectations.

Key responsibilities will include maintaining risk registers, conducting cyber and information security risk assessments, reviewing control effectiveness and supporting the remediation of identified weaknesses. You will monitor emerging threats, vulnerabilities and changes in the regulatory environment, assessing their potential impact on business operations. The role will also contribute to risk reporting, management information and governance forums, translating technical findings into concise updates for senior audiences. Additional duties may include supporting third-party and supplier risk assessments, assisting with control testing, tracking remediation actions and contributing to incident reviews, resilience assessments and assurance activities.

Applicants should have experience in cyber security, technology risk, information security, internal controls, audit or a related discipline. A sound understanding of risk management principles, security frameworks and common control standards is required, along with the ability to analyse complex information and identify practical improvements. Familiarity with frameworks such as ISO 27001, NIST Cybersecurity Framework, COBIT or CIS Controls would be advantageous. Relevant professional qualifications or certifications, such as CISA, CRISC, CISSP, CISM or equivalent experience, are desirable. Strong written and verbal communication skills are essential, as is the confidence to engage with both technical and non-technical stakeholders. You will be organised, analytical and detail-oriented, with the ability to manage competing priorities, challenge constructively and work collaboratively in a changing environment.

COMPETITIVE SALARY
Added 17/09/2026
Reference: tu7bvgwqw7cfqmazw6y6

Other similar jobs

Advanced Cyber Threat Analyst

Added 14/09/2026

We are seeking an Advanced Cyber Threat Analyst to identify, investigate and disrupt sophisticated cyber threats across a complex technology environment. You will monitor threat activity, analyse security telemetry and intelligence, and assess potential impacts to systems, applications, data and business operations. The role requires a proactive, analytical professional who can connect seemingly unrelated events, identify attack patterns and provide clear, actionable recommendations to strengthen defensive capabilities. Your responsibilities will include conducting advanced threat hunting across endpoint, network, cloud and identity environments; investigating alerts and suspected incidents; analysing malware, attacker tactics, techniques and procedures; and developing detection logic, use cases...

Learn more

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Senior Risk Manager Technology Risk and Transformation

Added 23/10/2026

We are seeking a Senior Risk Manager – Technology Risk and Transformation to provide experienced leadership across technology risk, change and transformation initiatives. This is an opportunity to shape a proactive risk management approach, helping ensure technology services, systems and strategic programmes are resilient, well controlled and aligned with regulatory and business expectations. You will lead the identification, assessment and management of technology and information risks, working closely with senior stakeholders across technology, change, cyber security, operational resilience, compliance and business functions. You will provide constructive challenge and practical advice on risk appetite, control design, risk acceptance, remediation planning and...

Learn more

Cyber Governance & Risk Analyst

Added 23/10/2026

We are seeking a Cyber Governance & Risk Analyst to support the development, operation and continuous improvement of cyber security governance and risk management across the organisation. This role will help ensure that information security risks are identified, assessed and managed effectively, while supporting compliance with relevant policies, standards and regulatory requirements. You will maintain cyber security risk registers, coordinate risk assessments and monitor the progress of remediation activities. Working with colleagues across technology, operational teams and business functions, you will provide practical advice on risk treatment, control effectiveness and security obligations. You will also support the preparation of risk...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and cyber risks across a complex business environment. The role will help strengthen the control framework, improve risk visibility and provide constructive challenge to ensure that key risks are identified, assessed and managed within agreed appetite. Responsibilities will include maintaining risk and control documentation, supporting risk and control assessments, and helping to identify gaps, weaknesses and opportunities for improvement. You will coordinate control testing and assurance activity, review evidence, track remediation plans and monitor actions through to completion. The role...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. Working with stakeholders across technology, cyber security, risk, audit and the wider business, you will help strengthen the control environment and promote consistent, risk-based practices across the organisation. Your responsibilities will include maintaining risk and control registers, coordinating control assessments, reviewing evidence and monitoring remediation activity. You will support the design, implementation and testing of controls relating to areas such as access management, vulnerability management, change management, incident response, third-party risk, data protection and business...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and operational risks across a complex business environment. This role will help strengthen the control framework, promote consistent risk management practices and provide insight into the organisation’s cyber and technology risk profile. You will work with stakeholders across technology, security, risk, compliance and business functions, building constructive relationships and helping teams understand and manage their control responsibilities. Key responsibilities will include maintaining risk and control documentation, coordinating control assessments and supporting the identification, evaluation and treatment of cyber and technology...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. This role will work with stakeholders across technology, security, risk and business functions to assess the design and operating effectiveness of controls, identify areas for improvement and promote consistent risk management practices. Responsibilities will include maintaining risk and control assessments, supporting the development and monitoring of key risk and performance indicators, and contributing to the management of issues, actions and remediation plans. You will assist with control testing, evidence gathering and the preparation of clear...

Learn more

Cyber Risk and Resilience Analyst

Added 25/09/2026

We are seeking a Cyber Risk and Resilience Analyst to support the identification, assessment and management of technology and information security risks across a complex business environment. In this role, you will help strengthen operational resilience, improve cyber risk visibility and support the organisation in preparing for, responding to and recovering from disruptive events. You will work with stakeholders across technology, information security, risk, compliance and business operations to promote effective risk management practices and embed resilience into processes and decision-making. Your responsibilities will include maintaining cyber risk and control assessments, analysing threats and vulnerabilities, monitoring remediation plans and producing...

Learn more

Cyber Security Risk Analyst

Added 24/09/2026

We are seeking a Cyber Security Risk Analyst to support the identification, assessment and management of information security risks across a complex organisational environment. In this role, you will work with technology, operational and business stakeholders to understand the risk landscape, evaluate existing controls and recommend practical improvements that protect systems, data and services. You will contribute to a proactive security culture by helping teams understand their responsibilities and make informed, risk-based decisions. Your responsibilities will include conducting cyber security and technology risk assessments, maintaining risk registers, monitoring remediation plans and preparing clear reports for management and governance forums. You...

Learn more

Cyber Risk Analyst

Added 17/09/2026

We are seeking a Cyber Risk Analyst to support the identification, assessment, and management of information and cyber security risks across the organisation. In this role, you will work with technology, business, and security stakeholders to evaluate risks, recommend appropriate controls, and help strengthen the overall cyber risk management framework. You will contribute to risk assessments for systems, applications, suppliers, projects, and business processes, ensuring that security considerations are embedded throughout the organisation. Key responsibilities will include maintaining cyber risk registers, analysing threats and vulnerabilities, reviewing control effectiveness, and tracking remediation activities through to completion. You will support the development...

Learn more

Cyber Risk Analyst

Added 17/09/2026

We are seeking a Cyber Risk Analyst to support the identification, assessment and management of information security and technology risks across the organisation. In this role, you will work with stakeholders across technology, operations, compliance and internal audit to assess cyber risks, maintain accurate risk records and promote effective risk management practices. You will help ensure that security risks are understood, prioritised and addressed in line with business objectives, regulatory expectations and established policies. Your responsibilities will include conducting cyber and technology risk assessments; reviewing control effectiveness; identifying gaps and recommending practical remediation actions; maintaining risk registers, issues logs and...

Learn more

Cyber Risk Analyst

Added 17/09/2026

We are seeking a Cyber Risk Analyst to support the identification, assessment, and management of information and cyber security risks across the organisation. In this role, you will work with technology, security, compliance, and business teams to maintain a clear view of the cyber risk landscape and help ensure that appropriate controls are designed, implemented, and monitored. You will contribute to risk assessments for systems, applications, suppliers, projects, and business processes, providing practical recommendations that support informed decision-making. Your responsibilities will include maintaining risk registers, reviewing control effectiveness, tracking remediation activities, and preparing clear reports for risk and governance forums....

Learn more

IT Governance, Risk & Compliance Analyst

Added 04/11/2026

We are seeking an experienced IT Governance, Risk & Compliance Analyst to support the development, operation and continuous improvement of technology governance and assurance activities. This role will help ensure that information technology services, systems and processes are managed in line with business objectives, regulatory obligations, security standards and internal policies. You will maintain governance frameworks, policies, standards and procedures, ensuring that documentation remains accurate, relevant and accessible. You will support risk assessments, control reviews and compliance monitoring, identifying gaps and working with stakeholders to agree practical remediation plans. The role will also involve maintaining risk and issue registers, tracking...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.