Cyber Risk Assessment Lead

Reference: 21laiiyhapjsokrsd1sk

We are seeking an experienced Cyber Risk Assessment Lead to strengthen the organisation’s ability to identify, evaluate and manage information and technology risks. In this role, you will lead cyber risk assessments across business functions, technology environments, suppliers and strategic initiatives, providing clear insight into potential threats, control weaknesses and required improvements. You will work closely with senior stakeholders, security specialists, technology teams, risk owners and audit colleagues to ensure that cyber risks are understood, appropriately prioritised and managed within agreed risk tolerances.

Your responsibilities will include developing and maintaining risk assessment methodologies, standards, templates and reporting practices; planning and conducting qualitative and quantitative assessments; reviewing security controls and evidence; analysing threat scenarios and business impacts; and documenting findings, recommendations and remediation plans. You will monitor action progress, challenge risk acceptance decisions where appropriate, and produce concise reports and dashboards for governance forums and senior leadership. The role will also contribute to the development of risk appetite, control assurance, security architecture reviews, third-party risk assessments and continuous improvement of the wider cyber risk management framework.

You will bring substantial experience in cyber security, technology risk, information security or a related discipline, with a strong background in conducting and leading risk assessments in complex environments. Knowledge of recognised frameworks and standards such as NIST Cybersecurity Framework, ISO 27001, COBIT, CIS Controls or equivalent is expected. Professional qualifications in cyber security, risk management, audit or information systems are desirable. You should be confident interpreting technical information, translating it into business-focused advice and influencing stakeholders at all levels. Strong analytical, written and verbal communication skills are essential, along with sound judgement, attention to detail and the ability to manage multiple priorities. Experience with governance, risk and compliance tools, regulatory requirements, cloud environments and third-party assurance would be advantageous.

COMPETITIVE SALARY
Added 24/09/2026
Reference: 21laiiyhapjsokrsd1sk

Other similar jobs

Cyber Risk Manager

Added 21/09/2026

We are seeking an experienced Cyber Risk Manager to lead the identification, assessment and management of information and cyber security risks across a complex business environment. This role will work closely with technology, security, compliance, audit and business teams to strengthen risk visibility, support informed decision-making and promote a proactive security culture. The successful candidate will translate technical and emerging cyber threats into clear business impacts, priorities and practical recommendations for senior stakeholders. Key responsibilities will include maintaining and continually improving the cyber risk management framework, policies, standards and reporting processes. You will coordinate risk assessments, control reviews and remediation...

Learn more

Cyber Incident Response Lead

Added 09/09/2026

We are seeking an experienced Cyber Incident Response Lead to direct the identification, investigation, containment and recovery of complex cybersecurity incidents. You will provide senior technical leadership throughout the incident lifecycle, coordinating rapid and effective responses to threats affecting systems, networks, applications, cloud environments and sensitive data. The role will involve assessing alerts, validating incidents, determining scope and impact, developing containment strategies, and ensuring that recovery actions are completed safely and efficiently. You will lead incident response activities across multidisciplinary teams, including security operations, infrastructure, engineering, risk, legal, communications and business stakeholders. Responsibilities will include establishing response priorities, allocating resources,...

Learn more

Identity and Access Management Lead

Added 11/09/2026

We are seeking an experienced Identity and Access Management Lead to define and deliver a secure, scalable IAM strategy across a complex technology environment. This role will provide technical leadership for identity governance, access management, authentication, privileged access, and directory services, ensuring that users have appropriate access at the right time while maintaining strong security and regulatory controls. You will lead the design, implementation, and continuous improvement of IAM solutions, including joiner, mover, and leaver processes, role-based access control, single sign-on, multi-factor authentication, privileged access management, and access certification. Working closely with information security, infrastructure, applications, compliance, and business stakeholders,...

Learn more

Cyber Controls Manager

Added 22/09/2026

We are seeking a Cyber Controls Manager to lead the development, implementation and continuous improvement of cybersecurity controls across a complex technology and business environment. This role will help strengthen cyber resilience by ensuring that security controls are appropriately designed, consistently operated, regularly assessed and aligned with relevant regulatory, industry and internal requirements. You will work closely with technology, risk, compliance, audit and business stakeholders to identify control gaps, agree remediation plans and support a strong culture of security and accountability. Key responsibilities will include maintaining the cybersecurity control framework; mapping controls to recognised standards and regulatory obligations; coordinating control...

Learn more

Cyber Requirements & Compliance Specialist

Added 22/09/2026

We are seeking a Cyber Requirements & Compliance Specialist to support the development, implementation and assurance of cybersecurity requirements across technology, information and business environments. In this role, you will translate regulatory obligations, industry standards, contractual commitments and internal policies into clear, practical security requirements. You will work closely with technical teams, project managers, risk specialists and business stakeholders to ensure that cybersecurity considerations are embedded throughout the design, delivery and operational lifecycle of systems and services. Key responsibilities will include maintaining security and compliance requirements, conducting control and gap assessments, and supporting the review of new or amended legislation,...

Learn more

Cyber Controls Specialist

Added 22/09/2026

We are seeking a Cyber Controls Specialist to support the design, implementation and ongoing improvement of cybersecurity controls across a complex technology and business environment. The role will help ensure that security practices align with internal policies, recognised industry frameworks and applicable regulatory requirements. You will work closely with technology, risk, audit and business stakeholders to assess control effectiveness, identify weaknesses and coordinate practical remediation plans. Key responsibilities include maintaining and reviewing the cybersecurity control framework; mapping controls to relevant standards and regulatory obligations; supporting risk and control self-assessments; and gathering evidence for internal and external assurance activities. You will...

Learn more

Cyber Requirements & Compliance Manager

Added 21/09/2026

We are seeking a Cyber Requirements & Compliance Manager to lead the definition, coordination and oversight of cybersecurity requirements across complex technology and business initiatives. In this role, you will translate regulatory obligations, security policies, risk assessments and industry standards into clear, practical and measurable requirements. You will work closely with technology, engineering, risk, audit, privacy and business stakeholders to ensure security expectations are understood, embedded and maintained throughout the project and service lifecycle. Your responsibilities will include maintaining cybersecurity requirement frameworks, control libraries and compliance documentation; reviewing solution designs and project plans; supporting risk and control assessments; and tracking...

Learn more

Cyber Operations Manager

Added 09/09/2026

We are seeking an experienced Cyber Operations Manager to lead and develop a high-performing security operations function. The successful candidate will oversee the monitoring, detection, investigation and response to cyber threats across the organisation’s technology environment. You will provide strategic direction while remaining engaged with operational priorities, ensuring that security controls, processes and services are effective, resilient and aligned with business objectives. This role will involve managing internal teams and third-party providers, setting service standards, and promoting a culture of continuous improvement. Key responsibilities will include overseeing security monitoring and incident response activities; coordinating the triage, containment and remediation of...

Learn more

Threat Assessment Lead

Added 19/08/2026

We are seeking a highly skilled Threat Assessment Lead to join our dynamic team. In this role, you will be responsible for identifying, analyzing, and mitigating potential threats to our organization. You will conduct comprehensive risk assessments, utilizing both qualitative and quantitative methods, to develop effective threat response strategies. Your expertise will be crucial in fostering a proactive security culture and ensuring that our organizational policies and procedures align with best practices in threat management. The ideal candidate will have a strong background in threat intelligence and risk management, along with proven experience in leading threat assessment initiatives. You will...

Learn more

Senior Conformity Assessment Program Specialist - Information Security Management System

Added 26/08/2026

We are seeking a Senior Conformity Assessment Program Specialist to lead and support the delivery of information security management system (ISMS) conformity assessment activities. In this role, you will coordinate assessment programmes, oversee planning and scheduling, and ensure that audits and related activities are conducted consistently, efficiently and in accordance with applicable standards, accreditation requirements and internal procedures. You will work closely with clients, assessors, technical experts and internal stakeholders to clarify requirements, manage expectations and support the successful completion of assessment cycles. Your responsibilities will include reviewing applications and assessment information, determining resource and competence requirements, preparing assessment plans,...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Learn more

Vice President, Enterprise Risk Management & Legal Entity Risk

Added 25/08/2026

We are seeking a Vice President, Enterprise Risk Management & Legal Entity Risk to provide strategic leadership across the enterprise risk framework and legal entity governance environment. This senior role will oversee the identification, assessment, monitoring and management of key risks, ensuring that risk practices support business objectives, regulatory expectations and sustainable growth. The successful candidate will serve as a trusted adviser to senior leaders and governance committees, providing clear, independent insight into the organisation’s risk profile and emerging exposures. Key responsibilities include leading the development and ongoing enhancement of the enterprise risk management framework, risk appetite statement, policies, standards...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to develop and oversee a robust approach to managing cyber security risks across suppliers, partners and other external service providers. This role will play a key part in strengthening organisational resilience by ensuring that third parties are appropriately assessed, monitored and managed throughout the supplier lifecycle. You will establish and maintain the third-party cyber risk management framework, including policies, standards, processes and risk assessment methodologies. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide expert guidance during supplier selection, onboarding, contract renewal and exit activities....

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of information and cyber security risks across an organisation’s supplier and partner ecosystem. This is a key role within the wider risk function, responsible for ensuring that third parties are assessed, monitored and managed consistently throughout the relationship lifecycle. You will provide expert guidance to procurement, technology, legal, compliance and business teams, helping them make informed decisions about supplier security and resilience. Your responsibilities will include developing and maintaining the third-party cyber risk management framework, policies, standards and procedures. You will lead or oversee security due...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.