Information and Cyber Risk Assurance Advisor

Reference: 4duxyiqsxpc4iv33ldy3

We are seeking an Information and Cyber Risk Assurance Advisor to support the effective management of information security, technology and cyber risks across a complex operational environment. The role will provide independent, practical assurance over risk management activities, helping to identify vulnerabilities, assess control effectiveness and promote continual improvement in cyber resilience. You will work with stakeholders across technology, security, risk, compliance and business functions to ensure that information and cyber risks are understood, appropriately managed and reported.

Key responsibilities will include planning and delivering risk-based assurance reviews, assessing the design and operating effectiveness of information security controls, and supporting the maintenance of risk and control frameworks. You will review policies, standards, procedures and evidence against relevant regulatory, industry and internal requirements, documenting findings and agreeing pragmatic remediation actions. The role will also contribute to risk assessments, control testing, third-party and supplier assurance, audit preparation, incident and issue analysis, and the development of meaningful management information. You will monitor remediation activity, challenge risk owners where appropriate and provide clear reporting on emerging threats, control gaps and overall risk exposure.

The successful candidate will have experience in information security, cyber risk, technology risk, internal audit, compliance or a related assurance discipline. You will have a sound understanding of security governance, risk and control principles, and familiarity with recognised frameworks such as ISO 27001, NIST, COBIT or equivalent. Experience of conducting assurance reviews, interpreting technical and business information, and communicating findings to both specialist and non-specialist audiences is essential. Relevant professional qualifications or certifications, such as CISA, CRISC, CISSP, ISO 27001, or equivalent experience, would be advantageous. You should be analytical, well organised and comfortable working independently, with the judgement and communication skills to build trusted relationships and influence positive outcomes.

COMPETITIVE SALARY
Added 28/09/2026
Reference: 4duxyiqsxpc4iv33ldy3

Information and Cyber Risk Assurance Advisor

London, England, United Kingdom Permanent Information Assurance

Other similar jobs

Information and Cyber Risk Assurance Advisor

Added 02/10/2026

We are seeking an Information and Cyber Risk Assurance Advisor to support the effective identification, assessment and management of information security and cyber risks across a complex organisation. In this role, you will provide independent, constructive assurance over technology, information and cyber risk management activities, helping teams understand their exposure and strengthen their control environment. You will work closely with risk owners, technology specialists, internal assurance teams and senior stakeholders to promote consistent, proportionate and risk-based practices. Your responsibilities will include planning and delivering risk-based assurance reviews, assessing the design and operating effectiveness of security controls, and documenting findings, risks...

Learn more

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert guidance across cyber security risk, governance and assurance activities within a complex technology environment. This is a senior role for an experienced professional who can translate security requirements into practical, proportionate controls and confidently advise stakeholders at all levels. The successful candidate will support the management of cyber risk across services, programmes, suppliers and cloud platforms, helping to maintain a strong and demonstrable security posture. Key responsibilities will include leading cyber risk assessments, maintaining risk registers and treatment plans, and providing assurance against relevant policies, standards...

Learn more

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert leadership across cyber risk, information assurance and security governance. This is a senior opportunity for an experienced professional who can assess complex technology environments, translate risk into practical business decisions and support the delivery of secure, resilient services. The successful candidate will work with technical, operational and senior stakeholder groups to promote effective cyber risk management and assurance practices. Key responsibilities will include developing and maintaining cyber risk management frameworks, policies, standards and assurance processes aligned with ISO 27001, relevant government security principles and industry best...

Learn more

Security and Information Risk Advisor (5295)

Added 09/10/2026

We are seeking a Security and Information Risk Advisor to provide expert guidance on the identification, assessment and management of information and cyber security risks. Working with stakeholders across the business, you will help ensure that security considerations are embedded into projects, services, processes and day-to-day operations. You will act as a trusted adviser, translating complex security and risk matters into clear, practical recommendations that support informed decision-making. Your responsibilities will include conducting information risk assessments, reviewing security controls, maintaining risk registers and advising on appropriate mitigation plans. You will contribute to security architecture and design reviews, supplier and third-party...

Learn more

Security and Information Risk Advisor

Added 01/09/2026

We are seeking a Security and Information Risk Advisor to support the effective management of information security, technology risk and data protection across a complex organisation. This role will provide trusted advice to stakeholders, helping them understand security requirements, identify potential risks and implement practical, proportionate controls. You will contribute to a strong risk-aware culture while ensuring that security considerations are embedded into business change, operational processes and third-party relationships. Key responsibilities will include conducting security and information risk assessments; advising on policies, standards and control frameworks; reviewing risks associated with projects, systems, suppliers and cloud services; and supporting the...

Learn more

Security and Information Risk Advisor

Added 20/08/2026

We are seeking an experienced Security and Information Risk Advisor to join our team. In this role, you will be responsible for identifying, assessing, and mitigating information security risks across the organization. Your primary focus will be to develop and implement robust security policies and procedures while ensuring compliance with relevant regulations and standards. You will conduct regular risk assessments and vulnerability analyses, providing strategic recommendations to enhance the organization’s security posture. The ideal candidate will possess strong analytical skills and the ability to communicate complex security concepts to both technical and non-technical stakeholders. You will work closely with various...

Learn more

Security and Information Risk Advisor (4728)

Added 18/08/2026

We are seeking a highly skilled Security and Information Risk Advisor to join our team. In this role, you will be responsible for providing expert guidance on information security policies, risk management practices, and compliance frameworks. You will conduct comprehensive risk assessments to identify vulnerabilities and implement effective mitigation strategies. Your expertise will be crucial in developing security protocols and ensuring adherence to industry standards, safeguarding sensitive data and assets. As a Security and Information Risk Advisor, you will collaborate with various stakeholders to promote a culture of security awareness and best practices across the organization. Your responsibilities will include...

Learn more

Technology and Cybersecurity Assurance and Risk Manager

Added 15/10/2026

We are seeking an experienced Technology and Cybersecurity Assurance and Risk Manager to lead the development, coordination and continuous improvement of technology assurance, cybersecurity risk management and governance activities. You will provide independent oversight and constructive challenge across technology services, projects, suppliers and business change, helping to ensure that risks are identified, assessed, managed and reported effectively. Key responsibilities will include maintaining technology and cybersecurity risk frameworks, policies, standards and control requirements; conducting risk and control assessments; overseeing remediation plans; and preparing clear reports for senior stakeholders and relevant governance forums. You will support security assurance reviews, audit activity, regulatory...

Learn more

Head of Operational Information Security, Risk and Assurance

Added 04/09/2026

We are seeking an experienced Head of Operational Information Security, Risk and Assurance to lead the development and delivery of a robust operational security, risk and assurance function. This is a senior leadership role with responsibility for protecting information assets, strengthening resilience and ensuring that security practices support organisational objectives. You will provide clear direction across information security operations, technology risk, governance, compliance and assurance, while promoting a culture of shared accountability for security. You will oversee the identification, assessment and treatment of information and technology risks, ensuring that effective controls are designed, implemented and continuously improved. Responsibilities will include...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Security Technical Risk Advisor 1

Added 30/09/2026

We are seeking a Security Technical Risk Advisor 1 to support the identification, assessment, and management of technology and information security risks across a complex business environment. This role is suited to an early-career security professional who can combine sound technical understanding with strong analytical, communication, and stakeholder management skills. You will help ensure that security risks are clearly understood, appropriately prioritised, and addressed in line with established policies, standards, and regulatory expectations. Key responsibilities will include conducting security risk assessments for systems, applications, projects, suppliers, and technology changes; reviewing control designs and identifying gaps; documenting findings, recommendations, and risk...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 09/10/2026

We are seeking a Senior Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help maintain confidence in the organisation’s security, privacy and resilience controls by coordinating assurance programmes, supporting regulatory requirements and engaging with internal and external stakeholders. You will work closely with security, compliance, risk, legal, audit and operational teams to assess control effectiveness and promote continuous improvement. Key responsibilities include managing evidence collection for internal and external audits, coordinating responses to customer and regulatory assessments, and preparing clear, accurate reports for senior stakeholders. You will review security and compliance...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 25/09/2026

We are seeking a Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help demonstrate that cloud services, business processes and operational controls meet applicable regulatory, contractual and industry requirements. You will work with security, legal, privacy, risk, audit and engineering teams to assess control effectiveness, coordinate evidence and communicate assurance outcomes to internal and external stakeholders. Key responsibilities include supporting customer, regulatory and third-party assurance requests; coordinating audit and assessment activities; reviewing policies, procedures and control documentation; and identifying opportunities to improve the efficiency and consistency of assurance processes. You will...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 19/08/2026

We are seeking a Senior Security Assurance Specialist to join our team, focusing on compliance and security assurance across the EMEA region. In this role, you will be responsible for leading security assessments, audits, and compliance initiatives to ensure alignment with industry standards and regulatory requirements. You will collaborate with various stakeholders, including engineering, product management, and legal teams, to develop and implement security policies, procedures, and best practices. Your expertise will be crucial in identifying vulnerabilities and recommending effective mitigation strategies to enhance security posture. The ideal candidate will have a strong background in information security, risk management, and...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.