Information Risk Analyst

Reference: wusyjhsmws1x5f6sbhqs

We are seeking an Information Risk Analyst to support the identification, assessment and management of information and technology risks across the organisation. In this role, you will work with stakeholders across business, technology, security, compliance and audit functions to promote effective risk management and strengthen the protection of information assets. You will help ensure that risks are understood, appropriately documented and managed in line with internal policies, regulatory expectations and recognised industry standards.

Key responsibilities will include maintaining risk and control registers, conducting risk assessments, reviewing security and operational controls, and supporting the development of mitigation plans. You will monitor outstanding actions, challenge risk owners where appropriate and provide clear updates on risk exposure, trends and emerging issues. The role will also involve supporting third-party and supplier risk assessments, contributing to business continuity and resilience activities, and assisting with internal and external audits. You may be required to prepare management reports, develop risk metrics and assist with awareness initiatives that improve understanding of information risk across the organisation.

The successful candidate will have experience in information security, technology risk, governance, compliance, audit or a related discipline. You should be confident analysing complex information, identifying control weaknesses and explaining risk clearly to both technical and non-technical audiences. Familiarity with frameworks and standards such as ISO 27001, NIST, COBIT or similar is desirable, along with an understanding of data protection, access management, vulnerability management and incident response principles. Strong written and verbal communication skills, sound judgement, attention to detail and the ability to manage competing priorities are essential. Relevant professional qualifications or certifications in information security, risk or audit would be advantageous.

COMPETITIVE SALARY
Added 30/09/2026
Reference: wusyjhsmws1x5f6sbhqs

Other similar jobs

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Vice President, Enterprise Risk Management & Legal Entity Risk

Added 25/08/2026

We are seeking a Vice President, Enterprise Risk Management & Legal Entity Risk to provide strategic leadership across the enterprise risk framework and legal entity governance environment. This senior role will oversee the identification, assessment, monitoring and management of key risks, ensuring that risk practices support business objectives, regulatory expectations and sustainable growth. The successful candidate will serve as a trusted adviser to senior leaders and governance committees, providing clear, independent insight into the organisation’s risk profile and emerging exposures. Key responsibilities include leading the development and ongoing enhancement of the enterprise risk management framework, risk appetite statement, policies, standards...

Learn more

Information Risk Analyst

Added 30/09/2026

We are seeking an Information Risk Analyst to support the identification, assessment and management of information and technology risks across the organisation. In this role, you will work with stakeholders across business and technical teams to help protect sensitive information, strengthen risk management practices and support compliance with relevant policies, regulations and industry standards. Your responsibilities will include maintaining information risk registers, conducting risk and control assessments, reviewing security and privacy requirements, and supporting the tracking and remediation of identified issues. You will analyse incidents, audit findings, vulnerability information and other risk indicators to identify trends and recommend proportionate actions....

Learn more

Business Information Risk Analyst

Added 11/09/2026

We are seeking a Business Information Risk Analyst to support the identification, assessment and management of information and technology risks across a complex business environment. In this role, you will work with stakeholders across business operations, technology, security, compliance and audit to help ensure that information assets are protected and that risk is managed within agreed appetite and regulatory expectations. You will contribute to a proactive risk culture by providing clear, practical advice and promoting consistent risk management practices. Key responsibilities will include maintaining risk and control registers, supporting risk assessments, reviewing business processes and identifying potential vulnerabilities, control weaknesses...

Learn more

Senior Information Security Risk Analyst

Added 09/09/2026

We are seeking a Senior Information Security Risk Analyst to support the identification, assessment and management of technology and information security risks across a complex environment. This role will work closely with stakeholders across technology, compliance, audit and business functions to strengthen risk governance, improve resilience and promote effective security practices. The successful candidate will provide expert advice on risk matters and help ensure that security risks are understood, appropriately owned and managed within agreed tolerance levels. Responsibilities will include conducting information security and technology risk assessments; evaluating controls against internal policies, regulatory expectations and recognised industry frameworks; maintaining risk...

Learn more

Group Information Security Risk Analyst

Added 01/09/2026

We are seeking a Group Information Security Risk Analyst to support the identification, assessment and management of information security risks across a diverse, international environment. In this role, you will work with technology, business and control owners to maintain a clear view of the organisation’s risk profile and help ensure that security risks are managed within agreed policies, frameworks and risk appetite. You will contribute to a consistent, practical and risk-based approach to information security governance. Key responsibilities will include conducting risk assessments for systems, processes, projects, suppliers and emerging technologies; reviewing security controls and documenting gaps; maintaining risk registers,...

Learn more

Assistant Manager - Information Security Risk and Governance

Added 13/10/2026

We are seeking an Assistant Manager – Information Security Risk and Governance to support the development, implementation and continuous improvement of information security risk management and governance practices. This role will help ensure that security risks are identified, assessed, monitored and reported effectively, while supporting compliance with relevant laws, regulations, policies and industry standards. The successful candidate will work with stakeholders across the organisation to promote a strong culture of information security and informed risk-based decision-making. Key responsibilities will include coordinating information security risk assessments, maintaining risk registers and tracking remediation plans through to completion. You will support the review...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Security and Information Risk Advisor (5295)

Added 09/10/2026

We are seeking a Security and Information Risk Advisor to provide expert guidance on the identification, assessment and management of information and cyber security risks. Working with stakeholders across the business, you will help ensure that security considerations are embedded into projects, services, processes and day-to-day operations. You will act as a trusted adviser, translating complex security and risk matters into clear, practical recommendations that support informed decision-making. Your responsibilities will include conducting information risk assessments, reviewing security controls, maintaining risk registers and advising on appropriate mitigation plans. You will contribute to security architecture and design reviews, supplier and third-party...

Learn more

Information and Cyber Risk Assurance Advisor

Added 02/10/2026

We are seeking an Information and Cyber Risk Assurance Advisor to support the effective identification, assessment and management of information security and cyber risks across a complex organisation. In this role, you will provide independent, constructive assurance over technology, information and cyber risk management activities, helping teams understand their exposure and strengthen their control environment. You will work closely with risk owners, technology specialists, internal assurance teams and senior stakeholders to promote consistent, proportionate and risk-based practices. Your responsibilities will include planning and delivering risk-based assurance reviews, assessing the design and operating effectiveness of security controls, and documenting findings, risks...

Learn more

Information and Cyber Risk Assurance Advisor

Added 28/09/2026

We are seeking an Information and Cyber Risk Assurance Advisor to support the effective management of information security, technology and cyber risks across a complex operational environment. The role will provide independent, practical assurance over risk management activities, helping to identify vulnerabilities, assess control effectiveness and promote continual improvement in cyber resilience. You will work with stakeholders across technology, security, risk, compliance and business functions to ensure that information and cyber risks are understood, appropriately managed and reported. Key responsibilities will include planning and delivering risk-based assurance reviews, assessing the design and operating effectiveness of information security controls, and supporting...

Learn more

Head of Information Security, Risk and Compliance

Added 22/09/2026

We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation. Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

Head of Operational Information Security, Risk and Assurance

Added 04/09/2026

We are seeking an experienced Head of Operational Information Security, Risk and Assurance to lead the development and delivery of a robust operational security, risk and assurance function. This is a senior leadership role with responsibility for protecting information assets, strengthening resilience and ensuring that security practices support organisational objectives. You will provide clear direction across information security operations, technology risk, governance, compliance and assurance, while promoting a culture of shared accountability for security. You will oversee the identification, assessment and treatment of information and technology risks, ensuring that effective controls are designed, implemented and continuously improved. Responsibilities will include...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.