Risk & Controls Analyst (Cyber & Technology)

Reference: 7xyg7d023eiw9ixl2x6q

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and cyber risks across a complex business environment. The role will help strengthen the control framework, improve risk visibility and provide constructive challenge to ensure that key risks are identified, assessed and managed within agreed appetite.

Responsibilities will include maintaining risk and control documentation, supporting risk and control assessments, and helping to identify gaps, weaknesses and opportunities for improvement. You will coordinate control testing and assurance activity, review evidence, track remediation plans and monitor actions through to completion. The role will also involve analysing incidents, audit findings and control failures to identify recurring themes and emerging risks, preparing clear management information, and producing concise reports for governance forums and senior stakeholders. You will work closely with technology, cyber security, privacy, compliance, audit and operational teams to embed proportionate controls and promote consistent risk management practices. Where required, you will contribute to the development and review of policies, standards, procedures and risk acceptance documentation.

To succeed, you should have experience in technology risk, information security, IT controls, cyber governance or a related discipline, ideally within a regulated or complex organisation. You will be comfortable interpreting control frameworks and recognised standards, such as ISO 27001, NIST, COBIT or similar, and applying them in a practical business context. Strong analytical and problem-solving skills are essential, along with the ability to assess evidence, identify control deficiencies and communicate recommendations clearly to both technical and non-technical audiences. You should be organised, proactive and confident managing multiple priorities, with excellent written and verbal communication skills. Relevant professional qualifications or certifications, such as CISA, CRISC, CISSP or ISO 27001, would be advantageous but are not essential.

COMPETITIVE SALARY
Added 15/10/2026
Reference: 7xyg7d023eiw9ixl2x6q

Risk & Controls Analyst (Cyber & Technology)

Reading, England, United Kingdom Permanent Risk Analyst

Other similar jobs

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and operational risks across a complex business environment. This role will help strengthen the control framework, promote consistent risk management practices and provide insight into the organisation’s cyber and technology risk profile. You will work with stakeholders across technology, security, risk, compliance and business functions, building constructive relationships and helping teams understand and manage their control responsibilities. Key responsibilities will include maintaining risk and control documentation, coordinating control assessments and supporting the identification, evaluation and treatment of cyber and technology...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. This role will work with stakeholders across technology, security, risk and business functions to assess the design and operating effectiveness of controls, identify areas for improvement and promote consistent risk management practices. Responsibilities will include maintaining risk and control assessments, supporting the development and monitoring of key risk and performance indicators, and contributing to the management of issues, actions and remediation plans. You will assist with control testing, evidence gathering and the preparation of clear...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology, information security and operational risks across a complex organisation. This role will provide independent challenge, practical guidance and assurance over the design and effectiveness of controls, helping to maintain a robust risk management framework and support informed decision-making at all levels. You will partner with technology, cyber security, risk, compliance, audit and business stakeholders to identify, assess and monitor risks across areas including cyber security, infrastructure, cloud services, third-party providers, data protection, resilience and technology change. Key responsibilities will include maintaining risk...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology and cyber risk across a complex organisation. This role will provide effective challenge, oversight and practical guidance to ensure that technology services, information assets and security processes are managed within an appropriate risk and control framework. You will work closely with senior stakeholders, technology teams, risk specialists and control owners to promote strong governance and a consistent approach to risk management. Key responsibilities will include maintaining and enhancing cyber and technology risk frameworks, policies, standards and control libraries; identifying, assessing and monitoring...

Learn more

Service Delivery Analyst (Cloud Security)

Added 20/08/2026

We are seeking a dedicated Service Delivery Analyst with expertise in Cloud Security to join our dynamic team. The successful candidate will be responsible for ensuring the effective delivery and management of cloud security services. Key duties will include monitoring cloud security performance, conducting risk assessments, and implementing best practices to safeguard cloud environments. You will collaborate closely with cross-functional teams to enhance security protocols and provide technical guidance on cloud security solutions. In this role, you will also be tasked with maintaining compliance with industry standards and regulations while analyzing security incidents to identify trends and areas for improvement....

Learn more

Cyber Compliance Specialist

Added 14/10/2026

We are seeking a Cyber Compliance Specialist to support the development, implementation and continuous improvement of cybersecurity compliance activities across the organisation. The successful candidate will help ensure that security controls, policies and procedures align with applicable laws, regulations, industry standards and internal requirements. This role will work closely with technology, risk, legal, audit and business teams to promote a consistent, practical and risk-based approach to cybersecurity governance. Key responsibilities will include maintaining compliance registers, control frameworks, policies, standards and supporting documentation; coordinating internal and external audits; gathering evidence and tracking remediation actions; and monitoring changes in legislation, regulatory expectations...

Learn more

Head of Cyber Security Renewables & Thermal

Added 25/09/2026

We are seeking an experienced Head of Cyber Security Renewables & Thermal to lead the cyber security strategy across a diverse portfolio of renewable energy and thermal generation assets. This senior leadership role will be responsible for protecting operational technology, information systems, and critical infrastructure across the full asset lifecycle, from project development and construction through to commissioning and operations. You will establish clear security standards, governance frameworks, and risk-based priorities aligned with regulatory obligations, industry best practice, and business objectives. You will lead a specialist cyber security function and work closely with engineering, operations, technology, risk, compliance, procurement, and...

Learn more

Cyber Compliance & Assurance Manager

Added 23/09/2026

We are seeking a Cyber Compliance & Assurance Manager to lead the development, implementation and continuous improvement of cyber security governance, risk and compliance activities. This role will help ensure that information systems, technology services and operational processes meet relevant regulatory, contractual and industry requirements. You will work closely with technology, risk, audit, legal and business stakeholders to strengthen cyber resilience and provide clear, evidence-based assurance to senior leadership. Key responsibilities will include maintaining cyber security policies, standards and control frameworks; coordinating internal and external audits; managing compliance assessments and remediation plans; and monitoring risks, control effectiveness and emerging regulatory...

Learn more

Cyber Compliance & Assurance Manager

Added 23/09/2026

We are seeking a Cyber Compliance & Assurance Manager to lead the development, implementation and continuous improvement of cyber security compliance and assurance activities. This role will help ensure that information security controls, policies and processes remain effective, proportionate and aligned with regulatory obligations, industry standards and organisational risk appetite. You will be responsible for maintaining the cyber compliance framework, coordinating internal and external assurance reviews, and monitoring adherence to applicable requirements such as ISO 27001, NIST, CIS Controls and relevant data protection legislation. Key duties will include planning and delivering control assessments, identifying gaps, documenting risks and remediation actions,...

Learn more

Cyber Compliance & Assurance Manager

Added 23/09/2026

We are seeking a Cyber Compliance & Assurance Manager to lead the development, implementation and continuous improvement of cyber security governance, risk and compliance activities. This role will help ensure that information security controls, policies and practices are aligned with relevant legislation, regulatory obligations, industry standards and organisational objectives. You will work closely with technology, risk, audit, legal and operational teams to strengthen cyber resilience and provide confidence in the effectiveness of security arrangements. Key responsibilities will include managing cyber security compliance frameworks; coordinating internal and external assurance reviews; maintaining control libraries, risk registers and compliance documentation; and monitoring remediation...

Learn more

Cyber Compliance & Assurance Manager

Added 23/09/2026

We are seeking a Cyber Compliance & Assurance Manager to lead the development, implementation and continuous improvement of cyber security governance, risk and compliance activities. The successful candidate will help ensure that technology, information and business processes meet relevant regulatory, contractual and industry requirements, while supporting a strong culture of security and accountability across the organisation. Key responsibilities will include maintaining cyber security policies, standards, control frameworks and assurance plans; coordinating internal and external audits; and assessing the effectiveness of technical and procedural controls. You will manage risk assessments, track remediation activity and provide clear reporting on compliance status, control...

Learn more

Cyber Compliance & Assurance Manager

Added 23/09/2026

We are seeking an experienced Cyber Compliance & Assurance Manager to lead the development, implementation and continuous improvement of cyber security compliance and assurance activities. This role will help ensure that information security controls, policies and processes remain effective, proportionate and aligned with relevant legislation, regulatory expectations, industry standards and organisational risk appetite. You will manage the cyber assurance framework, coordinating control assessments, internal reviews, independent audits and evidence-gathering activities across technology and business functions. Responsibilities will include maintaining compliance registers and risk documentation, tracking remediation plans, challenging control owners where appropriate, and producing clear reports for senior stakeholders and...

Learn more

Cyber Security Supply Chain Specialist

Added 08/09/2026

We are seeking a Cyber Security Supply Chain Specialist to strengthen the security and resilience of third-party relationships, suppliers, and technology partners. In this role, you will assess cyber security risks across the supply chain, support the implementation of appropriate controls, and help ensure that suppliers meet contractual, regulatory, and internal security requirements. You will work closely with procurement, legal, technology, risk, and operational teams to embed security throughout the supplier lifecycle, from initial due diligence and onboarding through to ongoing monitoring, renewal, and offboarding. Your responsibilities will include conducting supplier security assessments, reviewing security questionnaires and independent assurance reports,...

Learn more

Cyber Security Supply Chain Specialist

Added 04/09/2026

We are seeking a Cyber Security Supply Chain Specialist to strengthen the security, resilience and compliance of third-party relationships across the organisation. In this role, you will assess and manage cyber security risks associated with suppliers, contractors, technology partners and outsourced services throughout the supplier lifecycle. You will work closely with procurement, legal, technology, risk and operational teams to ensure security requirements are embedded from initial sourcing and contract negotiation through to onboarding, ongoing monitoring and offboarding. Your responsibilities will include conducting supplier security assessments, reviewing security questionnaires and independent assurance reports, identifying control gaps, and recommending proportionate remediation plans....

Learn more

Cyber Security Supply Chain Specialist

Added 04/09/2026

We are seeking a Cyber Security Supply Chain Specialist to strengthen the security and resilience of third-party relationships, suppliers, and technology service providers. In this role, you will assess cyber security risks across the supply chain, support the implementation of effective controls, and help ensure that external partners meet relevant security, privacy, and regulatory requirements. You will work closely with procurement, legal, technology, risk, compliance, and operational teams to embed security throughout the supplier lifecycle. Your responsibilities will include conducting supplier security assessments, reviewing assurance documentation, identifying control gaps, and recommending proportionate remediation actions. You will maintain accurate records of...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.