Cyber Governance & Risk Analyst

Reference: 030histnsou3je6dx11f

We are seeking a Cyber Governance & Risk Analyst to support the development, operation and continuous improvement of cyber security governance and risk management across the organisation. This role will help ensure that information security risks are identified, assessed and managed effectively, while supporting compliance with relevant policies, standards and regulatory requirements.

You will maintain cyber security risk registers, coordinate risk assessments and monitor the progress of remediation activities. Working with colleagues across technology, operational teams and business functions, you will provide practical advice on risk treatment, control effectiveness and security obligations. You will also support the preparation of risk reports, management information and governance papers for senior stakeholders and relevant committees.

Key responsibilities will include reviewing and updating security policies, standards and procedures; supporting internal and external audits; tracking security exceptions and waivers; and helping to assess the cyber security implications of new projects, suppliers and technology changes. You will contribute to assurance activities, control testing and evidence gathering, ensuring that actions are clearly documented and completed within agreed timescales. The role may also involve supporting incident reviews and lessons-learned activities where governance or control improvements are identified.

The successful candidate will have experience in cyber security governance, information security, technology risk or a related discipline. You will be confident interpreting security frameworks and applying them in a practical business environment, with knowledge of standards such as ISO 27001, NIST or CIS Controls. Experience of risk assessment, audit support, policy management and reporting to stakeholders is desirable.

You should have strong analytical and organisational skills, excellent written and verbal communication, and the ability to work collaboratively with both technical and non-technical colleagues. Professional qualifications such as CISA, CRISC, CISSP, ISO 27001 or equivalent experience would be advantageous. Above all, you will demonstrate sound judgement, attention to detail and a proactive approach to improving cyber resilience.

COMPETITIVE SALARY
Added 23/10/2026
Reference: 030histnsou3je6dx11f

Cyber Governance & Risk Analyst

London, England, United Kingdom Contract Risk Analyst

Other similar jobs

Security Technical Analyst

Added 23/10/2026

We are seeking a Security Technical Analyst to support the protection, monitoring and continuous improvement of a complex technology environment. This role will suit an analytical and technically minded security professional who can investigate threats, assess vulnerabilities and work collaboratively with colleagues across technology and business teams. You will monitor security alerts and events, investigate suspected incidents and contribute to effective containment, eradication and recovery activities. Responsibilities will include analysing logs and security data, identifying indicators of compromise, supporting incident response investigations and documenting findings clearly. You will also help maintain security monitoring rules, improve detection capabilities and ensure that...

Learn more

IT Security Governance, Risk & Controls Analyst

Added 22/09/2026

We are seeking an IT Security Governance, Risk & Controls Analyst to support the development, operation and continuous improvement of information security governance and risk management processes. In this role, you will help ensure that technology environments, business processes and third-party services are aligned with internal policies, regulatory expectations and recognised security frameworks. You will work closely with technology, risk, compliance, audit and business stakeholders to identify security risks, assess control effectiveness and support practical remediation plans. Key responsibilities will include maintaining security policies, standards, procedures and control frameworks; coordinating periodic risk and control assessments; documenting risks, findings, action plans...

Learn more

Director of Cyber Risk & Governance

Added 08/10/2026

We are seeking an experienced Director of Cyber Risk & Governance to lead the development and delivery of an enterprise-wide cyber risk and governance framework. This senior leadership role will provide strategic direction on cybersecurity risk management, regulatory compliance, policy, control assurance and security governance across a complex organisation. You will work closely with executive stakeholders, technology leaders, risk teams and business functions to strengthen cyber resilience and ensure that security risks are understood, managed and reported effectively. Key responsibilities will include setting the cyber risk and governance strategy; maintaining policies, standards and control frameworks; overseeing risk identification, assessment, treatment...

Learn more

Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer

Added 17/09/2026

We are seeking a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to strengthen enterprise-wide security governance and support the continuous improvement of cyber risk management practices. This role will provide expert guidance across security frameworks, policies, controls and assurance activities, helping to ensure that technology, business processes and third-party services meet regulatory, contractual and organisational requirements. Key responsibilities include developing, maintaining and reviewing information security policies, standards and procedures; conducting risk assessments and control reviews; supporting audit and compliance programmes; and tracking remediation activities through to completion. You will coordinate evidence gathering, prepare clear reports for senior stakeholders,...

Learn more

Cyber Security Governance & Risk Management Principal

Added 01/09/2026

We are seeking an experienced Cyber Security Governance & Risk Management Principal to lead the development, implementation and continual improvement of enterprise-wide cyber security governance and risk management practices. This senior role will provide strategic direction on security policies, standards, frameworks and controls, ensuring they support business objectives, regulatory obligations and evolving threat landscapes. You will act as a trusted adviser to senior stakeholders, translating complex cyber security risks into clear business impacts, priorities and practical remediation plans. Key responsibilities include maintaining the cyber security governance framework; overseeing risk identification, assessment, treatment and acceptance processes; and reporting risk exposure, control...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with cybersecurity strategy, governance, risk and compliance. You will help organisations understand their cyber risk, strengthen their security posture and develop practical, sustainable approaches to managing technology and information security. Working as part of a collaborative consulting team, you will engage with senior stakeholders, translate business objectives into security priorities and provide clear, commercially focused advice. Your responsibilities will include leading and contributing to cybersecurity assessments, maturity reviews, risk and control evaluations, governance framework design and regulatory compliance initiatives. You will help develop policies, standards, procedures,...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking an experienced Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business priorities, assess current security maturity and develop practical, risk-based improvements that align with regulatory obligations, industry standards and organisational objectives. This is an opportunity to contribute to complex transformation programmes while helping organisations build sustainable and effective security practices. Your responsibilities will include leading or contributing to cybersecurity and GRC engagements, including security strategy development, operating model design, governance reviews, risk assessments, control evaluations, compliance assessments...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business and technology risks, assess current security maturity and design practical, proportionate improvements aligned to regulatory, industry and organisational requirements. This role will involve delivering high-quality advisory engagements across a varied client portfolio, with opportunities to contribute to large-scale transformation programmes and support the development of innovative cybersecurity solutions. Responsibilities will include leading or contributing to cybersecurity strategy reviews, governance assessments, risk and control evaluations, regulatory compliance reviews...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with the development and delivery of cybersecurity strategy, governance, risk and compliance programmes. You will work with senior stakeholders to understand business objectives, assess cyber maturity and translate regulatory, technological and operational requirements into practical, sustainable improvements. This role offers the opportunity to contribute to varied engagements across multiple industries, advising organisations as they strengthen their resilience in an increasingly complex threat landscape. Your responsibilities will include leading and delivering cybersecurity assessments, maturity reviews, risk assessments and compliance engagements; developing security strategies, policies, standards and governance...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will help ensure that security practices support business objectives while meeting regulatory, contractual and industry requirements. You will work closely with technology, legal, privacy, internal audit and operational teams to establish effective controls, promote security awareness and provide clear, practical advice on managing information and cyber risk. Key responsibilities will include maintaining and improving security policies, standards, procedures and control frameworks; coordinating enterprise security risk assessments; managing risk registers, treatment plans and exception...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking a Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance activities. This is a key role responsible for ensuring that security policies, controls and processes are aligned with business objectives, regulatory requirements and recognised industry standards. You will work closely with technology, legal, privacy, audit, operational and senior leadership teams to promote a strong, practical and risk-aware security culture. Your responsibilities will include developing, maintaining and communicating security policies, standards and procedures; managing the information security risk register; coordinating risk assessments and control reviews; and monitoring the...

Learn more

Assistant Manager - Information Security Risk and Governance

Added 13/10/2026

We are seeking an Assistant Manager – Information Security Risk and Governance to support the development, implementation and continuous improvement of information security risk management and governance practices. This role will help ensure that security risks are identified, assessed, monitored and reported effectively, while supporting compliance with relevant laws, regulations, policies and industry standards. The successful candidate will work with stakeholders across the organisation to promote a strong culture of information security and informed risk-based decision-making. Key responsibilities will include coordinating information security risk assessments, maintaining risk registers and tracking remediation plans through to completion. You will support the review...

Learn more

Governance, Risk & Compliance (GRC) Infosec Manager (PCI)

Added 13/10/2026

We are seeking an experienced Governance, Risk & Compliance (GRC) Infosec Manager with strong expertise in Payment Card Industry Data Security Standard (PCI DSS) compliance. This role will lead the development, implementation and continuous improvement of information security governance, risk management and compliance activities across a complex technology and business environment. You will act as a trusted adviser to senior stakeholders, helping to embed effective security practices while ensuring regulatory, contractual and industry requirements are consistently met. Key responsibilities will include owning the PCI DSS compliance programme, coordinating assessments and audits, maintaining policies, standards and control frameworks, and monitoring remediation...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will provide strategic direction while working closely with technology, legal, privacy, internal audit and business teams to ensure security controls support operational objectives and regulatory obligations. You will help promote a strong culture of security, accountability and continuous improvement across the organisation. Key responsibilities will include developing and maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; maintaining risk registers and overseeing mitigation plans; and coordinating internal...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.