Cyber Governance & Risk Analyst
We are seeking a Cyber Governance & Risk Analyst to support the development, operation and continuous improvement of cyber security governance and risk management across the organisation. This role will help ensure that information security risks are identified, assessed and managed effectively, while supporting compliance with relevant policies, standards and regulatory requirements.
You will maintain cyber security risk registers, coordinate risk assessments and monitor the progress of remediation activities. Working with colleagues across technology, operational teams and business functions, you will provide practical advice on risk treatment, control effectiveness and security obligations. You will also support the preparation of risk reports, management information and governance papers for senior stakeholders and relevant committees.
Key responsibilities will include reviewing and updating security policies, standards and procedures; supporting internal and external audits; tracking security exceptions and waivers; and helping to assess the cyber security implications of new projects, suppliers and technology changes. You will contribute to assurance activities, control testing and evidence gathering, ensuring that actions are clearly documented and completed within agreed timescales. The role may also involve supporting incident reviews and lessons-learned activities where governance or control improvements are identified.
The successful candidate will have experience in cyber security governance, information security, technology risk or a related discipline. You will be confident interpreting security frameworks and applying them in a practical business environment, with knowledge of standards such as ISO 27001, NIST or CIS Controls. Experience of risk assessment, audit support, policy management and reporting to stakeholders is desirable.
You should have strong analytical and organisational skills, excellent written and verbal communication, and the ability to work collaboratively with both technical and non-technical colleagues. Professional qualifications such as CISA, CRISC, CISSP, ISO 27001 or equivalent experience would be advantageous. Above all, you will demonstrate sound judgement, attention to detail and a proactive approach to improving cyber resilience.
Cyber Governance & Risk Analyst
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Security Architect
- IT Security Manager
- Identity Access Management IAM
- Data Protection
- Cyber Security Consultant
- SOC Analyst
- Risk Analyst
- Governance and Compliance
- Penetration Tester
LATEST JOBS
- SecOps Engineer
- Senior KIM Lead and Deputy Dat...
- Cyber Security Cloud Engineer
- Senior Risk Manager Technolog...
- Senior Security Architect - Pl...
- IGA Lead Engineer
- Lead Cybersecurity Architect
- Security Contract Delivery Pro...
- System Software Engineer, Tegr...
- Network & Security Delivery Te...
- Cyber Threat Intelligence Anal...
- Senior Identity & Access Manag...