Contract Cyber Security Risk & Governance Advisor

Aviva; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Aviva is seeking an experienced cyber security professional to govern security risk management and drive project security delivery. The role involves advising stakeholders, embedding security across projects, and ensuring risk controls are applied consistently across a complex organisation.

You will review designs for vulnerabilities, provide guidance on security processes, and deliver insightful metrics and awareness initiatives to strengthen security culture.

Qualifications

• Demonstrable experience in cyber security, information security, or security risk management roles within complex enterprise environments.
• Strong understanding of security governance, assurance, and risk management frameworks.
• Experience reviewing technical solutions, architectures, and designs from a security perspective.
• Knowledge of penetration testing processes, vulnerability management, and security assessment methodologies.

Responsibilities

• Support security risk management decisions across projects by identifying cyber security risks and recommending controls.
• Review and assess technical designs to identify security vulnerabilities and compliance gaps.
• Provide expert guidance on Aviva security processes, including testing, impact assessments, and security assurance.
• Deliver consultancy on governance frameworks and related security standards.
• Provide cyber security input throughout the project lifecycle to embed security requirements from inception to delivery.
• Produce management information reports, dashboards, and metrics on security risks and remediation.
• Create and deliver security awareness and training materials to improve security culture.
• Engage with internal teams, third-party suppliers, and business partners to maintain strong security practices.
• Ensure security findings are documented, tracked, and remediated with appropriate plans or risk acceptances.
• Develop concise materials that articulate cyber security risks, options, recommendations, and business impacts.

Skills

Cyber security

Information security

Security risk management

Governance frameworks

Security assurance

Penetration testing

Vulnerability management

Security assessments

Stakeholder management

Security reporting

Job description

Aviva is seeking an experienced cyber security professional to govern security risk management and drive project security delivery. The role involves advising stakeholders, embedding security across projects, and ensuring risk controls are applied consistently across a complex organisation.

You will review designs for vulnerabilities, provide guidance on security processes, and deliver insightful metrics and awareness initiatives to strengthen security culture.