Cyber Assurance & Risk Analyst

Ad Warrior Ltd; Greater London; On-site; GBP 43,000 - 45,000; Full time

Benefits offered by this job

25 days annual leave

Company Pension 7-12%

Enhanced parental benefits

IWM4me health and lifestyle benefits

Free sanitary products

Retail discounts

Free entry to IWM Air Shows

Job summary

Imperial War Museums is seeking a Cyber Assurance & Risk Analyst to strengthen cyber resilience and ensure compliance with government and industry security standards. You’ll embed secure-by-design principles across projects and manage cyber risks throughout the supplier landscape.

You’ll lead governance activities, oversee GovAssure and Cyber Essentials programs, and produce reports for boards. This permanent role offers a London base, competitive salary, and a strong benefits package.

Qualifications

• Experience of cyber security governance, assurance, compliance or risk management.
• Knowledge of cyber security frameworks and standards such as Cyber Essentials, ISO 27001 or equivalent.
• Experience managing compliance evidence, audits or regulatory submissions.
• Experience with supplier/third-party cyber risk assessment and management.
• Strong analytical skills to communicate findings to stakeholders.

Responsibilities

• Coordinate Cyber Essentials certification, evidence gathering, submissions and remediation tracking.
• Lead GovAssure submissions with control mapping and stakeholder engagement.
• Manage compliance against cyber security standards and maintain assurance documentation.
• Embed secure-by-design principles into technology and digital projects from initiation to delivery.
• Produce assurance and cyber risk reports for governance boards and senior stakeholders.
• Support cyber governance activities and maintenance of cyber risk records.

Skills

Cyber governance

Risk management

Supplier risk

Regulatory submissions

Analytical reporting

Job description

Overview

Ref: 413773

Salary: £42,500 to £45,000 per annum

Location: United Kingdom -England -Greater London -London

Type: Permanent

Posted: 20 August 2026

Closing date: 08 Sep 2026 22:59

Cyber Assurance & Risk Analyst

Location: IWM London

Salary: £42,500 to £45,000 per annum

Vacancy Type: Permanent, Full Time (36hours per week)

Closing Date: 8th of September 2026

At Imperial War Museums, we're driven by a shared purpose: helping people understand conflict and its impact on people's lives, from the First World War through to the present day. Our collections contain millions of items, stories and digital assets that preserve some of the most important moments in modern history.

You'll join a collaborative team who work together to protect and make these collections accessible for future generations. It's a unique opportunity to combine cyber security expertise with meaningful work that supports one of the world's leading museums of conflict.

Why This Role Matters

Cyber security plays a vital role in protecting IWM's systems, services and information assets from an evolving threat landscape. As Cyber Assurance & Risk Analyst, you'll help strengthen the organisation's cyber resilience by ensuring compliance with government and industry security standards, embedding secure-by-design principles into projects and managing cyber risks across our supplier landscape.

By delivering key assurance activities, you'll help improve organisational cyber capability and ensure IWM continues to safeguard the services relied upon by colleagues, visitors, researchers and stakeholders.

What You’ll Be Doing

• Coordinate and manage IWM's Cyber Essentials certification, including evidence gathering, submission management and remediation tracking.
• Lead GovAssure submissions through control mapping, evidence collation and stakeholder engagement.
• Manage compliance against Civil Aviation Authority (CAA) cyber security requirements and other relevant standards.
• Maintain assurance documentation and support continuous compliance against recognised cyber security frameworks.
• Embed secure-by-design principles into technology and digital projects from initiation through to delivery.
• Review proposed solutions and provide assurance that appropriate security controls are implemented before go-live.
• Own and operate IWM's third-party cyber risk management platform, supporting supplier onboarding, assessments and ongoing monitoring.
• Identify, assess, manage and elevate cyber risks across the supply chain, tracking remediation activities where required.
• Produce assurance, compliance and cyber risk reports for governance boards and senior stakeholders.
• Support cyber governance activities, risk management processes and the maintenance of accurate cyber risk records.
• Contribute to the development of cyber security policies, standards, controls and continuous improvement initiatives.
• Provide guidance on cyber compliance matters and work collaboratively with colleagues, suppliers and external partners to support assurance objectives.
• Support financial administration activities, including purchase orders, invoice processing and departmental administration where required.

What We’re Looking For

We'd love to hear from you if you have:

• Experience of cyber security governance, assurance, compliance or risk management activities.
• Knowledge of recognised cyber security frameworks and standards such as Cyber Essentials, NCSC guidance, ISO 27001 or equivalent.
• Experience managing compliance evidence, audit activities or regulatory submissions.
• Experience of supplier or third-party cyber risk assessment and management processes.
• Strong analytical skills with the ability to identify risks and communicate findings clearly to a range of stakeholders.
• Experience producing reports, dashboards or management information for governance forums and senior audiences.

Benefits

• Annual Leave: You'll have 25 days of annual leave, with public holidays on top. After 3 years, this increases to 27 days and after 5 years, you'll get 30 days
• Company Group Pension Plan: Includes competitive employer contributions to your pension starting at 7% to a maximum of 12%.
• Enhanced Maternity and Paternity Benefits: Celebrate life's milestones with confidence, knowing that our policies support growing families.
• IWM4me: Tailor your benefits to your unique needs through IWM4me. Access health, protection, and lifestyle benefits at corporate rates, ensuring your holistic well-being.
• Free Sanitary Products: We prioritise your comfort by providing free sanitary products across all our sites.
• Retail Discounts: 25% off IWM Cafes, 20% discount in on-site shops, Benefits hub offering retail discounts to several high street shops and MyActive discounts for health and wellbeing based retail discounts
• Free Entry to IWM Air Shows: Witness the thrill of vintage aircraft at our air shows.