Cyber Governance Analyst

Fruition Group; Remote; GBP 40,000 - 50,000; Full time

Job summary

A growing organisation in cybersecurity is seeking a Cyber Governance Analyst to maintain security controls and implement governance frameworks. This role involves collaboration with IT and legal teams to ensure compliance with cybersecurity regulations. The ideal candidate has over three years of experience with NIST compliance frameworks and is skilled in risk assessment and communication. This position offers remote working options and competitive benefits, making it an excellent opportunity for professionals in the field.

Benefits

Competitive salary and bonus scheme

Healthcare and wellbeing initiatives

Opportunities for professional development and certification

Remote and hybrid working options

Qualifications

• Over three years experience implementing NIST compliance frameworks.
• Proven experience supporting governance, monitoring controls, and managing risks.
• Strong organisational and communication skills.

Responsibilities

• Act as a first line of defence, maintaining security controls.
• Collaborate with IT, legal, and policy teams to ensure compliance.
• Conduct risk assessments and communicate implications to stakeholders.

Skills

Working knowledge of cybersecurity frameworks (NIST and CIS)

Organisational skills

Communication skills

Ability to assess vulnerabilities

Collaboration with multidisciplinary teams

Job description

Job Role

Cyber Governance Analyst

Location

UK Remote with occasional travel (MUST have divers' licence and access to a vehicle)

Salary

Up to £50,000 + package

Why Apply?

This is an interesting opportunity to work for a stable and growing organisation in a vital role at the forefront of cyber security governance. Your role will be working with the group to implement security governance frameworks and liaise across the subsidiaries IT teams to ensure compliance to specific security frameworks.

Cyber Governance Analyst Responsibilities

With day-to-day reporting to the Group Information Security Officer (GISO), you will act as a first line of defence, maintaining the security controls in line with company policies and standards and would act as the liaison across subsidiary cyber services. You will also ensure that proactive risk management with good cyber control processes and audit requests are in place.

• Collaborating with IT, legal, and policy teams to create and ensure compliance with industry regulations and company-specific policies.
• Reviewing system and data architectures alongside engineering teams and architects, recommending best practices.
• Assessing vulnerabilities, articulating their impact, and recommending controls and mitigations for current and future systems.
• Conducting risk assessments and effectively communicating security and risk implications to technical and non-technical stakeholders.
• Managing and supporting project stakeholder expectations with a flexible, pragmatic approach.

Cyber Governance Analyst Requirements

• Working knowledge of cybersecurity frameworks (NIST and CIS.)
• Over three years experience working with and implementing NIST compliance frameworks into organisations
• Proven experience in a similar role, supporting governance, monitoring controls, and managing risks.
• Ability to assess and articulate the impact of vulnerabilities and recommend mitigations.
• Leading on internal security audits.
• Skilled in collaborating with multidisciplinary teams and translating technical information for varied audiences.
• Strong organisational and communication skills, with a proactive and adaptable mindset.

What's in it for me?

This is an excellent opportunity to work across multiple subsidiaries, collaborating with diverse teams to build a secure and resilient environment. You'll gain exposure to cutting-edge security frameworks and best practices while influencing governance strategies at a high level.

Additional benefits

• Competitive salary and bonus scheme.
• Healthcare and wellbeing initiatives.
• Opportunities for professional development and certification.
• Remote and hybrid working options for enhanced flexibility.

Equal Opportunities Employer

We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.