Cyber Governance & Risk Reporting Specialist

Prosource; Aberdeen City; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Company pension

Private medical insurance

Dental insurance

Group income protection

Cycle to Work scheme

Electric vehicle salary sacrifice

Job summary

Prosource is seeking a Cyber Governance Specialist to join its growing Cyber Security team in the UK. You will translate cyber strategy, policies, and standards into structured governance processes, supporting IT, OT, and supply chain environments.

You will guide security reviews, track remediation, monitor KPIs, and deliver senior leadership reporting. You will help maintain action and evidence registers, contribute to CAF self-assessment, and refine governance templates as the programme

Qualifications

• Demonstrable experience operating cyber or information security governance processes.
• Experience conducting security reviews or assessments of projects and change against defined policies and standards.
• Working knowledge of recognised security frameworks: NCSC CAF, ISO/IEC 27001, or NIST CSF.
• Experience producing governance reporting.
• Strong communication and stakeholder management skills.
• Ability to work collaboratively across teams.
• Strong analytical and problem-solving skills.
• Ability to manage competing priorities effectively.
• Commitment to continuous improvement and organisational values.
• Experience within an Operator of Essential Services or organisation subject to the NIS Regulations.
• Experience administering GRC tooling.

Responsibilities

• Operate the governance processes and calendar — review gates, reporting cycles, forum cadences, and evidence deadlines — that give effect to the Cyber Security Standard and its supporting policy suite.
• Conduct cyber security reviews of IT and business projects at defined lifecycle gates in line with agreed process and approach, agreeing proportionate remediation actions with project owners and tracking them to closure.
• Maintain the central registers of security actions and policy exceptions, validating evidence of completion to a standard suitable for internal audit and regulatory inspection.
• Support cyber security risk management processes, including risk register administration and associated reporting.
• Collect, validate, and trend cyber security KPIs and KRIs, and produce recurring report packs for the security steering group, executive risk committee, and project and portfolio boards.
• Support the Assurance function in collating evidence for CAF self-assessment and regulatory inspection preparation; ownership of regulatory evidence and regulator engagement remains with Assurance.
• Operate the supplier cyber assessment procedure and maintain the supplier assurance record.
• Contribute to the selection and administration of GRC tooling, and refine governance processes and templates as the programme matures.

Skills

Governance processes

Stakeholder management

Security reporting

Policy & standards understanding

Governance metrics

Tools

GRC tooling

Risk management tools

Job description

Prosource is seeking a Cyber Governance Specialist to join its growing Cyber Security team in the UK. You will translate cyber strategy, policies, and standards into structured governance processes, supporting IT, OT, and supply chain environments.

You will guide security reviews, track remediation, monitor KPIs, and deliver senior leadership reporting. You will help maintain action and evidence registers, contribute to CAF self-assessment, and refine governance templates as the programme