Cyber Security Risk Analyst

Expert Employment; Crawley; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading cybersecurity firm in the United Kingdom seeks a Cyber Security Risk Analyst to drive their Cyber Risk Management program. This position requires over five years of experience in integrating security features into business processes and strong communication skills. The role includes collaboration with stakeholders to identify and manage IT risks, ensuring effective risk treatment plans are instituted. Candidates with relevant professional certifications will be preferred.

Qualifications

• A self-driven individual with sound knowledge of business processes.
• Good understanding of security or IT technologies.
• Strong communication skills.

Responsibilities

• Correlate and analyze information from internal threat intelligence and incident management teams.
• Review reports such as HARC, Audit, Cyber exemptions.
• Utilize information for risk identification and assessment.
• Collaborate with digital teams for risk assessments.
• Ensure IRM requests and tickets are processed promptly.
• Work with the Cyber Risk Manager to design and implement improvements.

Skills

Over five years of experience integrating security into the business

Security risk management

Information processes

Product security

Business architecture

Strong communication skills

Education

Professional security management certifications such as CISSP, CRISC, CISM, CISA

Job description

The Cyber Security Risk Analyst is required to join an internal IT Cyber Governance group.

Help drive the Cyber Risk Management program by collaborating with stakeholders and Risk Owners to identify and report Cyber and IT Risks in the IRM Platform. Ensure effective Risk Treatment plans are defined and implemented to control and reduce risks.

This position requires a self-driven individual with sound knowledge of business processes, a good understanding of security or IT technologies, and strong communication skills.

This role offers an opportunity to make a significant impact across the company by participating in and driving a key Risk Management program.

Key Skills

• Over five years of experience integrating security into the business, security risk management, information processes, product security, or business architecture.
• Professional security management certifications such as CISSP, CRISC, CISM, CISA, or similar.

Role Responsibilities

• Correlate and analyze information from internal threat intelligence and incident management teams to identify threats, gaps, and untreated risks.
• Review reports such as HARC, Audit, Cyber exemptions, business impact analyses, and non-compliance issues.
• Utilize this information for risk identification and assessment.
• Collaborate with digital and IT teams to conduct business impact analyses and risk assessments.
• Ensure IRM requests and tickets are processed and resolved promptly.
• Work with the Cyber Risk Manager to design, implement, test, and deploy platform improvements and expansions.
• Ensure updates are made to the CSRM Program by owners to keep it on track and aligned with forecasts.