Cyber Security Risk Analyst — Hybrid, Early Finish Friday

Nominet; Oxford; Hybrid; GBP 52,000 - 72,000; Full time

Benefits offered by this job

Early Finish Friday

34-hour working week with full-timepay

Bank holidays + extra 5 days

Bupa private healthcare

Pension scheme 7% match

Electric vehicle on-site charging

Rewards platform discounts

Medicash discounts

Annual company bonus

Job summary

Nominet is seeking a Cyber Security Risk Analyst to help understand and manage cyber and information security risk across our infrastructure, services, suppliers and data. You’ll identify risks, assess controls, and ensure treatment plans are in place, building a risk-aware culture with clear records and practical guidance.

You’ll collaborate with technology, operations, procurement and business teams, communicating findings clearly and supporting proportionate risk responses.

Qualifications

• Experience supporting, managing, implementing or auditing security risk, compliance or assurance activity.
• Ability to assess controls and risks, work with owners on practical actions, and maintain auditable records.
• Knowledge of information security standards or guidance (ISO 27001, NIST, CIS Controls, NCSC).

Responsibilities

• Assess security risks and controls across systems, projects, and suppliers using relevant standards.
• Identify control gaps and track risk treatment plans and remediation.
• Support supplier security assessments and ensure actions are completed.
• Maintain clear records of risks, controls and compliance obligations for stakeholders.
• Help improve Nominet’s security risk approach, policies and standards.

Skills

Risk management

Security assessment

ISO 27001

NIST

CIS Controls

NCSC guidance

Supplier risk

Incident response

Access management

Vulnerability mgmt

Audit records

Stakeholders

Job description

Nominet is seeking a Cyber Security Risk Analyst to help understand and manage cyber and information security risk across our infrastructure, services, suppliers and data. You’ll identify risks, assess controls, and ensure treatment plans are in place, building a risk-aware culture with clear records and practical guidance.

You’ll collaborate with technology, operations, procurement and business teams, communicating findings clearly and supporting proportionate risk responses.