Cyber Security Risk & Controls Specialist

Legal And General Group; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading UK financial services group is seeking a Cyber Security Risk and Controls Analyst. The role involves supporting risk and control activities within the cyber security function, ensuring effective identification and management of risks related to technology and cyber security. Candidates should have familiarity with security frameworks, experience in a regulated environment, and strong communication skills. The position offers a comprehensive benefits package and promotes a flexible working culture.

Benefits

Performance-related bonus plan

Generous pension contribution

Life assurance

Healthcare Plan

At least 25 days holiday

Competitive family leave

Electric car hire scheme

Discounts on products and services

Qualifications

• Familiarity with security frameworks such as NIST, COBIT, ISO27001/2.
• Understanding of FCA/PRA regulations and related compliance.
• Ability to work with cyber security stakeholders and product teams.
• Experience in a regulated environment focusing on cyber security risk.
• Qualifications like CISM or CISSP are advantageous.

Responsibilities

• Maintain cyber security controls for compliance and effectiveness.
• Support management of cyber security issues and audit actions.
• Conduct risk and control self-assessments for control weaknesses.
• Assist in applying policies across global technology teams.
• Test cyber security controls for audits ensuring completion.
• Facilitate understanding of risk management processes.
• Stay updated on current cyber security threats and best practices.
• Support IT initiatives to enhance customer experience.

Skills

Familiarity with security frameworks

Understanding of regulatory requirements

Interacting with cyber security stakeholders

Experience in cyber security risk

Experience testing security controls

Cyber security qualifications (CISM or CISSP)

Job description

A leading UK financial services group is seeking a Cyber Security Risk and Controls Analyst. The role involves supporting risk and control activities within the cyber security function, ensuring effective identification and management of risks related to technology and cyber security. Candidates should have familiarity with security frameworks, experience in a regulated environment, and strong communication skills. The position offers a comprehensive benefits package and promotes a flexible working culture.