Cyber Security Risk & Governance Specialist

Aviva; City Of London; Hybrid; GBP 74,000 - 101,000; Full time

Benefits offered by this job

Flexible working

Hybrid/Smart working

Job summary

Aviva is seeking a Security Specialist on a 6-month inside IR35 contract to provide expert cyber security governance, risk management, and project delivery support. You will guide stakeholders, review designs, and help embed security across programmes.

You will work with internal teams and external partners to ensure secure outcomes, produce risk dashboards, and deliver security awareness materials. Adaptability and clear communication are essential.

Qualifications

• Experience in cyber security, information security, or risk management in complex enterprise environments.
• Strong understanding of governance, assurance, and risk management frameworks.
• Ability to review designs from a security perspective and identify vulnerabilities.
• Experience creating security reports, metrics, and awareness materials.
• Excellent written and verbal communication with senior stakeholders.

Responsibilities

• Support security risk management decisions across projects by identifying cyber risks and suggesting controls.
• Review technical designs to identify security gaps and vulnerabilities.
• Provide guidance on Aviva security processes, including testing and assurance activities.
• Deliver governance framework consultancy, including Security Fundamentals and TPISA processes.
• Embed security requirements across project lifecycles from inception to delivery.
• Produce security risk dashboards and remediation metrics for leadership.
• Create security awareness and training materials to improve security culture.
• Engage with internal teams, suppliers, and partners to promote security practices.
• Document findings with remediation plans or risk acceptances.
• Articulate cyber risks and business impacts clearly to stakeholders.

Skills

Cyber governance

Risk management

Security risk assessment

Stakeholder engagement

Security controls

Penetration testing

Threat modelling

Security standards

Reporting

Job description

Aviva is seeking a Security Specialist on a 6-month inside IR35 contract to provide expert cyber security governance, risk management, and project delivery support. You will guide stakeholders, review designs, and help embed security across programmes.

You will work with internal teams and external partners to ensure secure outcomes, produce risk dashboards, and deliver security awareness materials. Adaptability and clear communication are essential.