Cyber Security Specialist

Aviva; Slough; On-site; GBP 65,000 - 90,000; Full time

Job summary

Aviva is seeking a Security Specialist to join on a 6-month contract. The role focuses on security governance, risk management, and project delivery across complex programmes.

You will engage with technical and non-technical stakeholders, assess designs for security vulnerabilities, and guide adherence to Aviva security processes. They require strong communication skills, experience in security assurance, and the ability to deliver risk-based recommendations across multiple initiatives.

Qualifications

• Demonstrable experience in cyber security within complex enterprise environments.
• Strong understanding of governance, assurance and risk management frameworks.
• Experience reviewing designs from a security perspective.
• Knowledge of penetration testing processes, vulnerability management and security assessment methodologies.
• Experience supporting projects with pragmatic, risk-based security advice.
• Excellent stakeholder management and ability to communicate technical concepts to diverse audiences.
• Experience creating management reports, security metrics and awareness materials.
• Proven ability to manage multiple priorities in a fast-paced environment.

Responsibilities

• Support security risk decisions across projects by identifying risks and recommending controls.
• Review technical designs to identify security vulnerabilities and gaps.
• Provide guidance on Aviva security processes including testing and security assurance activities.
• Deliver consultancy on governance frameworks and security standards.
• Provide cyber security input across the project lifecycle to embed security requirements.
• Produce management information reports, dashboards, and risk remediation metrics.
• Create and deliver security awareness and training materials.
• Engage with internal teams, third-party suppliers, and business partners to promote security practices.
• Document, track, and manage security findings with remediation plans or risk acceptances.
• Develop concise materials articulating cyber security risks, options, and business impacts.

Skills

Cyber security

Security governance

Risk management

Project delivery

Stakeholder mgmt

Security assurance

Vulnerability assessment

Penetration testing

Security metrics

Communication

Job description

Job Title: Security Specialist

Duration 6 Months

Inside IR35

This is a contract opportunity for someone who is an experienced cyber security professional with a strong understanding of security governance, risk management, and project delivery. This role would suit someone who can quickly integrate into a complex organisation, provide expert security guidance to stakeholders, and proactively identify and manage cyber security risks across projects and business initiatives.

You’ll be confident working independently, engaging with technical and non-technical stakeholders, and influencing security-related decisions to ensure risks are appropriately managed and mitigated.

Key Responsibilities

• Support security risk management decisions across projects, programmes, and business change initiatives by identifying potential cyber security risks and recommending appropriate controls.
• Review and assess technical designs to identify security vulnerabilities, weaknesses, and compliance gaps.
• Provide expert guidance on Aviva security processes, including penetration testing, business impact assessments, and security assurance activities.
• Deliver consultancy and advice on security governance frameworks, including Security Fundamentals, TPISA processes, and related security standards.
• Provide cyber security input throughout the project lifecycle to ensure security requirements are embedded from inception through delivery.
• Produce management information reports, dashboards, and metrics that provide visibility of security risks and remediation activities.
• Create and deliver security awareness and training materials to improve security culture and promote best practices.
• Engage with internal teams, third-party suppliers, and business partners to encourage and maintain strong security practices.
• Ensure security findings are accurately documented, tracked, and managed, with appropriate remediation plans or risk acceptances in place.
• Develop concise and effective materials that clearly articulate cyber security risks, options, recommendations, and business impacts for stakeholders and leadership teams.

Skills and Experience

• Demonstrable experience in cyber security, information security, or security risk management roles within complex enterprise environments.
• Strong understanding of security governance, security assurance, and risk management frameworks.
• Experience reviewing technical solutions, architectures, and designs from a security perspective.
• Knowledge of penetration testing processes, vulnerability management, and security assessment methodologies.
• Experience supporting projects and change initiatives by providing pragmatic security advice and risk-based recommendations.
• Strong stakeholder management skills with the ability to communicate technical security concepts to both technical and non-technical audiences.
• Experience creating management reports, security metrics, presentations, and awareness materials.
• Proven ability to manage multiple priorities and deliver outcomes in a fast-paced environment.
• Experience working with third-party suppliers and managing security considerations within external partnerships.
• Excellent written and verbal communication skills, including the ability to present findings, recommendations, and risk assessments to senior stakeholders.

We’re inclusive and welcome everyone. We want applications from all backgrounds and experiences. Excited but not sure you tick every box? Even if you don't, we would still encourage you to apply. We also consider all forms of flexible working, including part-time and job shares.

We flex locations, hours and working patterns to suit our customers, business, and you. Most of our people are smart working, spending at least 50% of their time in our offices every week, combining the benefits of flexibility with time together with colleagues.