Cybersecurity Risk & Compliance Specialist

Teneolinkedin; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Private medical insurance

Pension

Flexible working

Laptop & phone provided

Salary review annually

Learning & development

Job summary

Teneo is seeking a Cybersecurity Risk and Compliance Senior Associate to translate cybersecurity strategy into measurable outcomes within the Information Security and Risk team in London. You will help strengthen assurance, improve risk visibility and support delivery of priority security initiatives across our global business.

Collaboration across Security, IT, Legal, Procurement and the wider business is essential to keep controls effective and audit-ready, while driving remediation and

Qualifications

• Relevant experience in technology risk, cybersecurity governance, compliance, audit support, third-party risk or a related field.
• Working knowledge of control-based assurance and common frameworks such as ISO 27001, SOC 2 or Cyber Essentials; familiarity with NIST is beneficial.
• Strong analytical and organisational skills, with the ability to manage evidence, actions and deadlines across several workstreams.
• Clear written and verbal communication skills, with confidence working collaboratively across technical and business teams.
• A practical, detail-oriented approach and the curiosity to identify improvements rather than simply administer existing processes.

Responsibilities

• Security assurance, compliance and audit readiness: Support risk and controls assessments, including control walkthroughs, evidence gathering, gap analysis and remediation tracking.
• Security assurance, compliance and audit readiness: Coordinate evidence and actions for external audits and compliance assessments, including ISO 27001, SOC 2 and Cyber Essentials.
• Security assurance, compliance and audit readiness: Maintain clear, reusable control documentation and audit evidence so assurance activity is efficient, consistent and audit-ready.
• Security assurance, compliance and audit readiness: Track risk-treatment actions, owners and deadlines, validate closure evidence and elevate delivery concerns when needed.
• Governance, reporting and insight: Help create and maintain security policies, standards, procedures and control descriptions, supporting review, approval and adoption across the business.
• Governance, reporting and insight: Maintain security metrics, dashboards and action trackers covering audit findings, remediation, risk exceptions, third-party risk and other priority indicators.
• Governance, reporting and insight: Bring structure to complex inputs and turn evidence, data and stakeholder feedback into clear reporting and practical recommendations.
• Third-party risk and client assurance: Support client security due diligence by coordinating accurate responses, evidence packs and control narratives with relevant internal teams.
• Third-party risk and client assurance: Assist with third-party risk assessments, including scoping, evidence review, findings, remediation and follow-up.
• Third-party risk and client assurance: Help improve TPRM playbooks, templates and reporting, and support the integration of risk review into vendor onboarding, renewal and change processes.
• Cybersecurity programme and operational risk support: Support delivery of Teneo's cybersecurity roadmap by tracking initiatives, dependencies, risks and stakeholder actions.
• Cybersecurity programme and operational risk support: Identify recurring control weaknesses and operational pain points, and help develop practical improvements through clearer ownership, better measurement and appropriate automation.
• Cybersecurity programme and operational risk support: Contribute to governance and assurance activities supporting vulnerability management, patching, access reviews, secure configuration and logging controls.

Skills

Analytical thinking

Communication skills

Detail-oriented

Cross-functional collaboration

Job description

Teneo is seeking a Cybersecurity Risk and Compliance Senior Associate to translate cybersecurity strategy into measurable outcomes within the Information Security and Risk team in London. You will help strengthen assurance, improve risk visibility and support delivery of priority security initiatives across our global business.

Collaboration across Security, IT, Legal, Procurement and the wider business is essential to keep controls effective and audit-ready, while driving remediation and