Cybersecurity Risk & Governance Analyst

Euroclear; United Kingdom; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading company in financial services is seeking a cybersecurity professional to join their Cybersecurity Risk and Governance team. The role involves assessing risks, ensuring compliance, and collaborating with various IT teams to implement security controls. Ideal candidates will have significant experience in cybersecurity, familiarity with frameworks, and relevant certifications.

Qualifications

• 4-6 years' experience in cybersecurity with focus on IT risk or governance.
• Fluent in English with a team-oriented mindset.
• Recognized certifications (CISSP, CISM, CRISC, ISO 27005) are a plus.

Responsibilities

• Support the delivery of security risk assessments on applications and infrastructure.
• Assist in translating security requirements into actionable controls across projects.
• Coordinate periodic security reviews and recertification activities.

Skills

Cybersecurity frameworks (ISO 27001, NIST, DORA)

Risk assessments

Vulnerability management

Documentation skills

Communication skills

Education

Bachelor’s or master’s degree in IT, Computer Science, or related field

Tools

ServiceNow

Excel

Job description

As part of Euroclear’s Cybersecurity Risk and Governance team, you will contribute to the secure development and maintenance of critical infrastructure. You’ll focus on risk assessments, compliance evaluations, and supporting teams in embedding cybersecurity controls across IT projects and services.

Responsibilities

• Support the delivery of security risk assessments on applications and infrastructure
• Assist in translating security requirements into actionable controls across projects
• Contribute to policy compliance checks and coordination of remediation actions
• Assist in maintaining the Technical Security Baselines and security control documentation
• Coordinate periodic security reviews and recertification activities
• Provide support to the Security Exception Review Board (SERB) and prepare documentation
• Collaborate with internal stakeholders (IT, architects, project leads, risk teams)

Required Expertise

• 4–6 years’ experience in cybersecurity, with a focus on IT risk or governance
• Solid understanding of cybersecurity frameworks (ISO 27001, NIST, DORA)
• Familiarity with identity/access management, secure software development, vulnerability management
• Experience with tools such as ServiceNow, Excel, and basic security testing platforms
• Strong organizational, communication, and documentation skills
• Bachelor’s or master’s degree in IT, Computer Science, or related field
• Fluent in English, team-oriented mindset
• Recognized certifications (CISSP, CISM, CRISC, ISO 27005) are a plus