Defence Digital Cyber Risk Management Analyst

Ministry of Defence; London; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A government department in London seeks a Cyber Risk Management Analyst to manage and maintain the Defence Enterprise Cyber Risk portfolio. The role involves analyzing cyber risks, supporting briefings for senior leaders, and conducting cybersecurity assessments. Candidates should possess strong analytical skills and experience in risk management. Remote working options are available for successful candidates.

Qualifications

• Experience in cyber risk management and assessment.
• Ability to work independently and collaboratively.
• Strong understanding of cybersecurity policies and frameworks.

Responsibilities

• Monitor Defence cyber threats and mitigation effectiveness.
• Develop and maintain understanding of cyber risks across Defence.
• Provide tailored advice ensuring consistency with security frameworks.

Skills

Risk assessment

Cybersecurity frameworks

Analytical skills

Stakeholder engagement

Job description

As Cyber Risk Management Analyst, you’ll be responsible for assisting with the management and maintenance of the Defence Enterprise Cyber Risk portfolio, being pivotal in the collation and assurance of Defence’s cyber risks. You’ll support maturing the understanding of the cyber risks the Defence cyber community are carrying, including those that are cross cutting, helping to inform on cyber security and resilience failure.

You’ll support upward reporting and briefings through analysis, regarding cyber activity and resulting risk assessments, to enable senior leaders (all the way up to the Defence Board) to make informed investment decisions.

This position sits within the Cyber Risk Management team, a small, highly specialised team within Governance, Risk and Compliance (GRC) in our Cyber, Defence and Risk (CyDR) directorate. We develop and maintain a wider understanding of cyber risks, control environment and capabilities, across Defence’s complex and challenging environments and identify possible gaps and issues, to inform the Defence Enterprise Chief Information Security Officer (CISO) and key defence programmes on how to mitigate these and understand how the resulting activity will help to reduce risks.

Responsibilities

Work with risk owners and key stakeholders to develop and maintain the Defence CISO’s wider understanding of the cyber risks and capabilities, across Defence’s complex and challenging environments.
Monitor Defence cyber threat, vulnerability and risk assessment and mitigation effectiveness, including key Defensive cyber and dependent programmes, providing analysis and insight to support upward reporting and escalation.
Undertake collaborative and independent cyber security related risk assessments and other risk management and assurance activities, including the provision of tailored advice, ensuring consistency with applicable cyber security frameworks, policy standards and guidance.
Provide a secretariat function for the senior cyber management board.
Potential opportunity for line management responsibility.

Remote working within this role is something that can be discussed at interview stages or with your future line manager if you are found successful.

Please note, candidates will be redirected to the Civil Service Jobs website where you will need to submit your application form. Please note the closing date above is incorrect and cannot be amended so please check the closing date on Civil Service Jobs and allow enough time to submit your application form.