Hybrid Cyber Security Analyst – Supplier Risk & Compliance

Kier Group; Rushden; Hybrid; GBP 40,000 - 65,000; Full time

Job summary

Kier Group is seeking a Cyber Security Analyst to join our IT Security team. The role supports supplier and project security compliance across our supply chain, with hybrid working options and travel to sites as required.

The Analyst will assess and validate alignment with contractual, regulatory and organisational security requirements, producing dashboards and reports for governance forums. Applicants should have experience in security governance and supplier risk management, and be eligible

Qualifications

• Experience in security governance, risk and compliance.
• Proven supplier assurance or third-party risk management experience.
• Knowledge of ISO 27001, Cyber Essentials Plus, Defence Cyber Certification, Secure by Design and supply chain risk management.

Responsibilities

• Review supplier security submissions and evidence against contractual and regulatory requirements.
• Challenge inadequate responses and work with suppliers to achieve remediation and compliance.
• Conduct security audits and verification activities to ensure controls are operating effectively.
• Assess security risks and support risk management throughout supplier and project lifecycles.
• Produce assurance dashboards and reports for management and governance forums.

Skills

Security governance

Third-party risk management

ISO 27001 knowledge

Job description

Kier Group is seeking a Cyber Security Analyst to join our IT Security team. The role supports supplier and project security compliance across our supply chain, with hybrid working options and travel to sites as required.

The Analyst will assess and validate alignment with contractual, regulatory and organisational security requirements, producing dashboards and reports for governance forums. Applicants should have experience in security governance and supplier risk management, and be eligible