Hybrid GRC & Cyber Risk Specialist

Janus Henderson; Greater London; Hybrid; GBP 80,000 - 83,000; Full time

Benefits offered by this job

Hybrid work environment

Job summary

Janus Henderson is seeking a cybersecurity leader in the United Kingdom with 3–5 years of information security experience. You will develop policies, oversee risk management, and ensure regulatory compliance across technology and business units in a hybrid work setting.

The role requires CISSP preference, deep knowledge of NIST/ISO 27001, cloud security, IAM, and Secure DevOps practices, with collaboration across Risk, Legal, Compliance, and IT teams.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or related field, or equivalent work experience.
• 3–5 years of professional information security experience.
• CISSP certification strongly preferred.
• Solid understanding of cybersecurity frameworks (NIST, ISO/IEC 27001) and compliance standards.
• Experience with financial services regulations (FCA, SEC, MAS, DORA).
• Proficient knowledge of network security principles (firewalls, IPS/IDP, TCP/IP, DHCP, DNS).
• Experience securing Windows, UNIX/Linux, and Mac operating systems with proper access control.
• Knowledge of cloud service models and deployment, with cloud security best practices.
• In-depth knowledge of IAM (SSO, MFA, RBAC).
• Understanding of Secure DevOps and CI/CD governance.

Responsibilities

• Develop and maintain cybersecurity policies and procedures.
• Ensure cybersecurity policies align with industry standards and regulatory requirements.
• Integrate security practices across technical and non-technical departments.
• Conduct regular risk assessments to identify vulnerabilities and threats.
• Collaborate on and oversee risk mitigation strategies.
• Monitor emerging threats and evolving technologies to refine risk protocols.
• Design and evaluate control metrics for security effectiveness.
• Embed cyber risk into risk registers and board-level reporting.
• Monitor compliance with internal policies, standards, and regulatory requirements.
• Engage with Technology, Legal, Compliance, and Internal Audit as required.
• Deliver detailed compliance reports to senior management.
• Monitor upcoming regulations and prepare compliance roadmaps.
• Support and enhance cybersecurity awareness training programs.
• Foster a company-wide culture of cybersecurity awareness.
• Keep current with trends to inform training content and security measures.
• Train wider tech teams on cybersecurity risk management.
• Participate in incident response and post-incident evaluations.
• Collaborate to strengthen defences against future incidents.
• Maintain clear communication with stakeholders at all levels.
• Provide expert guidance on cybersecurity best practices.
• Work with Technology and other departments to achieve security objectives.

Skills

Cybersecurity concepts

Regulatory knowledge

Network security

Cloud security

IAM (SSO, MFA, RBAC)

Secure DevOps & CI/CD

Incident response

Stakeholder communication

Education

Bachelor's in IT/Cybersecurity or related field

Tools

CI/CD

Cloud

DevOps

IAM

Linux

Network

Security

RBAC

Job description

Janus Henderson is seeking a cybersecurity leader in the United Kingdom with 3–5 years of information security experience. You will develop policies, oversee risk management, and ensure regulatory compliance across technology and business units in a hybrid work setting.

The role requires CISSP preference, deep knowledge of NIST/ISO 27001, cloud security, IAM, and Secure DevOps practices, with collaboration across Risk, Legal, Compliance, and IT teams.