Lead Cyber Risk Analyst

BAE; Frimley; Hybrid; GBP 65,000; Full time

Job summary

Join a forward-thinking company as a Lead Cyber Risk Analyst, where you will play a crucial role in enhancing cybersecurity through innovative risk assessment methodologies. Collaborate with diverse teams to analyze technology risks, conduct impact modeling, and present strategic insights to senior management. This role offers a unique opportunity to work at the forefront of cybersecurity in a dynamic environment, making a real difference in protecting critical systems. With a commitment to inclusivity and personal growth, this is your chance to thrive in a supportive culture while advancing your technical career in the defense sector.

Benefits

Competitive pension scheme

Employee share plans

Flexible health benefits

Private health plans

Shopping discounts

Annual incentive eligibility

Qualifications

• Robust understanding of risk analysis methodologies and frameworks.
• Bachelor's degree or above in a STEM subject.

Responsibilities

• Lead development of risk assessment methodologies for technology and cyber risk.
• Conduct impact modelling for potential cyber incidents.

Skills

Risk analysis methodologies

FAIR framework

NIST framework

Microsoft Excel

Report writing

Education

Bachelor's degree in risk management

Bachelor's degree in mathematics

Bachelor's degree in cyber security

Job description

Job Title: Lead Cyber Risk Analyst

Location: Frimley or Preston - We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role.

Salary: £65,000 dependent on skills and experience

What you'll be doing:

1. Lead on developing risk assessment and analysis methodologies; developing leading approaches to assessing technology such as AI, traditional IT systems and cyber risk in the supply chain
2. Conduct impact modelling to assess potential financial, operational and reputational impacts to the company in the event of a major cyber incident
3. Develop and present strategic risk reports to senior management, providing clear insights and recommendations
4. Collaborate across the Group to lead risk analysis efforts and provide subject matter expertise (SME) guidance to different sectors
5. Work closely with other cybersecurity teams to understand threat landscapes, vulnerabilities, and impact assessments
6. Stay abreast of the latest cybersecurity trends, threats, and risk quantification techniques
7. Contribute to the continuous improvement of the cybersecurity risk management framework
8. Act as a delegate for the Head of Cyber Security Risk in various capacities as needed

Your skills and experiences:

Essential:

• Robust understanding of risk analysis methodologies, frameworks and theories (FAIR, NIST)
• Previous experience working in large and complex organisations
• Ability to effectively write high quality reports and presentations
• Advanced user with Microsoft Excel
• Bachelor's degree level qualification or above in risk management, mathematics, cyber security or another STEM subject

Desirable:

• Previous experience working in corporate risk management or security consultancy roles
• Experience working with defence or national security organisations
• CISSP, CRISC, CISM or other advanced cyber security certification

Benefits:

As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive.

The CISO Team:

Working for one of the largest defence companies in the world, this exciting company within the CISO's team, reporting to the Head of Cyber Security Risk within the risk Cyber function is now available. The Lead Cyber Risk Analyst will be pivotal in enhancing our cybersecurity posture through both quantitative and qualitative risk analysis.

The position will allow you to build on your technical career working alongside various stakeholders and partners across BAE Systems and the wider Defence industry.

Why BAE Systems?

This is a place where you'll be able to make a real difference. You'll be part of an inclusive culture that values diversity, rewards integrity, and merit, and where you'll be empowered to fulfil your potential. We welcome candidates from all backgrounds and particularly from sections of the community who are currently underrepresented within our industry, including women, ethnic minorities, people with disabilities and LGBTQ individuals.

We also want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role.

Closing Date: 28th April 2025

We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.