Risk Analyst

Harvey Nash Group; Glasgow; On-site; GBP 111,000 - 129,000; Part time

Job summary

Harvey Nash Group is seeking two Cyber Risk Analysts for a major resilience programme. The role is a 6-month contract with hybrid working in Glasgow (2–3 days onsite). Daily rate £600–£700 umbrella only, with mid-November start.

You will own cyber risk assessment outputs, translate findings into actionable work packages and drive remediation across multiple sites, coordinating with IT, engineering and operations to progress risks and controls.

Qualifications

• Strong background in Cyber Security Risk Analysis or Cyber Risk Management.
• Experience reviewing risk assessments and translating findings into actionable work plans.
• Good understanding of risk controls, mitigation activities and remediation planning.
• Ability to engage with technical and non-technical stakeholders across workstreams.
• Experience working within Operational Technology (OT) or critical infrastructure environments.

Responsibilities

• Support a major cyber resilience programme across multiple sites.
• Own existing cyber risk assessment outputs, analyse findings and translate into deliverable work packages.
• Bridge gap between risk identification and implementation, tracking risks, controls and remediation activities.

Skills

Cyber risk analysis

Cyber risk management

Risk assessments review

Stakeholder engagement

OT/critical infrastructure experience

Job description

Harvey Nash is now inviting two candidates to apply for the role of Cyber Risk Analyst.

• Initial 6 month contracts
• Hybrid to Glasgow (2 - 3 days a week onsite)
• £600 - £700 a day / Umbrella only
• Start date mid November

We are seeking experienced Cyber Risk Analysts to support a major cyber resilience programme across multiple operational sites. Working closely with Operations, Engineering, IT and Cyber Security teams, you will take ownership of existing cyber risk assessment outputs, analysing findings and ensuring they are translated into tangible actions and deliverable work packages.

This is a highly analytical role focused on bridging the gap between cyber risk identification and implementation, ensuring risks, controls and remediation activities are effectively tracked, assigned and progressed.

Required Experience

• Strong background in Cyber Security Risk Analysis or Cyber Risk Management.
• Experience reviewing risk assessments and translating findings into actionable work plans.
• Good understanding of risk controls, mitigation activities and remediation planning.
• Ability to engage with technical and non-technical stakeholders and drive progress across multiple workstreams.
• Experience working within Operational Technology (OT) or critical infrastructure environments.