Risk Analyst

lacuna-talent; United Kingdom; Hybrid; GBP 40,000 - 65,000; Full time

Job summary

lacuna-talent is seeking a Risk Analyst to strengthen the Information Security team. The role focuses on identifying and mitigating risks across a large enterprise and requires collaboration with Product Owners and non-technical stakeholders.

The ideal candidate will have experience within risk management frameworks and a solid understanding of ISO27001 and NIST controls, with a proactive, detail-oriented approach to remediation.

Qualifications

• Experience identifying, analysing and mitigating risk within a large enterprise.
• Experience working within a risk management framework.
• Knowledge of information security controls and security best practices.
• Knowledge of ISO27001 and NIST standards and guidelines.
• Self-starter with keen eye for detail and proactive remediation.

Responsibilities

• Identify, analyse and mitigate information security risks within the enterprise.
• Collaborate with Product Owners and non-technical stakeholders to drive risk remediation.
• Support and promote ongoing risk management initiatives across teams.

Skills

Risk identification

Risk mitigation

Information Security controls

ISO27001 & NIST knowledge

Self-starter with attention to detail

Job description

We are working with a large organisation who are looking to add to their existing Information Security team with a Risk Analyst.

The role would require a solid grasp of identifying and mitigating Risks within a large enterprise as well as the ability to collaborate with Product Owners and non-technical stakeholders.

KEY SKILLS

Experience in a number of the following areas:

• Experience identifying, analysing and mitigating Risk
• Experience working within a Risk Management framework
• Knowledge of Information Security controls
• Knowledge of the likes of ISO27001 and NIST
• A self-starter with a keen eye for detail and the ability to push remediation efforts forwards effectively

The organisation has a strong internal promotion culture, as well as self-development/studies which you would be supported with.

Whilst the role is largely remote, there would be a need to go into the office once or twice a month.

Any certifications you hold which could support your application would also be great, but again not 100% imperative.

If you'd like to hear more, then please do get in touch.