Security Risk Analyst

Trades Workforce Solutions; City Of London; Hybrid; GBP 46,000 - 55,000; Full time

Job summary

A leading retail brand in London is seeking a Security Risk Analyst to join their cyber security transformation. The role involves assessing and communicating security risks, designing practical controls, and staying ahead of evolving threats. Candidates should have a strong understanding of risk and security frameworks, along with excellent communication skills. This position offers a hybrid working model in Paddington and a salary of up to £55,000.

Benefits

Salary up to £55,000

Hybrid working: 3 days in London, 2 days remote

Culture viewing security as an enabler

Qualifications

• Strong understanding of how security interacts with systems, people, and processes.
• Familiarity with various security frameworks.
• Ability to communicate security risks effectively.

Responsibilities

• Assess and communicate security risks in plain English.
• Work with engineers and architects to design practical controls.
• Identify real-world attack paths through threat modeling.
• Stay informed on evolving threats.

Skills

Strong understanding of risk

Experience with ISO, NIST, CIS, PCI, OWASP, OSINT

Technical know-how (cloud, apps, networks, systems)

Excellent communicator

Job description

Security Risk Analyst – Up to £55,000

London (Paddington, 3 days per week) + 2 days remote

No sponsorship available with this role.

An exciting opportunity to join a FTSE 100 heritage retail brand in their cyber security transformation. A full job spec will be posted shortly, however if you'd like to be considered early, please hit apply and we will be in touch.

We’re not looking for clipboard‑tickers or box‑checkers. This isn’t an audit role.

We want someone who understands how security really interacts with systems, people, and processes and can explain it clearly.

What you’ll do

• Assess and communicate security risks in plain English
• Work with engineers, architects, and ops to design practical controls
• Use threat modelling to identify real-world attack paths
• Stay ahead of the evolving threat landscape

What we’re looking for

• Strong understanding of risk, and how security interacts with different platforms and projects.
• Experience with frameworks like ISO, NIST, CIS, PCI, OWASP, OSINT
• Technical know-how (cloud, apps, networks, or systems)
• Excellent communicator who can bridge the gap between tech and business

Why join us?

• Salary up to £55,000
• Hybrid working: 3 days in London Paddington, 2 days remote
• A culture where security is seen as an enabler, not a blocker