Senior Cyber GRC Analyst - Remote

NATS; Swanwick CP; Hybrid; GBP 70,000 - 95,000; Full time

Job summary

NATS is seeking a Senior Cyber Security Analyst to protect critical business services through robust cyber risk management. You will translate complex risks into business terms for technical teams and leaders, contribute to policy and control development, and help mature security practices across the organisation.

Working with diverse stakeholders, you will guide risk assessments, implement frameworks like ISO 27001 and NIST, and mentor junior analysts while ensuring alignment with corporate

Qualifications

• Degree in Cybersecurity, Information Security or related field or equivalent experience.
• CISMP, ISO 27001 Lead Implementer or equivalent.
• Demonstrated experience delivering initiatives to develop capability and promote compliance with security obligations.
• Experience evaluating complex security challenges across technical, process and business domains.
• Experience implementing and improving cyber security risk management frameworks, methodologies and processes.
• Experience developing and implementing risk mitigation plans, policies, processes and controls.
• Understanding and applying ISO27001 and NIST standards.
• Proven ability to communicate complex information to stakeholders at all levels.
• Mentoring and guiding other team members is a plus.

Responsibilities

• Develop and improve cyber security risk management frameworks, methodologies and processes.
• Collaborate with risk owners to create proportionate risk treatment and remediation plans.
• Challenge risk assessments and control effectiveness with constructive feedback.
• Translate threat, vulnerability and risk concepts into business implications for stakeholders.
• Maintain and develop security standards, policies and procedures.
• Deliver assurance and measurement reports to guide remedial actions.
• Drive security improvement initiatives across business areas.
• Provide technical guidance and mentorship to team members.
• Monitor regulatory developments and advise on impact to security practices.

Skills

Cybersecurity

Risk management

Security governance

Stakeholder communication

Mentoring

Education

Degree in Cybersecurity

CISMP

ISO 27001 Lead Implementer

Tools

NIST Cybersecurity Framework

ISO/IEC 27001

NIST SP 800-30

CAF (NCSC CAF)

Job description

NATS is seeking a Senior Cyber Security Analyst to protect critical business services through robust cyber risk management. You will translate complex risks into business terms for technical teams and leaders, contribute to policy and control development, and help mature security practices across the organisation.

Working with diverse stakeholders, you will guide risk assessments, implement frameworks like ISO 27001 and NIST, and mentor junior analysts while ensuring alignment with corporate