Senior Cyber Risk Analyst | Buckingham, UK

Millennium Management, LLC; Buckingham; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading company in financial services is seeking a Senior Cyber Risk Analyst to manage cybersecurity risk assessments and internal security audits. This role demands advanced technical expertise and strong communication abilities to engage technical and non-technical stakeholders effectively. The ideal candidate will have over 5 years of experience, relevant certifications, and a thorough understanding of regulatory frameworks. Join this dynamic team and contribute to enhancing their cybersecurity resilience.

Qualifications

• 5+ years of experience in information security focused on risk assessment/internal audits.
• Experience with compliance and regulatory frameworks (e.g., NIST, ISO 27001).
• Strong documentation and report-writing skills.

Responsibilities

• Conduct comprehensive risk assessments of IT systems and infrastructure.
• Collaborate with stakeholders for understanding regulatory obligations.
• Prepare and deliver risk assessment reports to management.

Skills

Risk assessment

Cybersecurity

Communication

Analytical skills

Regulatory compliance

Education

Bachelor's degree in Cybersecurity, IT, or related field

Tools

Risk analytics tools

GRC tools

Job description

Senior Cyber Risk Analyst

Millennium Management, LLC Buckingham, United Kingdom

Senior Cyber Risk Analyst

We are seeking a Senior Analyst with a robust background in cybersecurity risk assessment and internal security audits, complemented by broad technical expertise across modern IT environments. This role requires a deep understanding of desktops, mobile devices, networks, operating systems, and cloud services, as well as the ability to effectively communicate complex technical concepts to both technical and non-technical stakeholders. The ideal candidate will possess advanced analytical skills, relevant certifications, and experience working cross-functionally-including direct client engagement-to support regulatory and business objectives.

Primary Responsibilities

• Conduct comprehensive risk assessments of information systems, applications, business processes, and underlying technical infrastructure-including desktops, phones, network devices, operating systems (Windows, macOS, Linux), and cloud platforms (AWS, Azure, GCP).
• Collaborate closely with compliance, legal, IT, business stakeholders, and external clients to understand operational requirements, regulatory obligations, and risk tolerance.
• Serve as a technical point of contact for clients, addressing and managing their technical requirements, security concerns, and risk management needs.
• Clearly document identified risks and work with stakeholders to propose, evaluate, and track compensating controls that address security gaps when standard controls are not feasible.
• Support and participate in internal security audits, ensuring findings are clearly communicated and remediation plans are actionable and understandable by both technical and non-technical teams.
• Prepare and deliver risk assessment reports and risk register updates to management, clients, and relevant teams, tailoring communication style and technical depth to the audience.
• Monitor the effectiveness of compensating controls and recommend improvements as needed to maintain compliance and reduce residual risk across diverse technical environments.
• Stay current with emerging threats, regulatory changes, and industry best practices in risk management, compensating controls, and evolving enterprise technologies.
• Assist with incident response planning and post-incident risk evaluation, leveraging broad technical knowledge to assess impacts and recommend improvements.

Qualifications/Skills Required

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 5+ years of experience in information security, with a strong focus on risk assessment and/or internal security audits.
• Demonstrated experience working with compliance, legal, business teams, and clients to assess and document security risks and compensating controls.
• Advanced knowledge of risk management frameworks (e.g., NIST, ISO 27001, CIS20) and regulatory requirements relevant to the financial sector
• Broad technical knowledge spanning desktops, mobile devices, networking, operating systems, and cloud services.
• Proficiency with risk analytics, GRC tools, and security assessment methodologies.
• Exceptional analytical, communication, and report-writing skills, with the ability to translate complex technical issues into clear, actionable recommendations for both technical and non-technical audiences.

Desired Skills

• Experience in the financial services sector or advisory work with a leading consulting firm.
• Familiarity with the design and evaluation of compensating controls in regulated environments.
• Ability to translate technical risks into business impacts and actionable recommendations.
• Experience presenting technical risk findings to executive leadership, clients, and non-technical stakeholders.
• One or more of the following certifications: CISSP, CISA, CompTIA CySA+

More Jobs From Millennium Management, LLC

Boost your career

Find thousands of job opportunities by signing up to eFinancialCareers today.