Senior Cyber Risk & Assurance Lead

Medical Protection Society; Leeds; Hybride; GBP 65 000 - 90 000; Plein temps

Avantages offerts par ce poste

Bonus potential 10-20%

Pension contributions 11%

25 days annual leave

Private Medical Cover

Car Salary Sacrifice

Death in service 6x salary

Wellbeing support package

Hybrid working

Inclusive culture

Résumé du poste

Medical Protection Society in Leeds is seeking a Senior Information Security Risk Analyst to strengthen cyber and information security capabilities. You will lead complex risk assessments, design and assure security controls, and manage risks in line with regulatory requirements and risk appetite.

You will translate technical risk into pragmatic business outcomes, mentor colleagues, and contribute to security maturity across the organisation in a flexible hybrid setup.

Qualifications

• Proven experience in information security risk management, governance, and security assurance within complex or regulated environments.
• Strong knowledge of cyber security risks, controls, cloud technologies, and regulatory frameworks.
• Experience leading security risk assessments across systems, suppliers, projects, and change initiatives.
• Excellent stakeholder management, communication, and influencing skills, including engagement with senior leaders.
• Confident working autonomously while contributing to a collaborative, high performing security culture.
• Strong analytical skills, professional judgement, and a proactive approach to risk management.
• Experience mentoring or supporting junior analysts and promoting security best practice.
• Relevant certifications such as CISSP, CISM, CRISC, or ISO 27001 qualifications are desirable.

Responsabilités

• Lead security risk assessments for complex systems, suppliers, projects and business change initiatives.
• Assess the effectiveness of security controls, identify gaps and support pragmatic risk treatment plans.
• Provide expert security risk guidance for projects, procurement, and supplier onboarding activities.
• Produce clear, high quality risk assessments, treatment plans, exceptions, and management reporting.
• Deliver risk based advice and constructive challenge to technical and business stakeholders.
• Support the continuous improvement of information security risk processes and ways of working.
• Mentor junior analysts, providing guidance and quality assurance to strengthen team capability.
• Support audit, compliance, and assurance activities, ensuring findings are tracked through to resolution.
• Monitor emerging threats, regulatory changes, and compliance requirements, escalating risks where appropriate.

Connaissances

Security risk management

Governance

Security assurance

Stakeholder management

Cloud security

Regulatory frameworks

Analytical thinking

Mentoring

Outils

ISO 27001

CISSP (desirable)

CISM (desirable)

CRISC (desirable)

Description du poste

Medical Protection Society in Leeds is seeking a Senior Information Security Risk Analyst to strengthen cyber and information security capabilities. You will lead complex risk assessments, design and assure security controls, and manage risks in line with regulatory requirements and risk appetite.

You will translate technical risk into pragmatic business outcomes, mentor colleagues, and contribute to security maturity across the organisation in a flexible hybrid setup.