Senior Cyber Risk & Security Assurance Lead

Lancashire Inc.; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Lancashire Inc. in London is seeking a Principal Cyber Security Analyst to lead information security assurance, risk management and regulatory compliance. The role focuses on technical delivery, control validation and strengthening security capabilities across IT and cloud environments.

You will act as a senior SME, coordinating audits, guiding risk remediation and mentoring junior analysts in a collaborative, delivery-focused team.

Qualifications

• Solid experience in an Information Security role at senior or specialist level.
• Hands-on cyber risk management, control assessment and assurance delivery.
• Technical security assurance across infrastructure, applications and cloud.
• Knowledge of frameworks such as NIST CSF and ISO 27001.
• Experience supporting regulatory obligations (e.g. FCA, PRA, NYDFS).
• Experience with audit activities and remediation tracking.
• Experience in third-party risk and supplier assurance.
• Ability to apply security controls in practical environments.
• Experience mentoring team members and providing technical guidance.
• Strong analytical, coordination and stakeholder communication skills.

Responsibilities

• Lead the ISMS delivery and continuous improvement, aligned with regulatory frameworks.
• Translate strategy into operational assurance activities with governance and reporting.
• Manage cyber risk day-to-day, maintain risk registers and remediation oversight.
• Perform cyber risk and control assessments across operations and third parties.
• Deliver technical assurance via testing, evidence gathering and validation.
• Coordinate responses to audit findings and remediation actions.
• Support regulatory reporting with proper documentation and evidence.
• Provide technical guidance across IT infra, applications, cloud and third parties.
• Contribute to governance forums with risk-focused challenge and input.
• Assess new systems for security standards and control requirements.
• Apply threat modelling and assurance approaches for secure design.
• Engage with third-party security assurance activities as needed.
• Support incident response with technical analysis and control validation.
• Collaborate with SOC provider to ensure monitoring and response effectiveness.
• Mentor and develop team capability in technical and assurance activities.

Skills

Information security

Cyber risk management

Control assessment

Security assurance

NIST CSF

ISO 27001

Regulatory compliance

Audit remediation

Third-party risk

Security controls

Mentoring

Analytical skills

Stakeholder comms

Collaboration

Job description

Lancashire Inc. in London is seeking a Principal Cyber Security Analyst to lead information security assurance, risk management and regulatory compliance. The role focuses on technical delivery, control validation and strengthening security capabilities across IT and cloud environments.

You will act as a senior SME, coordinating audits, guiding risk remediation and mentoring junior analysts in a collaborative, delivery-focused team.