Senior Cyber Security Analyst — GRC & Risk Management

NATS Ltd; Swanwick; Hybrid; GBP 70,000 - 95,000; Full time

Job summary

NATS Ltd is seeking a Senior Cyber Security Analyst to lead governance, risk and compliance activities, shaping risk management practices and security controls across the organisation.

The role requires translating complex cyber risks into actionable business messages, developing security standards, and guiding junior analysts while collaborating with diverse stakeholders to strengthen the security program.

Qualifications

• Degree in Cybersecurity or related field, or equivalent experience.
• CISMP or ISO 27001 Lead Implementer certification or equivalent.
• Experience delivering initiatives to develop capability and promote compliance with security obligations.
• Experience evaluating complex security challenges across technical, process, and business domains, applying sound judgement.

Responsibilities

• Develop and maintain cyber security risk management frameworks and processes.
• Work with risk owners to create proportionate risk treatment and remediation plans.
• Challenge risk assessments, control effectiveness and proposed risk acceptance.
• Translate technical risks into clear business impacts for stakeholders and leaders.
• Develop and maintain security standards, policies, and procedures aligning with ISO 27001 and NIST.
• Provide guidance and mentoring to junior analysts and collaborate across teams.

Education

Degree in Cybersecurity / Information Security

Job description

NATS Ltd is seeking a Senior Cyber Security Analyst to lead governance, risk and compliance activities, shaping risk management practices and security controls across the organisation.

The role requires translating complex cyber risks into actionable business messages, developing security standards, and guiding junior analysts while collaborating with diverse stakeholders to strengthen the security program.