Senior Cyber Security Risk Specialist

Morson Talent; London; On-site; GBP 75,000 - 95,000; Full time

Job summary

Une entreprise dynamique recherche un Senior Cyber Security Risk Specialist pour façonner leur fonction GRC. Ce rôle combine responsabilité stratégique et opérationnelle, permettant au candidat d'avoir une influence directe sur la gestion des risques cybernétiques. Avec un salaire compétitif, des bonus et un environnement de travail au cœur de Londres, cette opportunité attire les professionnels prêts à faire une différence significative.

Benefits

Formation continue

Autonomie dans le rôle

Reconnaissance en tant qu'employeur

Qualifications

• Expérience forte en risque technologique ou cybersécurité.
• Approche proactive pour identifier les menaces.
• Connaissance pratique des cadres de conformité ISO 27001.

Responsibilities

• Réalisations d'évaluations de risque en cybersécurité.
• Création de rapports significatifs sur la santé des contrôles.
• Maintien du Système de Gestion de la Sécurité de l'Information.

Skills

Risk Management

Communication

Leadership

Education

ISO 27001 knowledge

Job description

Senior Cyber Security Risk Specialist Make This Role Your Own!

3 days a week on–site in London or Crawley

Circa GBP75K + up to 15% bonus + 10% pension + guaranteed annual salary increases

Are you passionate about Cyber Security Risk and ready to play a key role in shaping a GRC function from the ground up?

If so, this is a brilliant opportunity to join a business that s right at the beginning of its cyber journey. With offices in both London and Crawley, they re looking to build a best–in–class cyber security function and you ll be right at the heart of that transformation.

This isn t a tick–box auditing role. It s hands–on, it s strategic, and it s a chance to truly influence how cyber risk is approached across the business. Working closely with the GRC Manager, you ll be instrumental in embedding risk awareness into the business and ensuring technology and threat considerations are front and centre.

The best part? This role has space to be shaped by you. There are, of course, some core responsibilities, including:

What You ll Be Doing:

• Risk Management: Carry out cyber security risk assessments using the company s risk framework, identifying key issues and tracking remediation actions. Communicate risks and treatments clearly to internal and external stakeholders.
• Reporting & Metrics: Create meaningful MI on risk and control health. Help define KPIs and KRI metrics across IS teams, prepare regulatory submissions, and track compliance.
• ISMS Support: Maintain the Information Security Management System (ISMS) in line with ISO 27001/27002. Manage governance forums, minutes, and documentation.
• Policies & Standards: Develop GRC policies, standards, and procedures. Track exceptions, monitor risk, and report on performance and compliance.
• Controls Framework: Strengthen the IT controls environment. Understand technical risks and support control improvement initiatives.

What You ll Need:

• Strong experience in technology risk or cyber risk roles.
• A proactive approach to identifying threats and making smart, independent decisions.
• A working knowledge of ISO 27001 and aligning businesses to compliance frameworks.
• Confidence presenting to senior internal/external stakeholders.
• Excellent communication skills and a collaborative mindset. Culture fit really matters here.

What s In It For You?

• Freedom to shape the role. Real autonomy to define the GRC roadmap alongside the manager.
• Ongoing investment in you. The team is already completing certs like CISM, CRISC, OT & Cloud, ISO Lead Implementer, and more.
• Award–winning employer. Recognised for diversity, digital transformation, and consistently ranked among the UK s top employers.
• Real cyber focus. Not just ticking compliance boxes. Cyber is a business priority.

If you want to be part of something from the ground up where your input is valued, your growth is supported, and your work makes a real impact, let s have a chat.