Senior Cybersecurity Risk & Governance Expert

Euroclear; United Kingdom; On-site; GBP 80,000 - 110,000; Full time

Job summary

A global critical financial infrastructure company is seeking a Senior Cybersecurity Risk & Governance Expert in the United Kingdom. This role involves leading risk assessments, driving governance initiatives, and advising management on security posture. Ideal candidates will have over 8 years of cybersecurity experience and strong leadership skills in governance and compliance. This position offers a chance to make a substantial impact on security strategy within a critical environment.

Qualifications

• 8+ years’ experience in cybersecurity, with at least 5 years in risk and governance roles.
• Proven leadership in running security governance programs or regulatory readiness.
• Expertise in threat modelling, control frameworks, and cyber risk quantification.

Responsibilities

• Lead security risk assessments for complex projects, influencing architecture decisions.
• Drive the update and maintenance of the Security Baseline framework across domains.
• Advise senior management and business teams on security posture and risk mitigation.

Skills

Cybersecurity expertise

Risk evaluation

Governance leadership

Influencing skills

Communication skills

Education

Bachelor’s/master’s degree in information security, Computer Engineering, or equivalent

Job description

Social network you want to login/join with:

Senior Cybersecurity Risk & Governance Expert

col-narrow-left

Client:

Euroclear

Location:

United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

c646620ba619

Job Views:

14

Posted:

12.08.2025

Expiry Date:

26.09.2025

col-wide

Job Description:

Division: CISO

Euroclear is a global critical financial infrastructure company. Security is at the core of the company’s services, firmly embedded in their management systems and processes. Our Tribe provides impact analysis, security risk assessment, security requirements, design validation for all IT projects in Euroclear, regular security assessments of Euroclear applications and the underlying infrastructure. We also support Euroclear’s compliance activities by reviewing and publishing secure configuration baselines and by organising the Security Exception Review Board. Finally, we provide consultancy for anyone in Euroclear for any IT security related question.

Euroclear is seeking a senior cybersecurity professional to lead and shape risk and governance initiatives across critical services and infrastructure. This role sits at the intersection of security strategy, compliance, and risk evaluation, enabling secure-by-design principles at enterprise scale.

Responsibilities

• Lead security risk assessments for complex projects, influencing architecture decisions
• Drive the update and maintenance of the Security Baseline framework across domains
• Act as a subject-matter expert for regulatory and audit-driven risk activities
• Represent the cybersecurity team in governance forums (. SERB, risk committees)
• Oversee risk evaluation documentation, threat models, and secure configuration strategies
• Mentor analysts and contribute to security process automation initiatives
• Advise senior management and business teams on security posture and risk mitigation

Required Expertise

• 8+ years’ experience in cybersecurity, with at least 5 years in risk and governance roles
• Proven leadership in running security governance programs or regulatory readiness (. DORA, GDPR, FISA)
• Expertise in threat modelling, control frameworks, and cyber risk quantification
• Practical experience designing and embedding secure architecture practices in large organisations
• Deep knowledge of risk registers, SCF control catalogues, and exception handling frameworks
• Skilled in influencing cross-functional teams and external stakeholders
• Strong written and verbal communication, including reporting to senior management
• Bachelor’s/master’s degree in information security, Computer Engineering, or equivalent
• Recognised certifications (CISSP, CISM, CRISC, ISO 27005) are a plus