Senior IT Cyber Governance & Risk Lead

The Fidelis Partnership; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

The Fidelis Partnership in London is seeking a Senior IT cyber Governance, Risk & Compliance Analyst to support the development, implementation and oversight of IT governance, cyber risk and compliance activities. This role involves assisting IT and cyber risk assessments, regulatory alignment, audits and remediation tracking across IT systems and processes.

You will work closely with internal stakeholders to ensure IT and cyber activities are aligned with regulatory expectations and internal

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field.
• Relevant certifications such as CRISC, CISA, CISM, ISO 27001 or CISSP desirable.
• Minimum of 5 years' experience in IT governance, risk management, cyber or information security.

Responsibilities

• Support compliance with regulatory, IT, cyber and control frameworks (e.g., DORA, ISO 27001, NIST CSF, SOX).
• Assist in IT and cyber risk assessments, and track remediation actions.
• Support audits and regulatory inspections.
• Maintain cyber risk register and governance updates.
• Coordinate third-party security due diligence and supplier remediation tracking.
• Assist in delivering training on IT governance, cyber risk and compliance.

Skills

Cybersecurity

Information security

IT governance

Regulatory compliance

Audit support

Vendor risk management

Communication

Education

Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or related field

Job description

The Fidelis Partnership in London is seeking a Senior IT cyber Governance, Risk & Compliance Analyst to support the development, implementation and oversight of IT governance, cyber risk and compliance activities. This role involves assisting IT and cyber risk assessments, regulatory alignment, audits and remediation tracking across IT systems and processes.

You will work closely with internal stakeholders to ensure IT and cyber activities are aligned with regulatory expectations and internal