Strategic Cyber Risk Analyst for Governance & Compliance

Lorien; Greater London; On-site; GBP 55,000 - 75,000; Full time

Job summary

Lorien is seeking an experienced Security Risk Analyst to join a busy cyber security and information governance function. The role focuses on identifying, assessing and managing cyber and information security risks across systems, services, suppliers and business processes to support governance and compliance.

You will work with ICT teams and senior stakeholders to ensure risks are understood, managed and effectively mitigated, while contributing to incident reviews and risk-based reporting

Qualifications

• Must have experience using Risk Ledger.
• Strong understanding of cyber threats, vulnerabilities and security risk management practices.
• Experience with frameworks such as ISO 27001, NIST and NCSC CAF.
• Knowledge of UK GDPR, Data Protection Act 2018 and PSN requirements.

Responsibilities

• Conduct cyber and information risk assessments across systems, suppliers and business services.
• Maintain and manage the cyber risk register, ensuring risks are accurately assessed and tracked.
• Work with technical and business teams to define and implement risk mitigation plans.
• Review security controls, identify weaknesses and recommend improvements.
• Carry out supplier security assurance and risk assessments, ensuring appropriate controls are in place.
• Produce risk reports and dashboards for senior leadership and governance boards.
• Support compliance activities against recognised standards and frameworks.
• Provide guidance to stakeholders on cyber risk implications of projects, procurements and technology changes.
• Contribute to incident reviews and lessons learned activities.
• Experience maintaining risk registers and producing risk-based reporting.

Skills

Risk Ledger

Cyber risk assessment

Information governance

Stakeholder communication

Security controls review

Cloud security

ISO 27001

NIST

GRC

Job description

Lorien is seeking an experienced Security Risk Analyst to join a busy cyber security and information governance function. The role focuses on identifying, assessing and managing cyber and information security risks across systems, services, suppliers and business processes to support governance and compliance.

You will work with ICT teams and senior stakeholders to ensure risks are understood, managed and effectively mitigated, while contributing to incident reviews and risk-based reporting