Cyber Security Governance, Risk & Compliance

Cyber Security Analyst

 

Location: Warton, Preston (3 days per week onsite)

Duration: 6 Months

Rate: £64.09 per hour, Umbrella

Clearance: Active SC Clearance required prior to start, candidates must also be SOLE BRITISH NATIONALS due to UK Eyes Only restrictions

 

We are supporting a leading Defence organisation in the recruitment of three Cyber Security Analysts to join an established Cyber Security team.

This role will focus on cyber security assurance, risk assessment and compliance activities, supporting projects and systems throughout their lifecycle. The successful candidate will work closely with technical and business stakeholders to identify, assess and manage cyber security risks while helping to ensure security requirements are met.

 

Key Responsibilities

• Support cyber security assurance activities across projects, systems and services.
• Assist with the assessment and management of cyber security risks.
• Review security documentation and assurance evidence.
• Support compliance activities against security standards and requirements.
• Work with stakeholders to identify security issues and support remediation activities.
• Maintain records, documentation and reporting relating to cyber security assurance activities.
• Support audits, reviews and continuous improvement initiatives.

 

Essential Experience

• Experience within Cyber Security, Information Assurance, Security Assurance or Cyber Risk environments.
• Experience conducting or supporting security and risk assessments.
• Knowledge of security controls, governance and compliance principles.
• Experience working with recognised security frameworks such as ISO27001 and/or NIST 800-53.
• Strong communication and stakeholder engagement skills.
• Experience producing and maintaining security documentation and reports.

 

Desirable Experience

• Defence, Government or other highly regulated industry experience.
• Secure by Design experience.
• Experience supporting assurance, accreditation or compliance activities.
• Knowledge of risk management and security control assessment processes.
• Operational Technology exposure.