Senior Cyber Security Risk Analyst
Dyddiad hysbysebu: | 21 Mehefin 2025 |
---|---|
Cyflog: | £28.49 yr awr |
Gwybodaeth ychwanegol am y cyflog: | per hour PAYE |
Oriau: | Llawn Amser |
Dyddiad cau: | 20 Gorffennaf 2025 |
Lleoliad: | Watford, WD18 8AG |
Cwmni: | Triumph Consultants Ltd |
Math o swydd: | Dros dro |
Cyfeirnod swydd: | JM RQ1548059 ACT |
Crynodeb
What's involved with this role:
Remote Role
Senior Cyber Security Risk Analyst
JM RQ1548059 ACT
£28.49 per hour PAYE
35 hours per week (Mon-Fri)
Location: Watford WD18 8AG
Please Note: A Basic DBS check is required for this role and must be sought through the Agency there will be fee to be paid. Third-party DBS checks are not accepted.
Our client is seeking a highly skilled and technically proficient Senior Cybersecurity Risk Analyst to join their team on an interim basis. This is a critical role responsible for identifying, assessing, and managing cybersecurity risks across systems, applications, and infrastructure. You will work closely with IT, SOC, and business units to ensure technical risks are effectively translated into business terms and addressed appropriately.
Key Responsibilities:
Conduct in-depth security risk assessments across enterprise systems and infrastructure.
Identify and evaluate technical and operational risks, vulnerabilities, and control gaps.
Translate complex cybersecurity threats into clear, actionable business risks.
Maintain and regularly update the Cybersecurity Risk Register.
Produce detailed reports and communicate findings clearly to stakeholders.
Collaborate with IT teams, Security Operations Centre (SOC), and business units.
Provide escalation support in the absence of a cybersecurity specialist.
Ensure compliance with relevant standards such as ISO 27001, NIST, and UK GDPR.
Conduct third-party/vendor security assessments, especially during tender reviews.
Carry out additional tasks as directed by the Head of Information Security.
Essential Requirements:
Proven experience in performing technical risk assessments and threat modelling.
Strong understanding of cybersecurity concepts across network, endpoint, and cloud environments.
Ability to communicate technical risks in business-relevant language.
Experience working with or within a SOC environment.
Familiarity with risk management frameworks (e.g. ISO 27005, NIST RMF).
Excellent communication, reporting, and stakeholder engagement skills.
Desirable:
Relevant certifications (e.g. CISSP, CISM, CRISC, CEH).
Experience with GRC tools and risk registers.
Good understanding of regulatory compliance and data protection laws.
If you do not hear from us within three working days, unfortunately your application has not been shortlisted on this occasion. Thank you for your interest in working with us.
Please quote the Job Title & Vacancy Reference No. in your application, or we will be unable to match your CV to the role being applied for.
1
Job Ref: JM RQ1548059 ACT
Anticipated Length of Assignment: Unless otherwise stated (we do carry the occasional permanent vacancy) all of our roles are technically temporary, though opening assignments can be and often are, extended by clients on a longer term basis and can sometimes become permanent.
Please do try to resist contacting us with requests for progress updates.
We really do read every CV sent to us. All applications will be acknowledged by a human, not a robot, provided the job remains live and provided your CV meets the “Essential Requirements” listed.
Please note that we do our level best to take down ads as soon as roles have been filled. We are not in the business of harvesting CVs.
Important: We will interpret your application as being permission to submit your CV to this role (with the right to represent you) unless you advise us to the contrary.