Senior Cybersecurity Risk Analyst (Remote)

Senior Cybersecurity Risk Analyst (Remote) needed, £28.49ph PAYE – Reference: RQ1548059

Role Overview
We are looking for a highly skilled and technically proficient Senior Cybersecurity Risk Analyst to join our team on an interim basis. This role is critical in identifying, assessing, and managing information security risks across the organization. The ideal candidate will have a strong technical background, the ability to translate threats into business risks, and experience working in fast-paced environments.

Key Responsibilities
– Conduct in-depth security risk assessments across systems, applications, and infrastructure.
– Identify and evaluate technical and operational risks, vulnerabilities, and control gaps.
– Translate complex technical threats into clear, actionable business risks.
– Maintain and update the Cybersecurity Risk Register.
– Produce detailed risk assessment reports and present findings to stakeholders.
– Collaborate with IT, SOC, and business units to ensure risks are understood and mitigated.
– Provide technical escalation support in the absence of a cybersecurity specialist, particularly in coordination with the Security Operations Centre (SOC).
– Support compliance with relevant standards (. ISO 27001, NIST, UK GDPR).
– Review security aspects of tenders and conduct third-party/vendor risk assessments to ensure alignment with organisational security requirements.
– Perform additional security-related tasks as directed by the Head of Information Security

You will Ideally have – 
– Proven experience in technical security risk assessments and threat modelling.
– Strong understanding of cybersecurity principles, including network, endpoint, and cloud security.
– Ability to assess and communicate technical vulnerabilities in business terms.
– Experience working with or within a SOC environment.
– Familiarity with risk management frameworks?(. ISO 27005, NIST RMF).
– Excellent communication and reporting skills.
– Relevant certifications (. CISSP, CISM, CRISC, CEH).
– Experience with GRC tools and risk registers.
– Knowledge of regulatory requirements and data protection laws.

This is a full time role on a temporary basis.