Cyber Governance Analyst

About the Company

Our client delivers essential engineering services that maintain and renew critical infrastructure networks. Their multidisciplinary expertise is provided through independently branded UK subsidiaries, each supporting the day-to-day operation of these networks.

Subsidiaries operate with autonomy to remain competitive and effective in their markets, while adhering to group-wide standards of excellence.

As the organisation continues to grow and governance requirements increase, we are partnering with them to expand the central IT function—strengthening and adding value to the existing team.

About the Role

As the group continues to grow and governance requirements increase, we are working with them to expand the central IT function to strengthen and add value to the existing team.

Responsibilities

• Reporting into the GISO, you will provide guidance as a first line of defence in maintaining the security controls in line with company policies and standards and would act as the liaison across subsidiary cyber services.
• You will also ensure that proactive risk management with good cyber control processes and audit requests are in place.
• Collaborate with IT and legal/policy teams to create, manage and ensure compliance with industry regulations and company specific policies.
• Implementing Information Security and Privacy Standards and Frameworks (e.g. NIST, CIS Security Controls).
• Working directly with engineering teams and architects to review system/data architectures through the development of patterns and industry best practice.
• Understanding and articulating the impact of vulnerabilities and required controls and mitigations on existing and future designs and systems.
• Ability to conduct Risk Assessments and effectively translate and accurately communicate security and risk implications to technical and non-technical stakeholders.
• Manage and support Project stakeholder expectations and be flexible, agile and pragmatic.

Qualifications

• In-depth knowledge of cybersecurity frameworks (e.g., NIST, CIS Security controls).
• Previous role with similar responsibilities in supporting effective governance, monitoring controls and internal processes, managing identified risks.

Required Skills

• In-depth knowledge of cybersecurity frameworks (e.g., NIST, CIS Security controls).
• Previous role with similar responsibilities in supporting effective governance, monitoring controls and internal processes, managing identified risks.

Location

HQ is based in Leeds, remote work is also available with travel to all subsidiary companies.

Pay range and compensation package

Circa £50k + Car Allowance + Benefits