Cyber Risk Assessment Analyst

Cyber Risk Assessment Analyst
Up to £62,000 + bonus
South Wales/Hybrid
Permanent

I'm looking for a cyber risk assessment specialist to identify and assess cyber risks across our client's IT and OT environments. The successful candidate will also be recommending mitigation strategies to strengthen cyber resilience and meet regulatory requirements.

The ideal candidate will possess extensive experience in cyber risk assessment alongside strong experience translating technical risk and control issues into business language.

The role requires eligibility for SC clearance and visa sponsorship cannot be offered.

What You'll Be Doing:

• Conducting structured cyber risk assessments across IT and OT systems
• Gathering technical and business data to inform risk analysis
• Using tools and frameworks to identify, assess, and prioritise risks
• Collaborating with stakeholders to assign risk levels and remediation priorities
• Evaluating the effectiveness of existing security controls
• Recommending mitigation strategies and validating security measures
• Maintaining accurate records of assessments and mitigation actions
• Reporting risk trends and recommendations
• Managing the risk acceptance process and ensuring proper documentation
• Ensuring compliance with internal policies and external regulations
• Supporting incident response planning with risk insights
• Staying current with cyber threats and best practices
• Continuously improving risk assessment methodologies

What I'm Looking For:

• Strong understanding of security frameworks (e.g., NIST, ISO 27001).
• Strong understanding of cyber risk management and threat actors
• Knowledge of technical security controls
• Experience in cyber risk assessment and technical IT or OT roles
• Familiarity with CNI environments and IEC62443 would be useful
• Excellent communication, analytical, and problem-solving skills

What's in it for you:

• Up to circa £62,000
• Discretionary bonus
• 25 days leave plus bank holidays
• Good pension scheme

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)