Cyber Security Risk Analyst

Role overview

Key responsibilities

• Conduct third-party cybersecurity risk assessments across software, cloud services, suppliers and technology vendors.
• Review supplier security documentation, including ISO 27001 certifications, SOC reports, penetration testing reports and security questionnaires.
• Maintain the cyber risk register and support risk identification, assessment and prioritisation.
• Track remediation actions and risk treatment plans through to closure.
• Coordinate with internal stakeholders and third parties to progress assessments and remediation.
• Support security governance reporting, audit evidence gathering and risk reviews.
• Provide first-line triage and administration for security-related requests during European business hours.
• Maintain accurate security documentation, assessment records and supporting evidence.

What the role requires

• At least 3 years' experience in cybersecurity, information security, GRC, risk management or compliance.
• Hands-on experience conducting third-party or vendor security risk assessments, including reviewing security questionnaires and supporting evidence.
• Good working knowledge of ISO 27001, NIST, CIS Controls and SOC reporting.
• Experience maintaining cyber risk registers, tracking remediation actions and working independently with internal and external stakeholders.
• The posting is particularly interested in candidates based across the UK and Europe who are available at short notice.

Location and work arrangement

• The role is remote across Europe.

Contract and rate

• Initial contract duration is three months, with potential extension to six months.
• The posting offers a competitive day rate.