At a Glance
- Tasks: Strengthen cyber resilience and manage compliance across the organisation.
- Company: Join the Imperial War Museum, a unique institution with a rich history.
- Benefits: Competitive salary, full-time hours, and a chance to make a real impact.
- Other info: Dynamic role with opportunities for growth in a meaningful environment.
- Why this job: Be at the forefront of cyber security and protect vital information assets.
- Qualifications: Experience in cyber security governance and strong analytical skills required.
The predicted salary is between 63000 - 77000 £ per year.
As Cyber Assurance & Risk Analyst, you'll play a key role in strengthening IWM's cyber resilience, compliance and third-party risk management. Your work will help ensure cyber risks are identified, managed and reported effectively across the organisation.
As Cyber Assurance & Risk Analyst, you will strengthen IWM's cyber resilience through assurance, compliance and third-party risk management. Working with internal teams and suppliers, you'll help identify, assess and manage cyber risks, support Cyber Essentials and GovAssure compliance activities, and provide governance reporting to senior stakeholders. You'll also help embed secure-by-design principles into technology projects and ensure suppliers meet IWM's cyber security requirements, helping to keep systems, services and information assets secure and resilient.
Job Requirements
- Experience of cyber security governance, assurance, compliance or risk management activities.
- Knowledge of recognised cyber security frameworks and standards such as Cyber Essentials, NCSC guidance, ISO 27001 or equivalent.
- Experience managing compliance evidence, audit activities or regulatory submissions.
- Experience of supplier or third-party cyber risk assessment and management processes.
- Strong analytical skills with the ability to identify risks and communicate findings clearly to a range of stakeholders.
- Experience producing reports, dashboards or management information for governance forums and senior audiences.
- Experience of GovAssure, Cyber Essentials Plus, government cyber assurance frameworks, cyber risk management platforms and experience within the public sector, cultural sector or other regulated environments would be advantageous.
Job Responsibilities
- Coordinate and manage IWM's Cyber Essentials certification, including evidence gathering, submission management and remediation tracking.
- Lead GovAssure submissions through control mapping, evidence collation and stakeholder engagement.
- Manage compliance against Civil Aviation Authority (CAA) cyber security requirements and other relevant standards.
- Maintain assurance documentation and support continuous compliance against recognised cyber security frameworks.
- Embed secure-by-design principles into technology and digital projects from initiation through to delivery.
- Review proposed solutions and provide assurance that appropriate security controls are implemented before go-live.
- Own and operate IWM's third-party cyber risk management platform, supporting supplier onboarding, assessments and ongoing monitoring.
- Identify, assess, manage and escalate cyber risks across the supply chain, tracking remediation activities where required.
Cyber Security & Risk Analyst in London employer: Arts Council England
Arts Council England is an exceptional employer, offering a supportive and inclusive work culture that values flexibility and employee well-being. With a focus on professional growth, employees benefit from generous annual leave, a final salary pension scheme, and opportunities to lead innovative digital projects in a collaborative environment. Located in Manchester, the role allows for hybrid working, ensuring a balanced approach to work and life while contributing to meaningful organisational change.
