Senior Cybersecurity Risk Analyst in London

Location: London

The Cyber Security Division (CSD) is an award-winning group of cyber security experts who are committed to keeping the Bank of England safe from cyber-attacks and incidents. In 2023, CSD was recognised with the Financial Services award of the year at the National Cyber Awards. This followed previous award wins for individuals within our team at the WeAreTechWomen and Women in IT Awards, and Central Banking's Best Cyber Resilience Initiative.

Within Cyber Security, you will be working with people who are passionate about protecting the Bank from cyber security incidents. Given the importance and complexity of technology for the Bank of England, the security challenges are rarely straightforward and often span multiple systems hosted in our own data centres, in the cloud and as SaaS, requiring cross-team working and deep technical expertise to address them effectively. You'll assess the security of solutions being considered by Bank teams, including SaaS solutions.

By collaborating closely with colleagues across Technology and throughout the organisation, you will play a key role in safeguarding the Bank and its information. Aligned to industry best-practice, staff are encouraged to develop their skills both internally and externally, through mentoring, training and formal qualifications.

The Cyber Security Division advises business areas on how best to manage and mitigate the cyber security risks in one of the Bank's most complex and fastest growing risk areas: the supply chain. As a Senior Cyber Risk and Assurance Analyst, you'll support the assessment of suppliers, partners, software, hardware and services that underpin critical financial operations. You'll work at the intersection of business, risk, and cyber security, gaining hands-on experience while helping ensure that organisations, equipment and processes that are essential to the UK economy meet appropriate security standards.

• Reviewing responses to cyber and risk questionnaires
• Engaging with stakeholders to understand how they manage security and data
• Supporting, then performing, risk assessments and assurance activities
• Identifying control gaps and helping shape pragmatic recommendations
• Contributing to clear, concise reports for senior stakeholders

You'll be supported by experienced colleagues and given the opportunity to develop in a high-impact area of cyber security. Time for training and exams will be provided to help you progress your career.

We are particularly interested in candidates who bring real-world business experience and want to apply it in a cyber context.

• A professional with a few years' experience in business, consulting, procurement, audit, risk, or operations
• Looking to transition into cyber security from a related field
• Already in a junior cyber, risk, compliance or governance role and seeking a new challenge with greater impact

Above all, you're someone who:

• Enjoys analysing information and understanding how organisations work
• Is diligent, curious, proactive, and comfortable asking questions
• Communicates clearly with both technical and non-technical stakeholders

What We Offer:

• A pathway into cyber security, compliance, risk, and resilience careers
• Training and support for certifications
• The opportunity to work on issues of national importance
• A collaborative, inclusive, and intellectually stimulating environment
• A strong focus on work-life balance and flexible working

Role Requirements:

Minimum Criteria:

• Experience writing clear reports and presenting them to groups, with excellent English reading and comprehension
• Strong analytical and problem-solving skills
• Experience of liaising with business stakeholders and suppliers with confidence, to reach agreement
• Interest in cyber security, risk, or governance
• Ability to communicate complex choices simply and effectively
• Relevant professional qualification (e.g. CISSP, BCS Foundation Certificate in Data Protection, BCS CISMP, ISO/IEC 27001 Foundation, BCS Foundation Certificate in Cyber Security, CompTIA Security+, ISC2 Certified in Cybersecurity, BCS Foundation Certificate in IT, CompTIA ITF+, CompTIA A+, CompTIA Network+, ISO 31000 Foundation).

Essential Criteria:

• Attention to detail and a structured approach to work
• Eager to learn about IT network architecture and components, software/application security, infrastructure security, cloud.

Criteria:

• Proven experience in technical roles (preferably with a cyber security element).
• Experience working in cyber security consultancy or architecture roles within highly regulated sectors (e.g. financial/insurance, defence, civil nuclear, intelligence).
• Experience working in a professional/business environment
• Experience conducting technical risk assessments
• Exposure to supplier management, audit, compliance, or risk
• Awareness of cyber security concepts (e.g. threats, controls, data protection)
• Experience analysing technical problems to identify potential security concerns
• Reviewing IT architecture to identify potential security gaps and/or vulnerabilities
• Assessing compliance with IT security policies and technical standards
• Ability to work with limited supervision.

By applying for this role you will automatically be considered for a Junior Cyber Risk and Assurance Analyst role if we do not feel you meet these requirements.

The Bank values diversity, equity and inclusion. We play a key role in maintaining monetary and financial stability, and to do that effectively, we believe we need a workforce that reflects the society we serve.

At the Bank of England, we want all colleagues to feel valued and respected, so we're working hard to build an inclusive culture which supports people from all backgrounds and communities to be at their best at work. We celebrate all forms of diversity, including (but not limited to) age, disability, ethnicity, gender, gender identity, race, religion, sexual orientation and socioeconomic status. We welcome applications from individuals who work flexibly, including job shares and part time working patterns.

From 1st October 2026, we expect all our colleagues to spend a minimum of 50% of their working time in the office per month. This is to capitalise on the benefits of working together in person across teams, while maintaining the flexibility offered by home working.

Finally, we're proud to be a member of the Disability Confident Scheme. If you wish to apply under this scheme, you should check the box in the 'Candidate Personal Information' under the 'Disability Confident Scheme' section of the application.

We encourage flexible working, part time working and job share arrangements. Part time salary and benefits will be on a pro-rated basis as appropriate.

In addition, we also offer a comprehensive benefits package as detailed below:

• Currently a non-contributory, career average pension giving you a guaranteed retirement benefit of 1/80th of your annual salary for every year worked. There is the option to increase your pension (to 1/65th) or decrease (to 1/105th) in exchange for salary through our flexible benefits programme each year. The Bank has the discretion to vary standard accrual rates and dial up and dial down rates at any time and to withdraw dial up and dial down options at any time.
• A discretionary performance award based on a current award pool.
• An 8% benefits allowance with the option to take as salary or purchase a wide range of flexible benefits.
• 26 days' annual leave with option to buy up to 12 additional days through flexible benefits.
• Private medical insurance and income protection.

Employment in this role will be subject to the National Security Vetting clearance process (and typically can take between 6 to 12 weeks post offer) and the passing of additional Bank security checks in accordance with the Bank policy. Further information regarding the vetting and security clearance requirements for the role will be provided to the successful applicant, and information about how the Bank processes personal data for these purposes, is set out in the Bank's Privacy Notice.

The Bank of England welcomes applications from all candidates, but as a UK Visas and Immigration (UKVI) approved sponsor, we have a responsibility to comply with the Immigration Rules and guidance. As such, our ability to employ individuals who require sponsorship for immigration purposes is limited. The Bank cannot guarantee that you and/or the role you are applying for will be eligible for sponsorship and that any application made to UKVI will be successful.

The assessment process will comprise of two interview stages and will include capability testing. This role closes on 10th September. Please apply online, ensuring that you complete your work history and answer ALL the application questions fully and in detail as your application will not be considered if all mandatory questions are not fully completed.