Senior Cyber Secruity Analyst - GRC

About Baringa

Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with greater confidence and certainty. The firm works across energy and resources, financial services, government and public sector, consumer products and retail, pharmaceuticals and life sciences, manufacturing, and technology, media and telecoms, with capabilities spanning strategy, transformation and operational excellence – all powered by advanced technology, data, AI and digital innovation.

Our Cyber team are looking for an experienced Senior Cyber Security Analyst - GRC to join the team.

What you will be doing

• Develop a complete understanding of Baringa’s technology and information systems.
• Lead in the response to RFPs/audits, including supplier security due diligence and third-party audit and assurance activities.
• Identify and communicate current and emerging security threats and cyber risks.
• Lead a program of awareness-raising and training to deliver compliance and to foster a cyber conscious culture across the company.
• Actively lead on the definition, implementation and maintenance of corporate security policies, standards and procedures.
• Align organisational security strategy and infrastructure with overall business and information technology strategy.
• Manage company compliance with information security, policies, standards, contractual obligations and guidance through business managers and champions providing advice, support and guidance on risk based good practice.
• Lead on and produce technical security MI in support of governance and vulnerability management engagements.
• Lead on client engagement for any queries and requests regarding Baringa’s information technology security policies and processes.

Your skills and experience

• Experience in full-time operational Senior Cyber Security GRC.
• Experience of the Microsoft, AWS and other cloud technology stacks.
• Experience utilising emerging technologies to design and implement security solutions, monitoring and improving those solutions.
• Thorough understanding of relevant industry security standards and protocols including ISO27001, NIST, NSCS CAF, SOC, NIS 2 Directive and NCSC Cloud Security Principles.
• Background of consulting and engineering the design and development of security best practices, implementation of security measures, policies and processes to meet business goals, customer needs and regulatory requirements.
• Ability to use logic and reasoning to identify the strengths and weaknesses of IT systems, while seeking out vulnerabilities in IT infrastructures.
• Managing risk assessment procedures, policy formation, role-based authorisation methodologies, authentication technologies and security attack pathologies.
• Strong leadership, stakeholder management, and project/team-building skills, including the ability to lead teams and drive initiatives in multiple departments.

What a career at Baringa will give you

• Generous Annual Leave Policy: 5 weeks of annual leave, fully available at the start of each year, plus an additional 2 weeks of paid leave after 5 years continuous service.
• Flexible Working: Hybrid working policy and flexibility around taking unpaid leave.
• Corporate Responsibility Days: 3 days every year to help social and environmental causes.
• Wellbeing Fund: Annual People Fund to support and manage wellbeing through an activity of choice.
• Profit Share Scheme: All employees participate in the Baringa Group Profit Share Scheme.

Diversity and Inclusion

We are proud to be an Equal Opportunity Employer. We believe that creating an environment where everyone feels a sense of belonging is central to our culture and that diversity is paramount to driving creativity, innovation, and value for our clients and for our people.

Join us

All applications received will be reviewed by a member of our Talent Acquisition team. We never rely solely on automated screening or AI tools to make hiring decisions. Your application will be considered for employment without regard to race, ethnicity, religion, gender, gender identity or expression, sexual orientation, nationality, disability, age, faith or social background.