Security Risk Analyst

Protect our information, systems and services - clear risk analysis to secure our community. As a Security Risk Analyst, you'll provide proactive cyber risk analysis to safeguard our digital systems and protect resident data. We're all in to strengthen our security posture and deliver resilient services for everyone.

Working Style: You'll be based in the Borough for three days a week, playing a key role in serving the local community. Whether you're working on-site or collaboratively across teams, you'll be part of a dedicated team helping to keep our organisation secure.

What you'll be doing: Your days will be varied, focusing on providing clear, proactive and evidence-based cyber risk analysis to help us understand, prioritise and manage threats. You'll review updates to the cyber risk register, track agreed actions, identify vulnerabilities and escalate concerns when progress slows. Collaboration is vital, and you'll work closely with ICT, Information Governance, service areas and suppliers to assess risks linked to new systems, contracts, incidents or audits. Vetting suppliers who handle Council information will be a key responsibility. You'll ensure security questionnaires are completed, evaluate threats and likelihoods and agree practical mitigations while managing the supplier risk system. Beyond the technical tasks, you'll translate complex issues into clear business language for senior leaders and governance boards, championing strong security practices and helping embed a risk-aware culture across the entire organisation.

What you'll bring: You'll bring a degree in ICT, Computer Science or comparable experience within digital, data and technology, alongside a continuous commitment to professional development. Experience in cyber security, information risk management or information governance within a complex organisation is essential. You'll need a strong understanding of cyber threats, attack vectors and risk assessment frameworks such as the NCSC Cyber Assessment Framework, ISO 27001 or NIST. Your ability to translate technical risks into clear, business-focused language is crucial, as are your excellent communication and stakeholder engagement skills. You must be proactive, with the analytical depth to manage competing priorities and drive follow-through on risk actions. A firm understanding of modern technology environments, zero-trust delivery, incident response and UK public sector regulatory requirements like PSN CoCo and UK GDPR is required, combined with a clear commitment to fairness, integrity and equal opportunities.

Why join us: At RBKC, we're all in - investing in our people, our communities and our future. This new role offers a unique opportunity to make a council-wide impact following a major cyber-attack, backed by excellent senior buy-in and upward support. You'll be strategically positioned to shape our security approach from day one. We support your career growth with competitive pay, continuous training opportunities, flexible working and comprehensive wellbeing perks to ensure you thrive.

About us: Kensington and Chelsea is home to diverse communities, thriving businesses and unique local places. Everything we do is focused on supporting our residents, strengthening our approach and creating a fairer borough. As a competent and caring Council, we take pride in our work every day, ensuring our services are delivered with care and competence. We listen to our residents, act with integrity and work together to build a borough that is greener, safer and fairer for all.

In this new role, you'll step into a critical mission following the cyber-attack in November 2025, playing an essential part in a wider organisational ICT and security restructure. Establishing a new role amidst a high volume of work brings real embedding challenges, but every ounce of effort pays off. When you commit fully, these challenges become opportunities for growth, allowing your risk analysis and supplier vetting to directly reinforce our wider brand and keep the Council secure.

Interview Details: Interviews will take place in person on 12th and 13th August 2026. Ready to join us? We're all in - are you? If you share our values and have the skills to contribute, we'd love to hear from you. Please apply online explaining how you meet the requirements set out in the person specification and job description.

We reserve the right to extend or close this vacancy early without warning subject to the volume of suitable applicants. We are committed to promoting equality and respecting diversity and welcome applications from all sections of the community. We are a Disability Confident Employer - committed to ensuring that our recruitment and selection process is inclusive and accessible. New hires will normally start at the minimum of the pay scale. However, a higher starting salary may be negotiated where a candidate demonstrates exceptional skills, knowledge, or experience. Employees receive annual salary increments until they reach the top of the pay scale, as well as any agreed cost of living pay awards.