At a Glance
- Tasks: Lead security assessments and analyse cyber threats to enhance resilience.
- Company: Dynamic financial institution focused on cybersecurity innovation.
- Benefits: Hybrid working, competitive rates, and opportunities for professional growth.
- Other info: Collaborative team environment with opportunities for mentoring and knowledge sharing.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technologies.
- Qualifications: 7+ years in cybersecurity with strong analytical and communication skills.
The predicted salary is between 63000 - 77000 £ per year.
Duration: 1 year contract
Hybrid Working - 8 days onsite per month - the rest is remote working
About the Team
The Product-Based Risk Assessment (PBRA) service conducts recurring security assessments of applications, services, and technologies to identify emerging threats, evaluate control effectiveness, and drive remediation that strengthens the clients cyber resilience. The team supports business and technology stakeholders by assessing cyber security risks and ensuring alignment with the Banks security standards and risk appetite.
Key Accountabilities
- Product-Based Risk Assessments
- Lead end-to-end Product-Based Risk Assessments (PBRA) for critical applications, platforms, and technology services.
- Analyse application architectures, business processes, information flows, and supporting infrastructure.
- Identify and assess cyber threats, vulnerabilities, control weaknesses, and potential business impacts.
- Evaluate the design and effectiveness of security controls using clients security frameworks and standards.
- Assess residual risks and propose actionable remediation plans.
- Security Risk Analysis
- Perform security risk assessments using recognised methodologies and industry frameworks.
- Evaluate risks related to infrastructure, software, cloud services, networks, third-party integrations, and information assets.
- Contribute to threat modelling and attack surface analysis activities.
- Support technology-focused assessments such as cloud, AI, and emerging technology evaluations.
- Stakeholder Engagement
- Act as the primary security assessment contact for business and IT stakeholders.
- Facilitate workshops, interviews, and assessment review sessions.
- Challenge assumptions and provide expert security guidance to delivery and operations teams.
- Build trusted relationships across CISO, CTO, Architecture, Risk Management, and Engineering teams.
- Reporting & Governance
- Produce high-quality assessment reports, risk summaries, and executive-level communications.
- Present findings and recommendations to senior management and governance bodies.
- Track remediation plans and risk treatment activities through closure.
- Support internal and external audit activities as required.
- Continuous Improvement
- Contribute to the evolution of the PBRA service, methodologies, tools, and operating model.
- Help drive the transition toward data-enabled and automated security assessment capabilities.
- Identify opportunities to improve efficiency, consistency, and risk coverage across assessments.
- Support knowledge sharing and mentoring of junior analysts.
Required Skills & Experience
- Technical Skills
- Strong understanding of cybersecurity principles, controls, and risk management practices.
- Knowledge of application security, cloud security, infrastructure security, and network security.
- Experience conducting security assessments, threat modelling, or risk analyses.
- Familiarity with industry frameworks and standards such as:
- NIST Cyber Security Framework
- ISO 27001
- CIS Controls
- Secure Controls Framework (SCF)
- DORA
- ANSSI
- EBIOS RM
- OWASP
- Professional Experience
- Minimum 7 years of experience in Information Security, Cyber Risk, Security Assurance, or Security Architecture.
- Experience leading complex security assessments across large technology environments.
- Experience working with senior business and technology stakeholders.
- Strong report-writing and presentation skills.
- Personal Competencies
- Strong analytical and critical-thinking capabilities.
- Excellent communication and stakeholder management skills.
- Ability to challenge constructively and influence decision-making.
- Self-driven with strong ownership and accountability.
- Pragmatic, risk-based mindset.
- Comfortable operating in a complex, regulated environment.
Senior Security Analyst - Product-Based Risk Assessment (PBRA) in London employer: Salt
Join a forward-thinking investment management platform in London, where innovation meets opportunity. As a Senior Business Analyst, you'll thrive in a collaborative work culture that values your expertise and encourages professional growth through continuous learning and development. Enjoy the flexibility of a hybrid working model while contributing to cutting-edge AI-driven investment solutions that make a real impact in the financial services sector.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Security Analyst - Product-Based Risk Assessment (PBRA) in London
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like Salt.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like Salt.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like Salt.
We think you need these skills to ace Senior Security Analyst - Product-Based Risk Assessment (PBRA) in London
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives Salt a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at Salt; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at Salt.
How to prepare for a job interview at Salt
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with Salt for the Senior Security Analyst - Product-Based Risk Assessment (PBRA), be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at Salt.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Senior Security Analyst - Product-Based Risk Assessment (PBRA) role at Salt.
