Cybersecurity Risk and Compliance Associate

Cybersecurity Risk and Compliance Associate

London, United Kingdom

The Role

Teneo is looking for a Cybersecurity Risk and Compliance Associate to help turn our cybersecurity strategy into measurable outcomes. You will join the Information Security and Risk team and play an important role in strengthening assurance, improving risk visibility and supporting delivery of priority security initiatives across our global business.

Working with colleagues across Security, IT, Legal, Procurement and the wider business, you will help keep controls effective and audit-ready, support the timely remediation of risk and provide credible assurance to clients and auditors. This is a varied role with the opportunity to build experience across security governance, compliance, third-party risk and programme delivery.

Responsibilities

Security assurance, compliance and audit readiness

• Support risk and controls assessments, including control walkthroughs, evidence gathering, gap analysis and remediation tracking.
• Coordinate evidence and actions for external audits and compliance assessments, including ISO 27001, SOC 2 and Cyber Essentials.
• Maintain clear, reusable control documentation and audit evidence so assurance activity is efficient, consistent and audit-ready.
• Track risk-treatment actions, owners and deadlines, validate closure evidence and elevate delivery concerns when needed.

Governance, reporting and insight

• Help create and maintain security policies, standards, procedures and control descriptions, supporting review, approval and adoption across the business.
• Maintain security metrics, dashboards and action trackers covering audit findings, remediation, risk exceptions, third-party risk and other priority indicators.
• Bring structure to complex inputs and turn evidence, data and stakeholder feedback into clear reporting and practical recommendations.

Third-party risk and client assurance

• Support client security due diligence by coordinating accurate responses, evidence packs and control narratives with relevant internal teams.
• Assist with third-party risk assessments, including scoping, evidence review, findings, remediation and follow-up.
• Help improve TPRM playbooks, templates and reporting, and support the integration of risk review into vendor onboarding, renewal and change processes.

Cybersecurity programme and operational risk support

• Support delivery of Teneo’s cybersecurity roadmap by tracking initiatives, dependencies, risks and stakeholder actions.
• Identify recurring control weaknesses and operational pain points, and help develop practical improvements through clearer ownership, better measurement and appropriate automation.
• Contribute to governance and assurance activities supporting vulnerability management, patching, access reviews, secure configuration and logging controls.

Requirements

• Relevant experience in technology risk, cybersecurity governance, compliance, audit support, third-party risk or a related field.
• Working knowledge of control-based assurance and common frameworks such as ISO 27001, SOC 2 or Cyber Essentials; familiarity with NIST is beneficial.
• Strong analytical and organisational skills, with the ability to manage evidence, actions and deadlines across several workstreams.
• Clear written and verbal communication skills, with confidence working collaboratively across technical and business teams.
• A practical, detail-oriented approach and the curiosity to identify improvements rather than simply administer existing processes.

What We Can Offer

• Competitive salary (depending on experience)
• 28 days holiday
• Discretionary bonus
• Annual salary review
• Pension (with company contribution: 5% of annual salary)
• Extensive investment in personal development & learning
• Enhanced maternity and paternity leave (depending on length of service) and shared parental leave
• Private medical insurance
• Group Income protection
• Life assurance
• Cycle to work schemes
• Season ticket loans
• Regular social, cultural and charitable activities
• Flexible working with office laptop and phone provided

About Teneo

Teneo is the global CEO advisory firm. We partner with our clients globally to do great things for a better future.

Drawing upon our global team and expansive network of senior advisors, we provide advisory services across our five business segments on a stand‑alone or fully integrated basis to help our clients solve complex business challenges. Our clients include a significant number of the Fortune 100 and FTSE 100, as well as other corporations, financial institutions and organisations.

Our full range of advisory services includes strategic communications, investor relations, financial transactions and restructuring, management consulting, physical and cyber risk, organisational design, board and executive search, geopolitics and government affairs, corporate governance and ESG.

The firm has more than 2,000 employees located in 50+ offices around the world.

UK Demographic Set

Teneo are passionate about creating an inclusive workplace that promotes and values diversity. We ensure that all employees and candidates are treated fairly and we strive to ensure that our company is representative of all sections of society. We value people as individuals with diverse opinions, cultures, lifestyles and circumstances. Each employee should be respected and valued and able to give their best as a result. We want to ensure our workplace in London continues to be one where different voices are heard, valued and embraced – for the benefit of our employees and working culture, our clients and the quality of our work, as well as for the ultimate performance of our business. We are committed to equal opportunities for all and provide these opportunities irrespective of an individual’s race, ethnic origin, disability, age, nationality, national origin, sex or sexual orientation, gender reassignment, pregnancy or maternity, religion or belief, marital status and social class. We oppose all forms of unlawful and unfair discrimination.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Teneo external feed for LinkedIn ’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.