At a Glance
- Tasks: Identify and mitigate cyber risks while collaborating with IT and compliance teams.
- Company: Dynamic organisation focused on Governance, Risk and Compliance in cybersecurity.
- Benefits: Competitive day rate, hybrid/remote work, and a chance to work on critical projects.
- Why this job: Make a real impact in cybersecurity and enhance your skills in a fast-paced environment.
- Qualifications: 3-5 years in Cyber Risk assessment and strong communication skills.
- Other info: Opportunity for career growth in a regulated industry with a focus on innovation.
Location: London/Southeast - Hybrid / Remote working
Duration: 6+ months (12+ months programme of work)
Day Rate: Up to Β£600 a day DOE (Inside IR35)
Start date: ASAP.
Overview
We are seeking a skilled, proactive, and analytical Cyber Risk Analyst to support the Governance, Risk and Compliance (GRC) function of my client. You will be responsible for identifying, assessing, and helping to mitigate Cyber, Information Security, and OT security risks across the organisation.
You will work closely with IT, compliance, security assurance, and business stakeholders to ensure the organisation's cyber risk posture aligns with regulatory requirements and recognised industry best practices.
Essential skills and Experience
- 3-5 years' experience in an Information Security or Cyber Risk assessment role.
- Ability to clearly articulate Cyber Risk to both technical and non-technical audiences.
- Hands-on experience working with recognised Cyber Risk management frameworks and methodologies such as:
- ISO 27005
- Or other structured cyber risk quantification approaches
- NIS Directive - Cyber Assessment Framework (CAF)
- ISO/IEC 27001 and ISO/IEC 27002
- NIST Cybersecurity Framework (CSF) 2.0
- IEC 62443
- GDPR and the Data Protection Act
Desirable Skills
- Experience working in regulated or Critical National Infrastructure environments.
- Familiarity with OT and Industrial control system (ICS) security risk.
- Strong stakeholder engagement and communication skills.
For further information, please apply online and I will contact you to discuss the role in more detail.
Cyber Risk Analyst - OT - ISO27005 - Risk Assessements employer: TRIA
Contact Detail:
TRIA Recruiting Team
StudySmarter Expert Advice π€«
We think this is how you could land Cyber Risk Analyst - OT - ISO27005 - Risk Assessements
β¨Tip Number 1
Network like a pro! Reach out to your connections in the cyber risk field and let them know you're on the lookout for opportunities. You never know who might have a lead or can put in a good word for you.
β¨Tip Number 2
Prepare for interviews by brushing up on your knowledge of ISO 27005 and other frameworks mentioned in the job description. Be ready to discuss how you've applied these in past roles, as this will show you're the right fit for the Cyber Risk Analyst position.
β¨Tip Number 3
Donβt just wait for job postings! Keep an eye on our website for openings and apply directly. This shows initiative and can help you stand out from the crowd.
β¨Tip Number 4
Practice articulating complex cyber risk concepts in simple terms. Being able to communicate effectively with both technical and non-technical audiences is key in this role, so get comfortable explaining your ideas clearly.
We think you need these skills to ace Cyber Risk Analyst - OT - ISO27005 - Risk Assessements
Some tips for your application π«‘
Tailor Your CV: Make sure your CV speaks directly to the skills and experience mentioned in the job description. Highlight your 3-5 years of experience in Cyber Risk assessment and any hands-on work with frameworks like ISO 27005.
Craft a Compelling Cover Letter: Use your cover letter to tell us why you're the perfect fit for this role. Be sure to mention your ability to communicate Cyber Risk to both technical and non-technical audiences, as this is key for the position.
Showcase Relevant Experience: When detailing your past roles, focus on your experience with compliance documentation and risk management practices. Mention any specific projects or achievements that align with the responsibilities outlined in the job description.
Apply Through Our Website: We encourage you to apply through our website for a smoother application process. This way, we can easily track your application and get back to you quickly!
How to prepare for a job interview at TRIA
β¨Know Your Cyber Risk Frameworks
Make sure you brush up on ISO 27005 and other relevant frameworks before the interview. Be ready to discuss how you've applied these methodologies in your previous roles, as this will show your practical experience and understanding of cyber risk management.
β¨Communicate Clearly
Since you'll need to articulate cyber risks to both technical and non-technical audiences, practice explaining complex concepts in simple terms. This will demonstrate your ability to engage with various stakeholders effectively, which is crucial for the role.
β¨Showcase Your Compliance Knowledge
Familiarise yourself with compliance documentation related to industry standards like NIS Directive and GDPR. Be prepared to discuss how you've maintained compliance in past positions, as this will highlight your attention to detail and understanding of regulatory requirements.
β¨Engage with Stakeholders
Think of examples where you've successfully engaged with different stakeholders in your previous roles. Highlighting your strong communication skills and ability to collaborate will be key, especially since this role involves working closely with IT and business teams.