Cyber GRC Analyst

We are recruiting on behalf of a client in the Critical National Infrastructure (CNI) sector for Cyber GRC Analysts at intermediate and senior levels. These roles embed effective cyber risk management across a large, highly regulated organisation, identifying, assessing, and treating cyber risks in line with business objectives and enterprise risk frameworks.

What you’ll do

• Conduct cyber risk assessments across systems, services, and projects
• Maintain and update the cyber risk register, escalating significant risks
• Collaborate with ICT, business units, and project teams to embed risk management practices
• Support development of cyber risk frameworks, tools, and methodologies
• Advise on risk mitigation strategies and treatment plans
• Contribute to risk reporting for governance forums and regulators
• Monitor emerging threats and assess impact on the organisation’s risk posture
• Promote cyber risk awareness and training
• Lead complex risk programmes, influence senior stakeholders, and develop innovative solutions to emerging risk scenarios (senior level)

• Experience in cyber risk management, ideally in a regulated or critical infrastructure environment
• Understanding of cyber risk frameworks (ISO 27005, NIST, FAIR) and the NCSC CAF
• Degree or equivalent in cyber security, risk management, or a related field
• Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager)
• Working knowledge of FAIR or equivalent quantitative frameworks, scenario-based risk analysis, Monte Carlo simulations, and quantified risk models
• Practical experience using AI tools for risk analysis and scenario generation, with strong prompt engineering skills
• Advanced Excel; Python/R and CRQ tools (desirable)
• Familiarity with threat intelligence, incident datasets (VERIS), and control frameworks (NIST, ISO)
• Ability to translate quantitative outputs into clear business narratives
• Desirable: nuclear/CNI experience; ONR SyAPs, NISR 2003, HMG SPF
• 3-8 years in cyber risk, security, or analytical roles

• Annual bonus of up to 15%
• Defined contribution pension - company matches up to 13.5% for a 7% employee contribution
• 30 days annual leave + bank holidays, plus option to purchase 2.5 extra days
• Ability to carry over 10 days annual leave each financial year
• Paid Sick Leave