Cyber Security Risk Analyst

We are looking for an experienced Cyber Security Risk Analyst to support an exciting digital transformation programme within UK policing.

This is an opportunity to work on innovative technology initiatives, including AI, cloud infrastructure and digital services, helping to ensure that new solutions are developed and deployed securely.

Working closely with technical, delivery and security teams, you will provide practical security assurance, risk assessments and guidance across a range of evolving requirements., * Conduct security risk assessments for new software, hardware, applications and technology solutions.

• Provide security assurance for integrations between AI platforms and existing IT infrastructure.
• Support security and compliance requirements across Azure cloud environments and future cloud infrastructure.
• Ensure products and services follow Security by Design (SbD) principles throughout development and deployment.
• Review software dependencies, packages and technical configurations to identify potential security risks.
• Provide security advice and guidance to technical teams, developers and programme stakeholders.
• Ensure compliance with relevant national policing security policies, standards and regulatory requirements.
• Work with internal and external stakeholders to support security governance, risk management and assurance activities.
• Identify security vulnerabilities and recommend practical mitigation measures.

• Active SC and NPPV3 security clearance is mandatory.
• Strong background in cyber security risk management, information security or security assurance.
• Experience conducting technical security risk assessments and providing security recommendations.
• Good understanding of cloud security, particularly Microsoft Azure.
• Knowledge of Security by Design principles and secure software development practices.
• Experience assessing security risks associated with software, infrastructure and system integrations.
• Understanding of security governance, compliance frameworks and industry best practices.
• Ability to communicate technical security risks clearly to both technical and non-technical stakeholders.

Desirable Experience

• Previous experience working within UK policing, national security, central government or other highly regulated environments.
• Familiarity with national policing security standards and policies.
• Experience supporting AI platforms, cloud-based applications or emerging technologies.
• Knowledge of NCSC guidance, ISO 27001 and NIST security frameworks.
• Experience working with multidisciplinary DDaT teams.