> Markdown version of [/jobs/ext/4666320-security-risk-analyst](https://www.wearedevelopers.com/jobs/ext/4666320-security-risk-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Risk Analyst

- **Company:** Nominet
- **Location:** Oxford, United Kingdom
- **Contract:** Permanent contract
- **Skills:** Identity and Access Management, Software Vulnerability Management, CIS Benchmarks
- **Published:** November 11, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=15ff66671923e13d

## About the Role

* You'll have experience supporting, managing, implementing or auditing security risk, compliance or assurance activity.
 * You can assess controls and risks, work with owners on practical actions, and maintain accurate, auditable records.
 * Knowledge of information security standards or guidance, such as ISO 27001, NIST, CIS Controls or NCSC guidance.
 * An understanding of supplier security risk and a broad range of controls, including access management, vulnerability management and incident response.
 * The ability to analyse qualitative and quantitative information, explain findings clearly, and work with stakeholders to resolve issues.
 * Strong analytical and communication skills, with the ability to explain risks clearly, work with stakeholders and maintain accurate records.

## Description

As a Cyber Security Risk Analyst, you'll help Nominet understand and manage cyber and information security risk across our infrastructure, services, suppliers and data. Security and resilience are central to our work, and this role helps ensure risks are recognised, owned and addressed.

You'll identify and assess risks and control gaps, help clarify security obligations, and make sure appropriate treatment plans are in place. Working with colleagues across technology, operations, procurement and the wider business, you'll assess controls, track remediation and turn complex security information into clear, practical advice. In doing so, you'll help build a risk-aware culture where colleagues understand security risks and their responsibilities.

This role will suit someone who enjoys detailed analysis, exercises sound judgement and communicates well with people outside security. You'll take a proportionate approach to risk and keep accurate records that support good decisions.

What You'll Be Doing:

 * Assess security risks and controls across systems, projects, business areas and suppliers, using relevant standards and guidance such as ISO 27001, NIST, CIS Controls and the NCSC Cyber Assessment Framework.
 * Identify control gaps and track risk treatment plans, exceptions, corrective actions and remediation with their owners.
 * Support supplier security assessments and follow agreed actions through to completion.
 * Maintain clear records of risks, controls, compliance obligations and assurance activity so stakeholders can understand risk exposure and progress.
 * Help improve Nominet's security risk approach, policies and standards, keeping them clear and proportionate.