Principal Cyber Risk Management and Assurance Advisor

Key Responsibilities

• Lead cyber and information security risk assessments and assurance across major digital services.
• Produce formal risk assessments and risk treatment plans, ensuring risks and controls align with business risk appetite.
• Provide assurance across cloud and SaaS environments, including compliance against NCSC Cloud Security Principles.
• Support and promote Secure by Design practices across digital delivery.
• Provide security architectural advice and support technical and business decision-making.
• Engage with senior technical and business stakeholders, presenting risks and recommending appropriate mitigations and controls.
• Support security governance, assurance reviews and risk management activities.
• Mentor and advise digital teams, helping to strengthen cyber risk capability.

Essential Skills & Experience

• Strong experience delivering cyber security risk assessments and assurance within large, complex digital environments.
• Excellent knowledge of cyber risk management, threat modelling and security architecture.
• Strong cloud security experience, ideally including AWS, SaaS environments and cloud governance.
• Experience applying cyber security standards, regulatory frameworks and Secure by Design principles.
• Proven ability to assess risks, recommend controls and demonstrate tangible security outcomes.
• Excellent stakeholder management skills with the ability to influence and advise senior stakeholders.
• Strong communication skills, with the ability to translate complex security risks into clear, actionable recommendations.
• Experience working within Government, critical infrastructure, financial services or another regulated environment would be advantageous.