Principal Cyber Risk Management & Assurance Advisor

<p class="text-muted mb-3">Principal Cyber Risk Management & Assurance Advisor</p>

<p class="text-muted mb-3">Contract | Inside £750 daily IR35</p>

<p class="text-muted mb-3">Location: London, Bristol or Manchester (Hybrid - 3 x onsite days per week)</p>

<p class="text-muted mb-3">We are seeking an experienced Principal Cyber Risk Management & Assurance Advisor to join a major public sector organisation undergoing significant digital and technology transformation.</p>

<p class="text-muted mb-3">This is a senior advisory role focused on cyber risk management, security assurance, governance, and secure-by-design principles across large-scale, complex technology environments.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Provide expert leadership on cyber risk management and assurance activities.</p>

<p class="text-muted mb-3">Assess and manage security risks across enterprise technology programmes and services.</p>

<p class="text-muted mb-3">Support the implementation of secure-by-design principles throughout project and operational lifecycles.</p>

<p class="text-muted mb-3">Provide assurance against security standards, regulatory</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements and risk frameworks.</h5>

<p class="text-muted mb-3">Engage with senior stakeholders to influence risk-based decision making.</p>

<p class="text-muted mb-3">Review and challenge technical designs, architectures and security controls.</p>

<p class="text-muted mb-3">Contribute to cloud and digital transformation programmes from a cyber security perspective.</p>

<p class="text-muted mb-3">Essential Experience</p>

<p class="text-muted mb-3">Extensive experience in cyber security risk management and assurance.</p>

<p class="text-muted mb-3">Strong understanding of security governance, risk frameworks and control assurance.</p>

<p class="text-muted mb-3">Demonstrable experience applying secure-by-design principles.</p>

<p class="text-muted mb-3">Experience assessing and managing cyber risks within large, complex organisations.</p>

<p class="text-muted mb-3">Ability to communicate security risks effectively to both technical and non-technical stakeholders.</p>

<p class="text-muted mb-3">Active SC Clearance (must be transferable).</p>

<p class="text-muted mb-3">Desirable Experience</p>

<p class="text-muted mb-3">Experience working within central government, wider public sector or other highly regulated environments.</p>

<p class="text-muted mb-3">Experience within financial services or similarly regulated sectors.</p>

<p class="text-muted mb-3">Knowledge of AI assurance and emerging technology risk management.</p>

<p class="text-muted mb-3">Professional certifications such as CISM, CISP or equivalent.</p>

<p class="text-muted mb-3">Technical Knowledge</p>

<p class="text-muted mb-3">Cloud security</p>

<p class="text-muted mb-3">AWS</p>

<p class="text-muted mb-3">Cloud-native environments</p>

<p class="text-muted mb-3">SaaS platforms</p>

<p class="text-muted mb-3">Security assurance frameworks</p>

<p class="text-muted mb-3">Risk management methodologies</p>

<p class="text-muted mb-3">Location & Working Pattern</p>

<p class="text-muted mb-3">Candidates can be based in London, Bristol or Manchester.</p>

<p class="text-muted mb-3">Hybrid working arrangement with an expectation of approximately 3 days per week onsite, with some flexibility available.</p>

<p class="text-muted mb-3">Occasional travel to other UK sites may be required.</p>

<p class="text-muted mb-3">Clearance Requirement</p>

<p class="text-muted mb-3">Candidates must hold active SC Clearance. Unfortunately, candidates with expired or lapsed clearance cannot be considered.</p>

<p class="text-muted mb-3">Apply</p>

<p class="text-muted mb-3">If you have a strong background in cyber risk management, security assurance and secure-by-design practices within complex enterprise environments, we'd be keen to hear from you</p>