Principal Cyber Risk Management & Assurance Advisor

Overview

In this role, you will lead cyber risk management and assurance activities within a major public sector transformation programme. You will work with senior stakeholders to shape risk-based decisions and ensure secure-by-design principles across large-scale, complex technology environments. You will review designs, architectures and controls, and contribute to cloud and digital transformation programmes from a cyber security perspective. This high-impact advisory position offers exposure to governance, risk frameworks and regulatory requirements, with a clear focus on meaningful risk reduction and secure delivery.

Responsibilities

• Provide expert leadership on cyber risk management and assurance activities
• Assess and manage security risks across enterprise technology programmes and services
• Support the implementation of secure-by-design principles throughout project and operational lifecycles
• Provide assurance against security standards, regulatory requirements and risk frameworks
• Engage with senior stakeholders to influence risk-based decision making
• Review and challenge technical designs, architectures and security controls
• Contribute to cloud and digital transformation programmes from a cyber security perspective

Key requirements

• Extensive experience in cyber security risk management and assurance
• Strong understanding of security governance, risk frameworks and control assurance
• Demonstrable experience applying secure-by-design principles
• Experience assessing and managing cyber risks within large, complex organisations
• Ability to communicate security risks effectively to both technical and non-technical stakeholders
• Active SC Clearance (must be transferable)

• Stakeholder engagement
• Communication across technical and non-technical audiences
• Advisory and influencing能力
• Cloud security
• AWS
• Cloud-native environments

…