Principal Cyber Risk Management & Assurance Advisor

Principal Cyber Risk Management & Assurance Advisor

Contract | Inside £750 daily IR35

Location: London, Bristol or Manchester (Hybrid – 3 x onsite days per week)

We are seeking an experienced Principal Cyber Risk Management & Assurance Advisor to join a major public sector organisation undergoing significant digital and technology transformation.

This is a senior advisory role focused on cyber risk management, security assurance, governance, and secure-by-design principles across large-scale, complex technology environments.

Key Responsibilities

• Provide expert leadership on cyber risk management and assurance activities.




• Assess and manage security risks across enterprise technology programmes and services.




• Support the implementation of secure-by-design principles throughout project and operational lifecycles.




• Provide assurance against security standards, regulatory requirements and risk frameworks.




• Engage with senior stakeholders to influence risk-based decision making.




• Review and challenge technical designs, architectures and security controls.




• Contribute to cloud and digital transformation programmes from a cyber security perspective.

Essential Experience

• Extensive experience in cyber security risk management and assurance.




• Strong understanding of security governance, risk frameworks and control assurance.




• Demonstrable experience applying secure-by-design principles.




• Experience assessing and managing cyber risks within large, complex organisations.




• Ability to communicate security risks effectively to both technical and non-technical stakeholders.




• Active SC Clearance (must be transferable).

Desirable Experience

• Experience working within central government, wider public sector or other highly regulated environments.




• Experience within financial services or similarly regulated sectors.




• Knowledge of AI assurance and emerging technology risk management.




• Professional certifications such as CISM, CISP or equivalent.

Technical Knowledge

• Cloud security




• AWS




• Cloud-native environments




• SaaS platforms




• Security assurance frameworks




• Risk management methodologies

Location & Working Pattern

• Candidates can be based in London, Bristol or Manchester.




• Hybrid working arrangement with an expectation of approximately 3 days per week onsite, with some flexibility available.




• Occasional travel to other UK sites may be required.

Clearance Requirement

Candidates must hold active SC Clearance. Unfortunately, candidates with expired or lapsed clearance cannot be considered.

#J-18808-Ljbffr…