Cyber Assurance & Risk Analyst

Job Requirements


Experience of cyber security governance, assurance, compliance or risk management activities.

Knowledge of recognised cyber security frameworks and standards such as Cyber Essentials, NCSC guidance, ISO 27001 or equivalent.

Experience managing compliance evidence, audit activities or regulatory submissions.

Experience of supplier or third-party cyber risk assessment and management processes.

Strong analytical skills with the ability to identify risks and communicate findings clearly to a range of stakeholders.

Experience producing reports, dashboards or management information for governance forums and senior audiences.

Experience of GovAssure, Cyber Essentials Plus, government cyber assurance frameworks, cyber risk management platforms and experience within the public sector, cultural sector or other regulated environments would be advantageous.




Job Responsibilities

Coordinate and manage IWM's Cyber Essentials certification, including evidence gathering, submission management and remediation tracking.

Lead GovAssure submissions through control mapping, evidence collation and stakeholder engagement.

Manage compliance against Civil Aviation Authority (CAA) cyber security requirements and other relevant standards.

Maintain assurance documentation and support continuous compliance against recognised cyber security frameworks.

Embed secure-by-design principles into technology and digital projects from initiation through to delivery.

Review proposed solutions and provide assurance that appropriate security controls are implemented before go-live.

Own and operate IWM's third-party cyber risk management platform, supporting supplier onboarding, assessments and ongoing monitoring.

Identify, assess, manage and escalate cyber risks across the supply chain, tracking remediation activities where required.

Museum Website: https://www.iwm.org.uk/jobs