Morgan McKinley
Cyber Risk Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Risk / GRC Analyst – Contract
Location: North West England – 2 days per week onsite
Rate: £450 per day
IR35: Outside IR35
Contract: Initial contract with potential extension
We are supporting a large organisation in the North West that is looking for an experienced Cyber Risk / GRC Analyst to support its wider cyber security function.
The role will have a strong focus on cyber and technology risk management, with particular responsibility for maintaining, improving and driving activity across the organisation’s risk register.
The successful contractor will work closely with cyber, technology and business stakeholders to ensure risks are clearly identified, assessed, owned and actively managed through appropriate treatment and remediation plans.
Key Responsibilities
- Own and maintain the cyber / technology risk register.
- Identify and assess new cyber and technology risks.
- Review and challenge existing risks, controls and treatment plans.
- Assess inherent and residual risk.
- Work with risk owners to agree appropriate remediation and mitigation activity.
- Track risk treatment actions through to completion.
- Facilitate risk reviews and workshops with technical and business stakeholders.
- Ensure risks are clearly articulated in business terms, including likelihood, impact and potential exposure.
- Produce clear risk reporting for senior stakeholders.
- Support the wider cyber governance and assurance function where required.
- Work alongside ongoing regulatory and security improvement programmes, including CAF and NIS-related activity.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Experience Required
- Strong experience within Cyber Risk, Technology Risk, Information Security Risk or GRC.
- Demonstrable experience managing and maintaining a cyber / technology risk register.
- Strong understanding of risk assessment, risk treatment and control effectiveness.
- Experience managing remediation actions and working with risk owners.
- Confident stakeholder management skills, including the ability to challenge senior stakeholders where appropriate.
- Good understanding of cyber security controls and technology environments.
- Experience working within recognised security or risk frameworks such as NCSC CAF, NIS, ISO 27001 / ISO 27005, NIST or similar.
- Able to work independently and operate effectively within a busy cyber security environment.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable
- Experience within critical infrastructure, transport, logistics, utilities, manufacturing or another regulated environment.
- Previous exposure to NCSC CAF or NIS.
- Experience supporting cyber assurance, governance or regulatory programmes.
This role would suit a hands-on Cyber Risk professional who is comfortable getting into the detail of individual risks, challenging risk owners and ensuring actions are actively progressed rather than simply documented.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London