Halma plc
Cyber Risk and Resilience Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Help grow a safer, cleaner, healthier future for everyone, every day.
Role Overview
As cyber risks evolve, businesses face a complex and expanding threat landscape, making strategic risk management essential. We are seeking a talented Cyber Risk Analyst with a strong background in Cybersecurity Audit and Assurance to identify vulnerabilities within the organization and that of the organisation’s portfolio of companies around the world, to improve risk visibility, and implement effective risk mitigation. In this role, you will also be instrumental in ensuring the organization’s technology systems are secure, resilient, and aligned with acceptable risk thresholds.
Key Responsibilities
Cyber Audit & Assurance
- Conduct comprehensive audit assessments of IT infrastructure, cloud environments, application stacks, and third-party vendor systems to verify control effectiveness
- Map internal control frameworks to industry standards and regulatory mandates (e.g., ISO 27001, NIST CSF, SOC 2, HIPAA, GDPR, PCI-DSS)
- Act as the primary liaison between technical teams and external/internal auditors during annual cyber audits and regulatory examinations
- Define, execute, and document technical audit test plans, sampling strategies, and evidence collection workflows to support internal assurance reviews
Risk Assessment and Advisory
- Work collaboratively with Technology, Audit, and Risk teams, and operating companies, to conduct thorough cybersecurity risk, audit and assurance assessments
- Develop and sustain effective relationships with business and functional partners, offering guidance, risk oversight, and educational support
- Identify and report on non-compliance with risk frameworks, ensuring that deviations are well-documented and visible.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Mitigation and Support
- Assist the Audit and Risk Teams in identifying and tracking mitigation actions for any technology and cybersecurity issues.
- Compile and present regular security reports for stakeholders, summarizing the organization’s security status, incidents, and risk assessments.
Threat Intelligence and Security Awareness
- Monitor and stay informed about new cybersecurity threats, vulnerabilities, and trends in the industry.
- Integrate this intelligence into the organization’s security strategy.
- Foster an organization-wide security mindset by providing training and guidance on cybersecurity best practices.
Role Requirements
Professional Qualifications
- Relevant certifications in cybersecurity (such as CISM, CISSP, CRISC, or CISA) are preferred.
- Strong experience in managing partnerships and fostering trust, with the ability to influence and work collaboratively with various stakeholders
- Excellent communication skills, both verbal and written, with the ability to convey complex information effectively, particularly to executive and board-level audiences.
- Outcome-driven, with a demonstrated ability to foster teamwork across functions.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Technical and Analytical Proficiency
- Solid understanding of operational risk management frameworks, including processes for identifying, assessing, and managing risk scenarios
- Demonstrable experience with cyber assurance and audit risk assessment
- Excellent knowledge of regulatory standards, frameworks, policies and procedures
Additional Qualifications
- Proficiency in various technology domains, including systems and software architecture, cloud platforms, networking, IoT, and integration technologies
- Experience in consulting and change management, particularly in supporting technology-led transformations within an organization.
- Curiosity and awareness of rapid developments in technology and security, with the ability to assess how emerging trends may impact the organization.
- Ability to navigate complex global structures, advocating for and implementing new ideas and innovative solutions.
Not the right fit?
Let us know you're interested in a future opportunity by clicking Introduce Yourself in the top-right corner of the page or create an account to set up email alerts as new job postings become available that meet your interest!
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location