NRG.
Cyber Security Risk Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Risk Analyst
Contract: Initial 3 months with potential extension to 6 months
Location: Remote / Europe
Rate: Competitive day rate
Start: ASAP
NRG is working with an international organisation looking to bring an experienced Cyber Security Risk Analyst into its security team on an initial three-month contract.
This is a hands-on operational GRC role with a particular focus on third-party risk management, cyber risk assessments, remediation tracking and security governance.
Key Responsibilities
- Conduct third-party cybersecurity risk assessments across software, cloud services, suppliers and technology vendors
- Review supplier security documentation including ISO 27001 certifications, SOC reports, penetration testing reports and security questionnaires
- Maintain the cybersecurity risk register, supporting risk identification, assessment and prioritisation
- Track remediation actions and risk treatment plans through to closure
- Coordinate with internal stakeholders and third parties to progress security assessments and remediation
- Support security governance reporting, audit evidence gathering and risk review activities
- Provide first-line triage and administration for security-related requests during European business hours
- Maintain accurate security documentation, assessment records and supporting evidence
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we're looking for
- 3+ years' experience within Cyber Security, Information Security, GRC, Risk Management or Compliance
- Hands-on experience conducting third-party/vendor security risk assessments, including reviewing security questionnaires and supporting evidence
- Good working knowledge of security frameworks and standards including ISO 27001, NIST, CIS Controls and SOC reporting
- Experience maintaining cyber risk registers, tracking remediation actions and working independently with internal and external stakeholders
This role would suit a Cyber GRC, Third-Party Risk or Information Security professional who enjoys the operational side of risk management and is comfortable taking ownership of assessments through to completion.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The assignment is initially for three months, with the potential to extend to six months. We are particularly interested in speaking with candidates based across the UK and Europe who are available at short notice.
If you're interested, apply now and a member of the NRG Tech team will be in touch.
NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic. Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero-tolerance policy for breaches of our Equality and Diversity policy.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location