ea Change
Security Governance Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Governance Analyst
📍 Hybrid – Flexible across key UK sites
💰 £400–£450 per day – Inside IR35
📅 Initial contract until end of December – likely to extend
🏦 Banking / Financial Services
We’re currently recruiting for an experienced Security Governance Analyst to join the CISO function of a leading UK banking organisation.
This is an opportunity to work within a team of security professionals focused on strengthening the organisation’s cyber resilience, managing cyber risk and ensuring effective security governance across a complex and highly regulated environment.
The Role
As a Security Governance Analyst, you’ll play an important role in identifying, managing and reporting cyber security risks across the organisation.
Working closely with the CISO function and wider business, you’ll help ensure cyber risks are appropriately assessed, treated and communicated, while supporting security standards, policies and risk appetite across the organisation.
You’ll also play a key role in ensuring security controls remain effective and fit for purpose, managing risk issues through to resolution and supporting regulatory reporting requirements.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What you will be doing:
- Support the identification, assessment and management of cyber security risks across the organisation.
- Work closely with the CISO, business stakeholders and security teams to ensure risks are appropriately managed and reported.
- Support the development and implementation of cyber security standards, policies and controls.
- Identify and manage risk issues, driving them through to appropriate resolution.
- Support the management and reporting of cyber risks to senior stakeholders and external regulators.
- Help develop and monitor risk appetite metrics and key security indicators.
- Assess whether security controls are fit for purpose, effective and aligned with organisational risk appetite.
- Identify cyber threats, breaches and potential security impacts, supporting appropriate risk treatment and mitigation strategies.
- Monitor and communicate risk treatment activities and ensure appropriate follow-up.
- Support security governance activities within a highly regulated financial services environment.
- Contribute to the organisation's ongoing cyber security transformation and integration activities.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What you will need to have:
- Good working knowledge of cyber security risk management principles.
- Experience working within security governance, cyber risk or information security environments.
- Good understanding of common security domains, controls and frameworks.
- Experience working with frameworks such as NIST, ISO/IEC 27001 and ISO/IEC 27002.
- Proven experience identifying cyber threats or security breaches and assessing their potential business impact.
- Experience evaluating and implementing appropriate risk treatment and mitigation strategies.
- Strong stakeholder management and communication skills, with the ability to communicate cyber risk to both technical and non-technical audiences.
- Experience monitoring, reporting and communicating security risks and remediation activity.
- Strong analytical skills and experience working with Excel, including pivot tables and complex formulas.
- Experience with Power BI and data modelling would be advantageous.
- Experience within financial services or another highly regulated environment would be highly desirable.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location