Bank of England
Senior Cyber Risk and Assurance Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Location: London
Cyber Security Division
The Cyber Security Division (CSD) is an award-winning group of cyber security experts who are committed to keeping the Bank of England safe from cyber-attacks and incidents. In 2023 CSD were recognised with the Financial Services award of the year at the National Cyber Awards. This followed previous award wins for individuals within our team at the WeAreTechWomen and Women in IT Awards, and Central Banking’s Best Cyber Resilience Initiative.
Within Cyber Security you will be working with people who are passionate about protecting the Bank from Cyber security incidents. Given the importance and complexity of technology for the Bank of England, the security challenges are rarely straightforward and often span multiple systems hosted in our own data centres, in the cloud and as SaaS, requiring cross-team working and deep technical expertise to address them effectively.
You’ll assess the security of solutions being considered by Bank teams, including SaaS solutions. By collaborating closely with colleagues across Technology and throughout the organisation you will play a key role in safeguarding the Bank and its information.
Our teams are committed to developing their expertise in a constantly evolving environment. Aligned to industry best-practice, staff are encouraged to develop their skills both internally and externally, through mentoring, training and formal qualifications.
Job Description:
The Cyber Security Division advises business areas on how best to manage and mitigate the cyber security risks in one of the Bank’s most complex and fastest growing risk areas: the supply chain.
As a Senior Cyber Risk and Assurance Analyst, you’ll support the assessment of suppliers, partners, software, hardware and services that underpin critical financial operations.
You’ll work at the intersection of business, risk, and cyber security, gaining hands-on experience while helping ensure that organisations, equipment and processes that are essential to the UK economy meet appropriate security standards.
Typical activities include:
- Reviewing responses to cyber and risk questionnaires
- Engaging with stakeholders to understand how they manage security and data
- Supporting, then performing, risk assessments and assurance activities
- Identifying control gaps and helping shape pragmatic recommendations
- Contributing to clear, concise reports for senior stakeholders
You’ll be supported by experienced colleagues and given the opportunity to develop in a high-impact area of cyber security. Time for training and exams will be provided to help you progress your career.
We are particularly interested in candidates who bring real-world business experience and want to apply it in a cyber context.
You might be:
- A professional with a few years’ experience in business, consulting, procurement, audit, risk, or operations
- Looking to transition into cyber security from a related field
- Already in a junior cyber, risk, compliance or governance role and seeking a new challenge with greater impact
Above all, you’re someone who:
- Enjoys analysing information and understanding how organisations work
- Is diligent, curious, proactive, and comfortable asking questions
- Communicates clearly with both technical and non-technical stakeholders
What We Offer
- A pathway into cyber security, compliance, risk, and resilience careers
- Training and support for certifications
- The opportunity to work on issues of national importance
- A collaborative, inclusive, and intellectually stimulating environment
- A strong focus on work-life balance and flexible working
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Why Join the Bank of England?
Because this is more than a job. It’s a chance to:
- Work on challenges that really matter to the UK economy
- Build a long-term, rewarding career in cyber and risk
- Be part of a team that values collaboration and continuous learning
- And enjoy a role that is varied and genuinely worthwhile
Role Requirements:
Minimum Criteria
- Experience writing clear reports and presenting them to groups, with excellent English reading and comprehension
- Strong analytical and problem-solving skills
- Experience of liaising with business stakeholders and suppliers with confidence, to reach agreement
- Interest in cyber security, risk, or governance
- Ability to communicate complex choices simply and effectively
- Relevant professional qualification (e.g. CISSP, BCS Foundation Certificate in Data Protection, BCS CISMP, ISO/IEC 27001 Foundation, BCS Foundation Certificate in Cyber Security, CompTIA Security+, ISC2 Certified in Cybersecurity, BCS Foundation Certificate in IT, CompTIA ITF+, CompTIA A+, CompTIA Network+, ISO 31000 Foundation).
Essential Criteria
- Attention to detail and a structured approach to work
- Eager to learn about IT network architecture and components, software/application security, infrastructure security, cloud.
- Active interest in new technical concepts and/or technologies.
- Good stakeholder collaboration skills.
Desirable Criteria
- Proven experience in technical roles (preferably with a cyber security element).
- Experience working in cyber security consultancy or architecture roles within highly regulated sectors (e.g. financial/insurance, defence, civil nuclear, intelligence).
- Experience working in a professional/business environment
- Experience conducting technical risk assessments
- Exposure to supplier management, audit, compliance, or risk
- Awareness of cyber security concepts (e.g. threats, controls, data protection)
- Experience analysing technical problems to identify potential security concerns
- Reviewing IT architecture to identify potential security gaps and/or vulnerabilities
- Assessing compliance with IT security policies and technical standards (e.g. ISO 27001, NIST, Cyber Essentials, COBIT, etc…)
- Additional technical qualifications (e.g. CRISC, CISM, NCSC CCP, ISSAP, CompTIA SecurityX, CCSK, CCSP, GDSA, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor)
- Knowledge of well-known Frameworks (e.g., NIST, MITRE ATT&CK, ISO 27001) and how they are applied pragmatically within delivery.
- Ability to work with limited supervision.
By applying for this role you will automatically be considered for a Junior Cyber Risk and Assurance Analyst role if we do not feel you meet these requirements.
Our Approach to Inclusion
The Bank values diversity, equity and inclusion. We play a key role in maintaining monetary and financial stability, and to do that effectively, we believe we need a workforce that reflects the society we serve.
At the Bank of England, we want all colleagues to feel valued and respected, so we're working hard to build an inclusive culture which supports people from all backgrounds and communities to be at their best at work. We celebrate all forms of diversity, including (but not limited to) age, disability, ethnicity, gender, gender identity, race, religion, sexual orientation and socioeconomic status. We believe that it’s by drawing on different perspectives and experiences that we’ll continue to make the best decisions for the public.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
We welcome applications from individuals who work flexibly, including job shares and part time working patterns. We've also partnered with external organisations to support us in making adjustments for candidates and employees in the recruitment process where they're needed.
From 1st October 2026, we expect all our colleagues to spend a minimum of 50% of their working time in the office per month. This is to capitalise on the benefits of working together in person across teams, while maintaining the flexibility offered by home working. Subject to that minimum requirement, individuals and managers should work together to find what works best for them and their team.
Finally, we're proud to be a member of the Disability Confident Scheme [https://www.gov.uk/government/publications/disability-confident-guidance-for-levels-1-2-and-3/level-2-disability-confident-employer]. If you wish to apply under this scheme, you should check the box in the ‘Candidate Personal Information’ under the ‘Disability Confident Scheme’ section of the application.
Salary and Benefits Information
We encourage flexible working, part time working and job share arrangements. Part time salary and benefits will be on a pro-rated basis as appropriate.
The salary on offer ranges from £61,440 - £69,120. In addition, we also offer a comprehensive benefits package as detailed below:
- Currently a non-contributory, career average pension giving you a guaranteed retirement benefit of 1/80th of your annual salary for every year worked. There is the option to increase your pension (to 1/65th) or decrease (to 1/105th) in exchange for salary through our flexible benefits programme each year. The Bank has the discretion to vary standard accrual rates and dial up and dial down rates at any time and to withdraw dial up and dial down options at any time.
- A discretionary performance award based on a current award pool.
- An 8% benefits allowance with the option to take as salary or purchase a wide range of flexible benefits.
- 26 days’ annual leave with option to buy up to 12 additional days through flexible benefits.
- Private medical insurance and income protection.
National Security Vetting Process
Employment in this role will be subject to the National Security Vetting clearance process (and typically can take between 6 to 12 weeks post offer) and the passing of additional Bank security checks in accordance with the Bank policy. Further information regarding the vetting and security clearance requirements for the role will be provided to the successful applicant, and information about how the Bank processes personal data for these purposes, is set out in the Bank's Privacy Notice [https://www.bankofengland.co.uk/legal/privacy].
The Bank of England welcomes applications from all candidates, but as a UK Visas and Immigration (UKVI) approved sponsor, we have a responsibility to comply with the Immigration Rules and guidance
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills