Cyber Risk Analyst

This position focuses on strengthening the organisation’s oversight of cyber and technology risk across the region. You will help shape the risk framework, challenge the First Line, and provide expert insight on emerging threats, regulatory expectations and control effectiveness.

The role is well suited to someone with hands‑on cyber security experience or a background in 1st line technology/cyber risk who is ready to step into a more strategic, oversight‑focused position. A financial services background is not essential.

Key Responsibilities

• Develop and enhance the Technology and Cyber components of the Operational Risk Framework.
• Provide informed challenge to First Line teams on cyber risks, controls, incidents, KPIs/KRIs and RCSAs.
• Monitor regulatory developments and support updates to policies, standards and control expectations.
• Work closely with Cyber Security teams on thematic reviews, control testing and risk assessments.
• Conduct deep‑dive analysis into areas such as threat modelling, vulnerability management, cloud security, IAM, network security and third‑party cyber risk.
• Support oversight of new products, systems and material change initiatives.
• Communicate risk insights clearly to senior stakeholders across multiple regions.
• Promote strong Three Lines of Defence practices and cyber awareness across the organisation.

Skills and Experience

• Practical experience in cyber security or 1st line cyber/technology risk.
• Strong understanding of cyber frameworks such as NIST or ISO 27001/2.
• Ability to analyse and articulate cyber risks in a clear and structured way.
• Knowledge of incident detection, response and remediation.
• Familiarity with governance, compliance and audit processes.
• Confidence engaging with both technical and non‑technical stakeholders.
• CISSP, CISM or similar certifications.
• Experience working in regulated environments.

What This Role Offers

• A supportive culture with a strong focus on work–life balance.
• A diverse and inclusive team environment.
• Exposure to senior leadership and cross‑regional collaboration.
• The opportunity to influence the cyber risk agenda of a major global organisation.
• Openness to candidates from any industry, not only financial services.

#J-18808-Ljbffr…