Junior Cyber Risk and Assurance Analyst

The Cyber Security Division (CSD) is an award-winning group of cyber security experts who are committed to keeping the Bank of England safe from cyber-attacks and incidents. In 2023 CSD were recognised with the Financial Services award of the year at the National Cyber Awards. This followed previous award wins for individuals within our team at the We Are Tech Women  and Women in IT Awards, and Central Banking's Best Cyber Resilience Initiative.

Within Cyber Security you will be working with people who are passionate about protecting the Bank from Cyber security incidents. Given the importance and complexity of technology for the Bank of England, the security challenges are rarely straightforward and often span multiple systems hosted in our own data centres, in the cloud and as SaaS, requiring cross-team working and deep technical expertise to address them effectively.

You'll assess the security of solutions being considered by Bank teams, including SaaS solutions. By collaborating closely with colleagues across Technology and throughout the organisation you will play a key role in safeguarding the Bank and its information.

Our teams are committed to developing their expertise in a constantly evolving environment. Aligned to industry best-practice, staff are encouraged to develop their skills both internally and externally, through mentoring, training and formal qualifications.

The Cyber Security Division advises business areas on how best to manage and mitigate the cyber security risks in one of the Bank's most complex and fastest growing risk areas: the supply chain.

As a Junior Cyber Risk and Assurance Analyst
, you'll support the assessment of suppliers, partners, software, hardware and services that underpin critical financial operations.

You'll work at the intersection of business, risk, and cyber security, gaining hands‑on experience while helping ensure that organisations, equipment and processes that are essential to the UK economy meet appropriate security standards.

Typical activities include:

• Reviewing responses to cyber and risk questionnaires
• Engaging with stakeholders to understand how they manage security and data
• Supporting, then performing, risk assessments and assurance activities
• Identifying control gaps and helping shape pragmatic recommendations
• Contributing to clear, concise reports for senior stakeholders

You'll be supported by experienced colleagues and given the opportunity to develop in a high-impact area of cyber security. Time for training and exams will be provided to help you progress your career.

We are particularly interested in candidates who bring real‑world business experience and want to apply it in a cyber context.

You might be:

• A professional with a few years' experience in business, consulting, procurement, audit, risk, or operations
• Looking to transition into cyber security from a related field
• Already in a junior cyber, risk, compliance or governance role and seeking a new challenge with greater impact

Above all, you're someone who:

• Enjoys analysing information and understanding how organisations work
• Is diligent, curious, proactive, and comfortable asking questions
• Communicates clearly with both technical and non-technical stakeholders

• A pathway into cyber security, compliance, risk, and resilience careers
• Training and support for certifications
• The opportunity to work on issues of national importance
• A collaborative, inclusive, and intellectually stimulating environment
• A strong focus on work-life balance and flexible working

Because this is more than a job. It's a chance to:

• Work on challenges that really matter to the UK economy
• Build a long‑term, rewarding career in cyber and risk
• Be part of a team that values collaboration and continuous learning
• And enjoy a role that is varied and genuinely worthwhile

• Excellent English reading and comprehension.
• Strong analytical and problem-solving skills
• Experience of liaising with business stakeholders to reach agreement
• Experience writing clear reports and presenting them to groups
• At least one of the following:
  • Confidence engaging with stakeholders and suppliers
  • Inte…