Senior Cyber Risk and Assurance Analyst

The Cyber Security Division (CSD) is an award-winning group of cyber security experts who are committed to keeping the Bank of England safe from cyber-attacks and incidents. In 2023 CSD were recognised with the Financial Services award of the year at the National Cyber Awards. This followed previous award wins for individuals within our team at the We Are Tech Women  and Women in IT Awards, and Central Banking's Best Cyber Resilience Initiative.

Within Cyber Security you will be working with people who are passionate about protecting the Bank from Cyber security incidents. Given the importance and complexity of technology for the Bank of England, the security challenges are rarely straightforward and often span multiple systems hosted in our own data centres, in the cloud and as SaaS, requiring cross-team working and deep technical expertise to address them effectively.

You’ll assess the security of solutions being considered by Bank teams, including SaaS solutions. By collaborating closely with colleagues across Technology and throughout the organization you will play a key role in safeguarding the Bank and its information.

Our teams are committed to developing their expertise in a constantly evolving environment. Aligned to industry best‑practice, staff are encouraged to develop their skills both internally and externally, through mentoring, training and formal qualifications.

The Cyber Security Division advises business areas on how best to manage and mitigate the cyber security risks in one of the Bank's most complex and fastest growing risk areas: the supply chain.

As a Senior Cyber Risk and Assurance Analyst
, you’ll support the assessment of suppliers, partners, software, hardware and services that underpin critical financial operations.

You’ll work at the intersection of business, risk, and cyber security, gaining hands‑on experience while helping ensure that organisations, equipment and processes that are essential to the UK economy meet appropriate security standards.

Typical activities include:

• Reviewing responses to cyber and risk questionnaires
• Engaging with stakeholders to understand how they manage security and data
• Supporting, then performing, risk assessments and assurance activities
• Identifying control gaps and helping shape pragmatic recommendations
• Contributing to clear, concise reports for senior stakeholders

You’ll be supported by experienced colleagues and given the opportunity to develop in a high