Lead Cyber Risk and Assurance Specialist

Lead Cyber Risk & Assurance Specialist

Type: Permanent / 12‑Month FTC
Location: Leeds, UK
Flexible Working: Yes – job share, flexible start/end, compressed hours, working from abroad, 50% in‑office requirement spread across month.

The Cyber Security Division (CSD) advises business areas on managing and mitigating cyber security risks in the supply chain. As a Lead Cyber Risk and Assurance Specialist you will assess supplier solutions, steer programmes, and influence senior stakeholders to deliver secure, usable, and cost‑effective outcomes.

• Champion a modern, threat‑informed security posture that reduces attack surface.
• Conduct IT security risk assessments and assurance activities for solutions and procurements.
• Act as senior consultancy voice on high‑impact initiatives, aligning security capabilities to business outcomes.
• Lead or implement projects to reduce supply‑chain security risks and improve resilience to supplier incidents.
• Communicate complex security choices simply in meetings, workshops, option papers, and risk assessments.
• Review and agree cyber security contract terms.
• Provide stakeholder leadership, influence senior leaders, guide engineers/SMEs, and produce strong documentation.

Minimum Criteria

• Proven technical experience, preferably with a cyber security element.
• Significant experience in cyber security consultancy or architecture in highly regulated sectors (financial, defence, civil nuclear, intelligence).
• Extensive experience conducting technical risk assessments: analysing technical problems, reviewing IT architecture, assessing compliance with standards such as ISO 27001, NIST, Cyber Essentials, COBIT.
• Strong stakeholder liaison and technical reporting skills.
• Ability to act as point of escalation for cyber security and risk within the team.
• Solid understanding of IT network architecture, application and infrastructure security, and cloud.
• Active interest in emerging technical concepts and technologies.
• Effective communication of complex security choices.
• Strong stakeholder management and experience advising C‑suite staff.
• UK citizenship with eligibility for DV clearance (parents also UK citizens or have substantial ties to the UK).
• Relevant technical qualifications such as CRISC, CISM, NCSC CCP, ISSAP, CompTIA Security+, CCSK, CCSP, CompTIA Network+, GDSA.

Desirable Criteria

• Advanced qualifications in Cyber Security, Technology, or Computer Science.
• Knowledge of frameworks including NIST, MITRE ATT&CK, ISO 27001, and practical application in delivery.

• Competitive base salary (pro‑rated for part‑time).
• Career‑average pension (1/80th of salary per year worked; options to adjust).
• Discretionary performance award.
• 8% benefits allowance (salary or flexible benefits).
• 26 days annual leave (plus up to 12 days extra via flexible benefits).
• Private medical insurance and income protection.
• Flexible working arrangements; part‑time, job share, and working from abroad where approved.

The Bank values diversity, equity and inclusion across all backgrounds and encourages applications from people who work flexibly, including job shares and part‑time roles. Adjustments are supported where needed.

Employment is subject to National Security Vetting, typically taking 6‑12 weeks post‑offer.

Apply online. Role closes 2nd May 2026.