Principal Cyber Risk Management & Assurance Advisor

Principal Cyber Risk Management & Assurance Advisor

Contract | Inside £750 daily IR35
Location: London, Bristol or Manchester (Hybrid - 3 x onsite days per week)

We are seeking an experienced Principal Cyber Risk Management & Assurance Advisor to join a major public sector organisation undergoing significant digital and technology transformation.

This is a senior advisory role focused on cyber risk management, security assurance, governance, and secure-by-design principles across large-scale, complex technology environments.

Key Responsibilities

Provide expert leadership on cyber risk management and assurance activities.
Assess and manage security risks across enterprise technology programmes and services.
Support the implementation of secure-by-design principles throughout project and operational lifecycles.
Provide assurance against security standards, regulatory requirements and risk frameworks.
Engage with senior stakeholders to influence risk-based decision making.
Review and challenge technical designs, architectures and security controls.
Contribute to cloud and digital transformation programmes from a cyber security perspective.

Essential Experience

Extensive experience in cyber security risk management and assurance.
Strong understanding of security governance, risk frameworks and control assurance.
Demonstrable experience applying secure-by-design principles.
Experience assessing and managing cyber risks within large, complex organisations.
Ability to communicate security risks effectively to both technical and non-technical stakeholders.
Active SC Clearance (must be transferable).

Desirable Experience

Experience working within central government, wider public sector or other highly regulated environments.
Experience within financial services or similarly regulated sectors.
Knowledge of AI assurance and emerging technology risk management.
Professional certifications such as CISM, CISP or equivalent.

Technical Knowledge

Cloud security
AWS
Cloud-native environments
SaaS platforms
Security assurance frameworks
Risk management methodologies

Location & Working Pattern

Candidates can be based in London, Bristol or Manchester.
Hybrid working arrangement with an expectation of approximately 3 days per week onsite, with some flexibility available.
Occasional travel to other UK sites may be required.

Clearance Requirement

Candidates must hold active SC Clearance. Unfortunately, candidates with expired or lapsed clearance cannot be considered.

Apply

If you have a strong background in cyber risk management, security assurance and secure-by-design practices within complex enterprise environments, we'd be keen to hear from you
Only candidates based in UK and eligible to work in UK are allowed