Senior Cyber Risk Management Analyst

3 weeks ago

London, Greater London, United Kingdom Pearson Full time

Position: Senior Cyber Risk Management Analyst

Company: Pearson

About Pearson:

At Pearson, our mission is to 'add life to a lifetime of learning', enabling individuals to achieve their aspirations. We focus on creating engaging and impactful educational experiences. Established in 1844, Pearson has evolved alongside the educational landscape, employing over 20,000 dedicated professionals committed to delivering high-quality, digital-first, and sustainable learning resources.

About the Chief Information Security Office:

The Chief Information Security Office (CISO) at Pearson is tasked with defining and upholding the strategic vision and program for safeguarding the confidentiality, integrity, and availability of our information assets. Our structure is built around four essential pillars: Security Operations, Security Engineering and Architecture, Posture Management, and Governance, Risk, and Compliance.

Role Overview:

As a vital member of the Governance, Risk, and Compliance team within CISO, you will foster collaborative relationships across all CISO pillars and key stakeholders throughout Pearson's Digital and Technology sectors. Your contributions will drive the evolution of Pearson's Security Risk and Compliance program, particularly focusing on third-party vendor and supply chain risk management. This includes developing and executing a comprehensive risk management strategy, performing thorough due diligence on third-party practices, and ensuring ongoing monitoring.

Key Responsibilities:

  • Conduct timely security evaluations of third-party vendors, accurately documenting findings and initiating necessary assurance actions.
  • Assist in generating high-quality, informative reports regarding third-party assurance evaluations.
  • Advise stakeholders on the minimum information/cyber security requirements for vendor assessments.
  • Collaborate with procurement, legal, and other teams to ensure vendor contracts encompass appropriate security and compliance stipulations.
  • Engage in the collection of Key Risk Indicators (KRIs) and Management Information reporting related to third-party cyber risks and evaluations.
  • Support management with internal reporting, including updates for steering committees and senior leadership.
  • Develop metrics to demonstrate compliance with security frameworks.
  • Assist internal stakeholders with information security projects related to third parties.
  • Support the broader cyber risk function in third-party/vendor risk assessments.
  • Contribute to the global team's efforts in enhancing the program, implementing identified improvements for greater efficiency.
  • Provide support to management and engage with the wider information security community.
  • Develop expertise in third-party security requirements relevant to Pearson.
  • Stay informed about emerging cyber threats, attack vectors, and industry best practices in third-party risk management.

Essential Skills & Experience:

  • Experience in the Cyber Security domain, particularly in Governance, Risk, Compliance, and Assurance.
  • Relevant professional certifications (e.g., CISSP, CISM, CRISC, CCSP, ISO 27001 LA/LI).
  • Proven expertise with common information security management frameworks, such as ISO/IEC 27001/2, NIST 800-53, NIST CSF, and CIS benchmarks.
  • Experience in translating data privacy legal and regulatory requirements into information security terms (e.g., GDPR, CCPA, HIPAA).
  • Strong verbal and written communication skills, capable of engaging diverse audiences including technical teams, executives, and business stakeholders.
  • Demonstrated experience in designing, implementing, and managing assurance frameworks.
  • Analytical mindset with strong problem-solving abilities.
  • High initiative, reliability, and thought leadership.

Preferred Skills & Experience:

  • Master's degree in information security or a related field.
  • Experience conducting internal audits against recognized standards (e.g., ISO 27001, ISO 22301).
  • Background in organizations of similar size or in consulting roles.
  • Knowledge of relevant legal and regulatory frameworks, particularly in the US, UK, and EU.
  • Experience with Payment Card Industry Data Security Standards (PCI DSS) compliance in eCommerce is advantageous.

Benefits:

  • 25 days of annual leave, increasing with tenure; options for annual leave trading.
  • Annual bonus structure.
  • Generous pension plan with employer contributions.
  • Comprehensive health and dental insurance options.
  • Stock purchase options available.
  • Flexible family leave policies and remote working arrangements.
  • Employee wellbeing assistance program.
  • Opportunities for professional development and training, including AWS certification.

Work Environment:

Pearson embraces hybrid working practices, allowing employees to manage their office attendance flexibly. We support a work-life balance that accommodates personal commitments.

Diversity Commitment:

At Pearson, we celebrate an inclusive culture where diversity is recognized as a strength. We strive to create an environment where all individuals feel valued and supported in achieving their full potential.

Application Process:

We appreciate your interest in a career with Pearson. Please submit your CV and, if desired, a cover letter in English. For any inquiries or further information, feel free to reach out.

What to Expect:

Pearson is recognized as one of the most innovative education companies. We are committed to enhancing the learning experience and meeting the evolving needs of our global audience.

  • Business Analyst

    3 weeks ago

    London, Greater London, United Kingdom AXA Group Full time

    Senior Business Analyst - Global Financial Lines & Cyber Underwriting AXA XL is at the forefront of underwriting solutions in Financial Lines and Cyber insurance, catering to a diverse range of clients. This position presents an exceptional opportunity for a Senior Business Analyst to elevate their career within the Global Financial Lines & Cyber...

  • Senior Cyber Security Analyst

    6 days ago

    London, Greater London, United Kingdom LT Harper - Cyber Security Recruitment Full time

    Senior SOC Analyst – Remote / Hybrid OpportunityLT Harper - Cyber Security Recruitment is seeking a highly skilled Cyber Security Operations Centre (SOC) Consultant to join our team. As a leading cyber security recruitment agency, we specialise in Offensive & Defensive Security and are undergoing a period of significant growth within the UK.This is an...

  • Business Development Manager

    6 days ago

    London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    Job Description**About CornerStone - Risk, Cyber & Security**We are a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a highly skilled Business Development Manager to join our growing team. Our company culture is built upon innovation, teamwork, taking ownership, and supporting each other. We invest in our...

  • Cyber Security Risk Management Leader

    2 days ago

    London, Greater London, United Kingdom LT Harper - Cyber Security Recruitment Full time

    About the Role:LT Harper - Cyber Security Recruitment is seeking an experienced Cyber Security Risk Management Leader to join our team. As a key member of our organization, you will be responsible for overseeing the development, implementation, and continuous improvement of our information security risk management framework.Key Responsibilities:Design and...

  • Cyber Security Risk Management Leader

    2 days ago

    London, Greater London, United Kingdom LT Harper - Cyber Security Recruitment Full time

    About the Role:LT Harper - Cyber Security Recruitment is seeking an experienced Cyber Security Risk Management Leader to join our team. As a key member of our organization, you will be responsible for overseeing the development, implementation, and continuous improvement of our information security risk management framework.Key Responsibilities:Design and...

  • Business Development Manager

    4 days ago

    London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About CornerStone - Risk, Cyber & SecurityCornerStone is a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a Business Development Manager to join our growing team. We are looking for an individual who enjoys working in a fast-paced, collaborative environment that is built upon innovation, teamwork, taking...

  • Business Development Manager

    6 days ago

    London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About CornerStone - Risk, Cyber & SecurityCornerStone is a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a Business Development Manager to join our growing team. We are looking for an individual who enjoys working in a fast-paced, collaborative environment that is built upon innovation, teamwork, taking...

  • Cyber Risk Product Analyst

    3 weeks ago

    London, Greater London, United Kingdom Lorien Full time

    Job OverviewCyber Risk Product AnalystLocation: Remote/HybridCompensation: Competitive Salary (Dependent on Experience)About the Company: Our client is a leading global insurance provider specializing in innovative risk solutions. They are seeking a Cyber Risk Product Analyst with a strong background in underwriting and cyber risk management.Key...

  • Cyber Security Risk Analyst

    1 day ago

    London, Greater London, United Kingdom KDR Talent Solutions Full time £50,000 - £65,000

    About the RoleKDR Talent Solutions is seeking a highly skilled Cyber Security Risk Analyst to join our team. As a key member of our organization, you will be responsible for evaluating cyber security controls, conducting risk assessments, and collaborating with cross-functional teams to ensure the security and integrity of our systems.Key...

  • Cyber Security Risk Analyst

    1 day ago

    London, Greater London, United Kingdom KDR Talent Solutions Full time £50,000 - £65,000

    About the RoleKDR Talent Solutions is seeking a highly skilled Cyber Security Risk Analyst to join our team. As a key member of our organization, you will be responsible for evaluating cyber security controls, conducting risk assessments, and collaborating with cross-functional teams to ensure the security and integrity of our systems.Key...

  • Cyber Security Risk Analyst

    19 minutes ago

    London, Greater London, United Kingdom KDR Talent Solutions Full time £50,000 - £65,000

    Job Title: Information Security Analyst ContractJob Type: ContractIndustry: Financial ServicesLocation: Remote (Hybrid)Job Description:KDR Talent Solutions is seeking an experienced Information Security Analyst to join our client, a leading re-insurance company listed on the FTSE 250. As a key member of the Information Security team, you will be responsible...

  • Cyber Risk Management Professional

    6 days ago

    London, Greater London, United Kingdom LT Harper - Cyber Security Recruitment Full time

    Job OverviewLT Harper - Cyber Security Recruitment is seeking a highly skilled Cyber Risk Advisory Consultant to join our team. As a Cyber Risk Advisory Consultant, you will be responsible for providing expert advice to clients on managing and mitigating cyber risks.Key Responsibilities:Lead engagements and provide current knowledge of the cyber threat...

  • Senior Cyber Risk Management Analyst

    3 weeks ago

    London, Greater London, United Kingdom Pearson Full time

    Position: Senior Cyber Risk Management Analyst Company: Pearson About Pearson: At Pearson, our mission is to 'add life to a lifetime of learning,' enabling individuals to achieve their envisioned futures. We create dynamic and impactful learning experiences tailored for real-world application. Established in 1844, Pearson has continually evolved to meet the...

  • Cyber Security Risk Manager

    2 days ago

    London, Greater London, United Kingdom LT Harper - Cyber Security Recruitment Full time

    We are currently working with a leading global company, boasting a workforce of over 50,000 employees worldwide.To increase your chances of success, we recommend reviewing the following overview of this role before applying.Our client is seeking a seasoned Cyber Security Risk Manager to oversee the development, implementation, and continuous improvement of...

  • Cyber Security Risk Manager

    3 days ago

    London, Greater London, United Kingdom LT Harper - Cyber Security Recruitment Full time

    We are currently working with a leading global company, boasting a workforce of over 50,000 employees worldwide.To increase your chances of success, we recommend reviewing the following overview of this role before applying.Our client is seeking a seasoned Cyber Security Risk Manager to oversee the development, implementation, and continuous improvement of...

  • Cyber Risk Analyst I

    3 days ago

    London, Greater London, United Kingdom BlueVoyant Full time

    About the RoleWe are seeking a highly skilled Cyber Risk Analyst I to join our team at BlueVoyant. As a Cyber Risk Analyst I, you will play a critical role in helping our clients understand their cyber risk profiles and develop strategies to mitigate those risks.Key ResponsibilitiesProduce high-quality reports that help clients understand their cyber risk...

  • Cyber Risk Analyst I

    3 days ago

    London, Greater London, United Kingdom BlueVoyant Full time

    About the RoleWe are seeking a highly skilled Cyber Risk Analyst I to join our team at BlueVoyant. As a Cyber Risk Analyst I, you will play a critical role in helping our clients understand their cyber risk profiles and develop strategies to mitigate those risks.Key ResponsibilitiesProduce high-quality reports that help clients understand their cyber risk...

  • Cyber Security Risk Manager

    3 days ago

    London, Greater London, United Kingdom LT Harper - Cyber Security Recruitment Full time

    We are currently working with a leading global enterprise, boasting a workforce of over 50,000 employees worldwide.They are seeking a seasoned Cyber Security Risk Manager to oversee the development, implementation, and continuous improvement of their information security risk management framework. This individual will be responsible for identifying potential...

  • Cyber Security Risk Manager

    3 days ago

    London, Greater London, United Kingdom LT Harper - Cyber Security Recruitment Full time

    We are currently working with a leading global enterprise, boasting a workforce of over 50,000 employees worldwide.They are seeking a seasoned Cyber Security Risk Manager to oversee the development, implementation, and continuous improvement of their information security risk management framework. This individual will be responsible for identifying potential...

  • Senior Analyst

    3 weeks ago

    London, Greater London, United Kingdom AXA Group Full time

    Senior Business Analyst - Global Financial Lines & Cyber Underwriting Location: Flexible AXA XL is a leader in the underwriting of Financial Lines and Cyber insurance, catering to a diverse range of clients. As the demand for Financial Lines remains strong and Cyber insurance continues to expand, this position presents substantial opportunities for the...