Junior Cyber Risk and Assurance Analyst (12m FTC)

Location: London

12 month FTC

Cyber Security Division  

The Cyber Security Division (CSD) is an award-winning group of cyber security experts who are committed to keeping the Bank of England safe from cyber-attacks and incidents. In 2023 CSD were recognised with the Financial Services award of the year at the National Cyber Awards. This followed previous award wins for individuals within our team at the WeAreTechWomen and Women in IT Awards, and Central Banking’s Best Cyber Resilience Initiative. 

Within Cyber Security you will be working with people who are passionate about protecting the Bank from Cyber security incidents. Given the importance and complexity of technology for the Bank of England, the security challenges are rarely straightforward and often span multiple systems hosted in our own data centres, in the cloud and as SaaS, requiring cross-team working and deep technical expertise to address them effectively. 

You’ll assess the security of solutions being considered by Bank teams, including SaaS solutions.  By collaborating closely with colleagues across Technology and throughout the organisation you will play a key role in safeguarding the Bank and its information. 

Our teams are committed to developing their expertise in a constantly evolving environment. Aligned to industry best-practice, staff are encouraged to develop their skills both internally and externally, through mentoring, training and formal qualifications. 

Job Description: 

The Cyber Security Division advises business areas on how best to manage and mitigate the cyber security risks in one of the Bank’s most complex and fastest growing risk areas: the supply chain.   

As a Junior Cyber Risk and Assurance Analyst, you’ll support the assessment of suppliers, partners, software, hardware and services that underpin critical financial operations.

You’ll work at the intersection of business, risk, and cyber security, gaining hands-on experience while helping ensure that organisations, equipment and processes that are essential to the UK economy meet appropriate security standards.

Typical activities include:

• Reviewing responses to cyber and risk questionnaires
• Engaging with stakeholders to understand how they manage security and data
• Supporting, then performing, risk assessments and assurance activities
• Identifying control gaps and helping shape pragmatic recommendations
• Contributing to clear, concise reports for senior stakeholders

You’ll be supported by experienced colleagues and given the opportunity to develop in a high-impact area of cyber security. Time for training and exams will be provided to help you progress your career.

We are particularly interested in candidates who bring real-world business experience and want to apply it in a cyber context.

You might be:

• A professional with a few years’ experience in business, consulting, procurement, audit, risk, or operations
• Looking to transition into cyber security from a related field
• Already in a junior cyber, risk, compliance or governance role and seeking a new challenge with greater impact

Above all, you’re someone who:

• Enjoys analysing information and understanding how organisations work
• Is diligent, curious, proactive, and comfortable asking questions
• Communicates clearly with both technical and non-technical stakeholders

What We Offer

• A pathway into cyber security, compliance, risk, and resilience careers
• Training and support for certifications
• The opportunity to work on issues of national importance
• A collaborative, inclusive, and intellectually stimulating environment
• A strong focus on work-life balance and flexible working

Why Join the Bank of England?

Because this is more than a job. It’s a chance to:

• Work on challenges that really matter to the UK economy
• Build a long-term, rewarding career in cyber and risk

Be part of a team that values collaboration and continuous learning

And enjoy a role that is varied and genuinely worthwhile

Role Requirements: 

Minimum Criteria  

• Excellent English reading and comprehension.  
• Strong analytical and problem-solving skills
• Experience of liaising with business stakeholders to reach agreement 
• Experience writing clear reports and presenting them to groups
• At least one of the following:
  • Confidence engaging with stakeholders and suppliers
  • Interest in cyber security, risk, or governance
  • Ability to communicate complex choices simply and effectively 
  • Attention to detail and a structured approach to work
  • Relevant professional qualification (e.g. CISSP, BCS Foundation Certificate in Data Protection, BCS CISMP, ISO/IEC 27001 Foundation, BCS Foundation Certificate in Cyber Security, CompTIA Security+, ISC2 Certified in Cybersecurity, BCS Foundation Certificate in IT, CompTIA ITF+, CompTIA A+, CompTIA Network+, ISO 31000 Foundation). 

Essential Criteria 

• Eager to learn about IT network architecture and components, software/application security, infrastructure security, cloud. 
• Active interest in new technical concepts and/or technologies. 
• Good stakeholder collaboration skills. 

Desirable Criteria 

• Proven experience in technical roles (preferably with a cyber security element). 
• Experience working in cyber security consultancy or architecture roles within highly regulated sectors (e.g. financial/insurance, defence, civil nuclear, intelligence).  
• Experience working in a professional/business environment
• Experience conducting technical risk assessments 
• Exposure to supplier management, audit, compliance, or risk
• Awareness of cyber security concepts (e.g. threats, controls, data protection)

Experience analysing technical problems to identify potential security concerns 

Reviewing IT architecture to identify potential security gaps and/or vulnerabilities 

Assessing compliance with IT security policies and technical standards (e.g. ISO 27001, NIST, Cyber Essentials, COBIT, etc…) 

Additional technical qualifications (e.g. CRISC, CISM, NCSC CCP, ISSAP, CompTIA SecurityX, CCSK, CCSP, GDSA, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor) 

Knowledge of well-known Frameworks (e.g., NIST, MITRE ATT&CK, ISO 27001) and how they are applied pragmatically within delivery. 

Ability to work with limited supervision.

By applying for this role you will automatically be considered for a Senior Cyber Risk and Assurance Analyst role if we feel you exceed these requirements. 

The assessment process will comprise of two interview stages and will include capability testing. The interviews will be in-person.  

  Our Approach to Inclusion The Bank values diversity, equity and inclusion. We play a key role in maintaining monetary and financial stability, and to do that effectively, we believe we need a workforce that reflects the society we serve. 
  At the Bank of England, we want all colleagues to feel valued and respected, so we're working hard to build an inclusive culture which supports people from all backgrounds and communities to be at their best at work. We celebrate all forms of diversity, including (but not limited to) age, disability, ethnicity, gender, gender identity, race, religion, sexual orientation and socioeconomic status. We believe that it’s by drawing on different perspectives and experiences that we’ll continue to make the best decisions for the public.
  We welcome applications from individuals who work flexibly, including job shares and part time working patterns. We've also partnered with external organisations to support us in making adjustments for candidates and employees in the recruitment process where they're needed.
  From 1st October 2026, we expect all our colleagues to spend a minimum of 50% of their working time in the office per month. This is to capitalise on the benefits of working together in person across teams, while maintaining the flexibility offered by home working. Subject to that minimum requirement, individuals and managers should work together to find what works best for them and their team.
  Finally, we're proud to be a member of the Disability Confident Scheme

. If you wish to apply under this scheme, you should check the box in the ‘Candidate Personal Information’ under the ‘Disability Confident Scheme’ section of the application.
  Salary and Benefits Information We encourage flexible working, part time working and job share arrangements.  Part time salary and benefits will be on a pro-rated basis as appropriate.
  In addition, we also offer a comprehensive benefits package as detailed below:

• Currently a non-contributory, career average pension giving you a guaranteed retirement benefit of 1/80th of your annual salary for every year worked. There is the option to increase your pension (to 1/65th) or decrease (to 1/105th) in exchange for salary through our flexible benefits programme each year.  The Bank has the discretion to vary standard accrual rates and dial up and dial down rates at any time and to withdraw dial up and dial down options at any time.
• A discretionary performance award based on a current award pool.
• An 8% benefits allowance with the option to take as salary or purchase a wide range of flexible benefits.   
• 26 days’ annual leave with option to buy up to 12 additional days through flexible benefits. 
• Private medical insurance and income protection.

National Security Vetting Process Employment in this role will be subject to the National Security Vetting clearance process (and typically can take between 6 to 12 weeks post offer) and the passing of additional Bank security checks in accordance with the Bank policy.  Further information regarding the vetting and security clearance requirements for the role will be provided to the successful applicant, and information about how the Bank processes personal data for these purposes, is set out in the Bank's Privacy Notice.
 

The Bank of England welcomes applications from all candidates, but as a UK Visas and Immigration (UKVI) approved sponsor, we have a responsibility to comply with the Immigration Rules and guidance.  As such, our ability to employ individuals who require sponsorship for immigration purposes is limited.  The Bank cannot guarantee that you and / or the role you are applying for will be eligible for sponsorship and that any application made to UKVI will be successful.  Eligibility will therefore be considered on a case by case basis.

  The Application Process Important: Please ensure that you complete the ‘work history’ section and answer ALL the application questions fully. All candidate applications are anonymised to ensure that our hiring managers will not be able to see your personal information, including your CV, when reviewing your application details at the screening stage. It’s therefore really important that you fill out the work history and application form questions, as your answers will form a critical part of the initial selection process.
  This role closes on 10th September.
  Please apply online, ensuring that you complete your work history and answer ALL the application questions fully and in detail as your application will not be considered if all mandatory questions are not fully completed.