Cybersecurity Risk and Compliance Associate

Responsibilities

Our talent team is representing a confidential professional services organisation seeking a Cybersecurity Risk and Compliance Associate in London. In this role, you will strengthen assurance processes, improve risk visibility, and support the delivery of security initiatives across a global business.

Security assurance, compliance and audit readiness

• Support risk and controls assessments, including control walkthroughs, evidence gathering, gap analysis and remediation tracking.
• Coordinate evidence and actions for external audits and compliance assessments, including ISO 27001, SOC 2 and Cyber Essentials.
• Maintain clear, reusable control documentation and audit evidence to ensure assurance activity is efficient, consistent and audit-ready.
• Track risk-treatment actions, owners and deadlines, validate closure evidence and escalate delivery concerns when needed.

Governance, reporting and insight

• Help create and maintain security policies, standards, procedures and control descriptions, supporting review, approval and adoption across the business.
• Maintain security metrics, dashboards and action trackers covering audit findings, remediation, risk exceptions, third-party risk and other priority indicators.
• Bring structure to complex inputs and turn evidence, data and stakeholder feedback into clear reporting and practical recommendations.

Third-party risk and client assurance

• Support client security due diligence by coordinating accurate responses, evidence packs and control narratives with relevant internal teams.
• Assist with third-party risk assessments, including scoping, evidence review, findings, remediation and follow-up.
• Help improve third-party risk management playbooks, templates and reporting, and support the integration of risk review into vendor onboarding, renewal and change processes.

Cybersecurity programme and operational risk support

• Support delivery of the cybersecurity roadmap by tracking initiatives, dependencies, risks and stakeholder actions.
• Identify recurring control weaknesses and operational pain points, and help develop practical improvements through clearer ownership, better measurement and appropriate automation.
• Contribute to governance and assurance activities supporting vulnerability management, patching, access reviews, secure configuration and logging controls.

What We're Looking For

• Relevant experience in technology risk, cybersecurity governance, compliance, audit support, third-party risk or a related field.
• Working knowledge of control-based assurance and common frameworks such as ISO 27001, SOC 2 or Cyber Essentials; familiarity with NIST is beneficial.
• Strong analytical and organisational skills, with the ability to manage evidence, actions and deadlines across several workstreams.
• Clear written and verbal communication skills, with confidence working collaboratively across technical and business teams.
• A practical, detail-oriented approach and the curiosity to identify improvements rather than simply administer existing processes.

How We Work With You

Candidates apply directly through Get A Job.ai. Our recruiting team will screen your application and, if there's a strong match, schedule an initial conversation. We will then coordinate your submission to our client and guide you through their interview process. Please do not contact the client directly, as all communication is managed through our team to ensure the best candidate experience.

Pay

Compensation details will be discussed with qualified candidates during the screening process.

Equal Opportunity

Get A Job.ai is committed to inclusive hiring practices and works with clients who value diversity and equal opportunity in employment.