About the role

Contract: Initial 3 months with potential extension to 6 months

Location: Remote / Europe

Rate: Competitive day rate

Start: ASAP

NRG is working with an international organisation looking to bring an experienced Cyber Security Risk Analyst into its security team on an initial three-month contract.

This is a hands-on operational GRC role with a particular focus on third-party risk management, cyber risk assessments, remediation tracking and security governance.

Key Responsibilities

• Conduct third-party cybersecurity risk assessments across software, cloud services, suppliers and technology vendors
• Review supplier security documentation including ISO 27001 certifications, SOC reports, penetration testing reports and security questionnaires
• Maintain the cybersecurity risk register, supporting risk identification, assessment and prioritisation
• Track remediation actions and risk treatment plans through to closure
• Coordinate with internal stakeholders and third parties to progress security assessments and remediation
• Support security governance reporting, audit evidence gathering and risk review activities
• Provide first-line triage and administration for security-related requests during European business hours
• Maintain accurate security documentation, assessment records and supporting evidence

What we're looking for

• 3+ years' experience within Cyber Security, Information Security, GRC, Risk Management or Compliance
• Hands-on experience conducting third-party/vendor security risk assessments, including reviewing security questionnaires and supporting evidence
• Good working knowledge of security frameworks and standards including ISO 27001, NIST, CIS Controls and SOC reporting
• Experience maintaining cyber risk registers, tracking remediation actions and working independently with internal and external stakeholders

This role would suit a Cyber GRC, Third-Party Risk or Information Security professional who enjoys the operational side of risk management and is comfortable taking ownership of assessments through to completion.

The assignment is initially for three months, with the potential to extend to six months. We are particularly interested in speaking with candidates based across the UK and Europe who are available at short notice.

If you're interested, apply now and a member of the NRG Tech team will be in touch.

NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic. Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero-tolerance policy for breaches of our Equality and Diversity policy.