About the Role
The Cyber Security Division advises business areas on how best to manage and mitigate the cyber security risks in one of the Bank’s most complex and fastest growing risk areas: the supply chain. As a Junior Cyber Risk and Assurance Analyst, you’ll support the assessment of suppliers, partners, software, hardware and services that underpin critical financial operations. You’ll work at the intersection of business, risk, and cyber security, gaining hands-on experience while helping ensure that organisations, equipment and processes that are essential to the UK economy meet appropriate security standards.
Responsibilities
- Reviewing responses to cyber and risk questionnaires
- Engaging with stakeholders to understand how they manage security and data
- Supporting, then performing, risk assessments and assurance activities
- Identifying control gaps and helping shape pragmatic recommendations
- Contributing to clear, concise reports for senior stakeholders
Requirements
- Excellent English reading and comprehension
- Strong analytical and problem-solving skills
- Experience of liaising with business stakeholders to reach agreement
- Experience writing clear reports and presenting them to groups
- Confidence engaging with stakeholders and suppliers
- Interest in cyber security, risk, or governance
- Ability to communicate complex choices simply and effectively
- Attention to detail and a structured approach to work
- Relevant professional qualification (e.g. CISSP, BCS Foundation Certificate in Data Protection, BCS CISMP, ISO/IEC 27001 Foundation, BCS Foundation Certificate in Cyber Security, CompTIA Security+, ISC2 Certified in Cybersecurity, BCS Foundation Certificate in IT, CompTIA ITF+, CompTIA A+, CompTIA Network+, ISO 31000 Foundation)
- Eager to learn about IT network architecture and components, software/application security, infrastructure security, cloud
- Active interest in new technical concepts and/or technologies
- Good stakeholder collaboration skills
- Proven experience in technical roles (preferably with a cyber security element)
- Experience working in cyber security consultancy or architecture roles within highly regulated sectors (e.g. financial/insurance, defence, civil nuclear, intelligence)
- Experience working in a professional/business environment
- Experience conducting technical risk assessments
- Exposure to supplier management, audit, compliance, or risk
- Awareness of cyber security concepts (e.g. threats, controls, data protection)
- Experience analysing technical problems to identify potential security concerns
- Reviewing IT architecture to identify potential security gaps and/or vulnerabilities
- Assessing compliance with IT security policies and technical standards (e.g. ISO 27001, NIST, Cyber Essentials, COBIT, etc…)
- Additional technical qualifications (e.g. CRISC, CISM, NCSC CCP, ISSAP, CompTIA SecurityX, CCSK, CCSP, GDSA, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor)
- Knowledge of well-known Frameworks (e.g., NIST, MITRE ATT&CK, ISO 27001) and how they are applied pragmatically within delivery
- Ability to work with limited supervision
- Employment in this role will be subject to the National Security Vetting clearance process (and typically can take between 6 to 12 weeks post offer) and the passing of additional Bank security checks in accordance with the Bank policy.
Skills
- Cyber security
- Risk assessment
- Assurance activities
- Stakeholder engagement
- Reporting
- IT network architecture
- Software/application security
- Infrastructure security
- Cloud security
- Technical risk assessments
- Supplier management
- Audit
- Compliance
- Data protection
- IT architecture analysis
- Security policy assessment
- NIST
- MITRE ATT&CK
- ISO 27001
Location
- London
Work Type
- Permanent
- Hybrid
Experience Level
- Junior
- Professional with a few years’ experience
Education Level
- Relevant professional qualification
Benefits
- A pathway into cyber security, compliance, risk, and resilience careers
- Training and support for certifications
- The opportunity to work on issues of national importance
- A collaborative, inclusive, and intellectually stimulating environment
- A strong focus on work-life balance and flexible working
- Non-contributory, career average pension (1/80th of annual salary per year worked, with option to adjust)
- Discretionary performance award
- 8% benefits allowance (can be taken as salary or used for flexible benefits)
- 26 days’ annual leave (option to buy up to 12 additional days)
- Private medical insurance
- Income protection
About the Company
- The Cyber Security Division (CSD) is an award-winning group of cyber security experts who are committed to keeping the Bank of England safe from cyber-attacks and incidents.
- Within Cyber Security you will be working with people who are passionate about protecting the Bank from Cyber security incidents.
- Given the importance and complexity of technology for the Bank of England, the security challenges are rarely straightforward and often span multiple systems hosted in our own data centres, in the cloud and as SaaS, requiring cross-team working and deep technical expertise to address them effectively.
- Our teams are committed to developing their expertise in a constantly evolving environment.
- Aligned to industry best-practice, staff are encouraged to develop their skills both internally and externally, through mentoring, training and formal qualifications.
- The Bank values diversity, equity and inclusion.
- We play a key role in maintaining monetary and financial stability, and to do that effectively, we believe we need a workforce that reflects the society we serve.
- At the Bank of England, we want all colleagues to feel valued and respected, so we're working hard to build an inclusive culture which supports people from all backgrounds and communities to be at their best at work.
- We celebrate all diversity, including age, disability, ethnicity, gender, gender identity, race, religion, sexual orientation and socioeconomic status.
- We believe that it’s by drawing on different perspectives and experiences that we’ll continue to make the best decisions for the public.
- We welcome applications from individuals who work flexibly, including job shares and part time working patterns.
- We've also partnered with external organisations to support us in making adjustments for candidates and employees in the recruitment process where they're needed.
- From 1st October 2026, we expect all our colleagues to spend a minimum of 50% of their working time in the office per month.
- We're proud to be a member of the Disability Confident Scheme.
- This is more than a job. It’s a chance to work on challenges that really matter to the UK economy, build a long-term, rewarding career in cyber and risk, be part of a team that values collaboration and continuous learning, and enjoy a role that is varied and genuinely worthwhile.
Equal Opportunity
- The Bank values diversity, equity and inclusion.
- We celebrate all forms of diversity, including (but not limited to) age, disability, ethnicity, gender, gender identity, race, religion, sexual orientation and socioeconomic status.
- We welcome applications from individuals who work flexibly, including job shares and part time working patterns.
- We've also partnered with external organisations to support us in making adjustments for candidates and employees in the recruitment process where they're needed.
- We're proud to be a member of the Disability Confident Scheme.
