Junior Cyber Risk and Assurance Analyst (12m FTC)
- Bank of England
- City of London, London
- Aug 21, 2026
Job Description
Location: London
12 month FTC
Cyber Security Division
The Cyber Security Division (CSD) is an award-winning group of cyber security experts who are committed to keeping the Bank of England safe from cyber-attacks and incidents. In 2023 CSD were recognised with the Financial Services award of the year at the National Cyber Awards. This followed previous award wins for individuals within our team at the WeAreTechWomen and Women in IT Awards, and Central Banking's Best Cyber Resilience Initiative.
Within Cyber Security you will be working with people who are passionate about protecting the Bank from Cyber security incidents. Given the importance and complexity of technology for the Bank of England, the security challenges are rarely straightforward and often span multiple systems hosted in our own data centres, in the cloud and as SaaS, requiring cross-team working and deep technical expertise to address them effectively.
You'll assess the security of solutions being considered by Bank teams, including SaaS solutions. By collaborating closely with colleagues across Technology and throughout the organisation you will play a key role in safeguarding the Bank and its information.
Our teams are committed to developing their expertise in a constantly evolving environment. Aligned to industry best-practice, staff are encouraged to develop their skills both internally and externally, through mentoring, training and formal qualifications.
Job Description:
The Cyber Security Division advises business areas on how best to manage and mitigate the cyber security risks in one of the Bank's most complex and fastest growing risk areas: the supply chain.
As a Junior Cyber Risk and Assurance Analyst, you'll support the assessment of suppliers, partners, software, hardware and services that underpin critical financial operations.
You'll work at the intersection of business, risk, and cyber security, gaining hands-on experience while helping ensure that organisations, equipment and processes that are essential to the UK economy meet appropriate security standards.
Typical activities include:
- Reviewing responses to cyber and risk questionnaires
- Engaging with stakeholders to understand how they manage security and data
- Supporting, then performing, risk assessments and assurance activities
- Identifying control gaps and helping shape pragmatic recommendations
- Contributing to clear, concise reports for senior stakeholders
You'll be supported by experienced colleagues and given the opportunity to develop in a high-impact area of cyber security. Time for training and exams will be provided to help you progress your career.
We are particularly interested in candidates who bring real-world business experience and want to apply it in a cyber context.
You might be:
- A professional with a few years' experience in business, consulting, procurement, audit, risk, or operations
- Looking to transition into cyber security from a related field
- Already in a junior cyber, risk, compliance or governance role and seeking a new challenge with greater impact
Above all, you're someone who:
- Enjoys analysing information and understanding how organisations work
- Is diligent, curious, proactive, and comfortable asking questions
- Communicates clearly with both technical and non-technical stakeholders
What We Offer
- A pathway into cyber security, compliance, risk, and resilience careers
- Training and support for certifications
- The opportunity to work on issues of national importance
- A collaborative, inclusive, and intellectually stimulating environment
- A strong focus on work-life balance and flexible working
Why Join the Bank of England?
Because this is more than a job. It's a chance to:
- Work on challenges that really matter to the UK economy
- Build a long-term, rewarding career in cyber and risk
- Be part of a team that values collaboration and continuous learning
- And enjoy a role that is varied and genuinely worthwhile
Role Requirements:
Minimum Criteria
- Excellent English reading and comprehension.
- Strong analytical and problem-solving skills
- Experience of liaising with business stakeholders to reach agreement
- Experience writing clear reports and presenting them to groups
- At least one of the following:
- Confidence engaging with stakeholders and suppliers
- Interest in cyber security, risk, or governance
- Ability to communicate complex choices simply and effectively
- Attention to detail and a structured approach to work
- Relevant professional qualification (e.g. CISSP, BCS Foundation Certificate in Data Protection, BCS CISMP, ISO/IEC 27001 Foundation, BCS Foundation Certificate in Cyber Security, CompTIA Security+, ISC2 Certified in Cybersecurity, BCS Foundation Certificate in IT, CompTIA ITF+, CompTIA A+, CompTIA Network+, ISO 31000 Foundation).
Essential Criteria
- Eager to learn about IT network architecture and components, software/application security, infrastructure security, cloud.
- Active interest in new technical concepts and/or technologies.
- Good stakeholder collaboration skills.
Desirable Criteria
- Proven experience in technical roles (preferably with a cyber security element).
- Experience working in cyber security consultancy or architecture roles within highly regulated sectors (e.g. financial/insurance, defence, civil nuclear, intelligence).
- Experience working in a professional/business environment
- Experience conducting technical risk assessments
- Exposure to supplier management, audit, compliance, or risk
- Awareness of cyber security concepts (e.g. threats, controls, data protection)
- Experience analysing technical problems to identify potential security concerns
- Reviewing IT architecture to identify potential security gaps and/or vulnerabilities
- Assessing compliance with IT security policies and technical standards (e.g. ISO 27001, NIST, Cyber Essentials, COBIT, etc…)
- Additional technical qualifications (e.g. CRISC, CISM, NCSC CCP, ISSAP, CompTIA SecurityX, CCSK, CCSP, GDSA, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor)
- Knowledge of well-known Frameworks (e.g., NIST, MITRE ATT&CK, ISO 27001) and how they are applied pragmatically within delivery.
- Ability to work with limited supervision.
By applying for this role you will automatically be considered for a Senior Cyber Risk and Assurance Analyst role if we feel you exceed these requirements.
The assessment process will comprise of two interview stages and will include capability testing. The interviews will be in-person.
- Currently a non-contributory, career average pension giving you a guaranteed retirement benefit of 1/80th of your annual salary for every year worked. There is the option to increase your pension (to 1/65th) or decrease (to 1/105th) in exchange for salary through our flexible benefits programme each year. The Bank has the discretion to vary standard accrual rates and dial up and dial down rates at any time and to withdraw dial up and dial down options at any time.
- A discretionary performance award based on a current award pool.
- An 8% benefits allowance with the option to take as salary or purchase a wide range of flexible benefits.
- 26 days' annual leave with option to buy up to 12 additional days through flexible benefits.
- Private medical insurance and income protection.
The Bank of England welcomes applications from all candidates, but as a UK Visas and Immigration (UKVI) approved sponsor, we have a responsibility to comply with the Immigration Rules and guidance. As such, our ability to employ individuals who require sponsorship for immigration purposes is limited. The Bank cannot guarantee that you and / or the role you are applying for will be eligible for sponsorship and that any application made to UKVI will be successful. Eligibility will therefore be considered on a case by case basis.
The Bank of England is the central bank of the United Kingdom. Sometimes known as the “Old Lady” of Threadneedle Street, the Bank was founded in 1694 with a founding charter that stated its purpose was to “promote the public good and benefit of our people”.
The Bank of England’s purpose today reflects that vision first articulated by our founders. Our mission: to promote the good of the people of the United Kingdom by maintaining monetary and financial stability.
Workplace Initiatives
|
Program for parents returning to work after Parental Leave? |
We have a returner's session they can attend and our Parent's Network also run a separate returners session. |
|
Leadership development programs? |
Yes |
|
Mentoring programs? |
Yes |
|
Coaching programs? |
Yes |
|
Employee-led diversity networks? |
Yes |
|
Internal women’s networking groups? |
Yes |
|
Open to discussing flexible work arrangements at interview stage? |
Yes |
|
No. of weeks paid maternity leave at full salary: |
26 weeks |
|
Minimum weeks tenure required to be eligible for paid maternity leave: |
26 weeks service at the Qualifying week (15th week before due date) |
|
No. of weeks paid paternity leave at full salary: |
2 weeks |
|
Minimum tenure required to be eligible for paid paternity leave: |
26 weeks service at the Qualifying week (15th week before due date) |
|
Gender pay gap reporting information 2019 (UK): |
|
|
Mean pay gap: |
20.20% |
|
Median pay gap: |
23% |
|
Mean bonus (performance award) gap: |
21% |
|
Median bonus (performance award) gap: |
22% |
|
Signatory of the UK Women in Finance Charter? |
Yes |
|
Targets to raise the number of women in leadership? |
Yes |
|
Targets to raise the number of BAME individuals in leadership? |
Yes |
|
Listed in the Bloomberg Diversity & Inclusion Index? |
No |
Returner Programme
We recognise that there is a large untapped talent pool of experienced professionals on a career break, including many high-calibre women who have taken time out of their careers for a variety of different reasons. As part of our inclusion agenda, the Bank is partnering with Women Returners, a specialist return-to-work organisation, to run the Bank of England Career Returners Programme to attract and support returning professionals, with coaching and training support provided by Women Returners and the possibility of a permanent role at the end of the programme.
Applicants will have to go through a short assessment process in order to gain a role. Applicants must have had a career break of two or more years to be eligible for the programme. All returners who gain a position will receive coaching support from Women Returners to help them transition back in to the workplace. The returners will be taking on real live budgeted vacancies – they are not specifically created roles. Flexible working options will be available, though we would ask that all returners attend the full induction.
Testimonials
" I had never thought about working in the public sector. I genuinely can’t remember why I decided to go to the Career Returners launch event at the Bank but it was literally life changing. I realised there was a place where I could work in financial services and still be able to care for my children. This was hugely different from when I was in investment banking. I was also very impressed by the level and quality of people in the Bank. I doubt I wouldn’t be working today if it was not for the programme – it is as simple as that."
"I’m not sure I would have come back to work in the City if I hadn’t have found something like this. Having young children and a long commute, I knew I wouldn’t find the flexibility I needed in the investment banking industry that I used to work in. Finding this scheme gave me the prospect of working part-time and flexibly without giving up on interesting and challenging work."
Working for The Bank of England
As a place of work, the Bank feels different from other organisations. The atmosphere is relaxed but professional, research-driven and connected to real events in the economy. While organisations in the private sector are focused primarily on profits, our objectives are the quality of our thinking and analysis.
Whichever area you join, it’s likely you’ll work on high-impact projects. The issues we deal with on a daily basis are often in the news, and affect everyone in the country. For many of our people, contributing to the public good is one of the most rewarding aspects of working here.
Our historic building is located in the heart of the City and combines rich tradition with up-to-date facilities. Just as important, a strong culture of support exists in the organisation.
The Bank is a member of the Disability Confident scheme. This means that applicants who declare a disability and who meet the minimum requirements of the job description are fast-tracked to the first stage of assessment.
The Bank also encourages Diversity of Thought, which inspires colleagues in every area to share different ways of thinking, working and achieving success. The aim of this is to promote creativity and encourage diverse approaches by inviting people with different backgrounds, skills or talents to present their thoughts and ideas.
In order to promote and support diversity in all its forms, we also have a number of Employee Networks:
LGBT+ AND ALLIES NETWORK
The LGBT+ and Allies Network is fully inclusive and open to every member of staff. This includes people who may not identify as LGBT+ themselves, but who actively support their LGBT+ colleagues, and promote a working environment where everyone – regardless of sexual orientation or gender identity – feels safe and confident to be themselves.
We are a Stonewall Diversity Champion and participate in the Workplace Equality Index most years. In 2018, we moved up 101 places in the index – a huge improvement in one year. Working with Stonewall, we are committed to improving LGBT+ diversity and inclusion even further.
DISABILITY NETWORK
The key objective of the Disability Network is to identify and remove barriers so that people with disabilities can achieve their full potential at the Bank. As well as supporting individuals with specific employment issues, the network organises events for all employees to raise awareness of the full range of disabilities and the challenges facing those who live with them.
MENTAL HEALTH NETWORK
This network is focused on improving people’s understanding of mental health issues. As well as highlighting the support available to colleagues, it organises and sponsors events to combat the stigma around mental health. In doing so, it aims to ensure that anyone affected by mental health issues – either directly or indirectly – feels more inclined to open up and seek help earlier.
WOMEN IN THE BANK NETWORK
The Women in the Bank Network aims to ensure that all women can flourish in the workplace. It’s open to everyone, regardless of gender, focusing on identifying and tackling issues that can hold women back in their professional development and job satisfaction.
Although we still have a way to go, our efforts to address the imbalance between male and female employees have already achieved considerable success. Of around 1300 staff here, 43% are women with 33% at Governor level.
BEEM NETWORK
BEEM was established to inform, inspire, advocate and promote Black, Asian and Minority Ethnic (BAME) related matters in the Bank. As well as ensuring BAME staff experience the same performance reviews, rates of pay and development opportunities as non-BAME colleagues, BEEM is committed to addressing the imbalance of BAME representation at a senior management level.
MUSLIM NETWORK
The Muslim Network connects and supports Muslim colleagues throughout the Bank, ensuring no one ever has to compromise their religious obligations or spiritual needs in order to excel in their professional role. As part of this, the network also organises events and activities to mark important Islamic celebrations and bring people together throughout the year.
JEWISH NETWORK
The Jewish Network is here to support all Jewish colleagues across the Bank, and help them celebrate and raise awareness of their shared faith. The network is proud of its inclusivity and welcomes members from all denominations and beliefs, including Orthodox, Conservative, Progressive, Cultural and Atheist Jews, as well as those who are not affiliated.
CHRISTIAN UNION
The Christian Union is open to Christians of any (or no) denominational background, as well as colleagues who don’t consider themselves Christians but are interested in finding out more about the Christian faith. Its members regularly come together to study the Bible, pray, talk and socialise, with a focus on their faith and how it influences their work and everyday lives.
CARERS NETWORK
Whether it involves looking after someone with chronic illness, disability or mental health issues, an elderly relative or young children as part of a family, being a carer can be tremendously rewarding. But it’s also extremely demanding. The Carers Network provides the information, advice and support colleagues need to balance that responsibility with a successful career.