Cyber Assurance & Risk Analyst
Location: IWM London
Salary: £42,500 to £45,000 per annum
Vacancy Type: Permanent, Full Time (36hours per week)
Closing Date: 8 of September 2026
At Imperial War Museums, we're driven by a shared purpose: helping people understand conflict and its impact on people's lives, from the First World War through to the present day. Our collections contain millions of items, stories and digital assets that preserve some of the most important moments in modern history.
You'll join a collaborative team who work together to protect and make these collections accessible for future generations. It's a unique opportunity to combine cyber security expertise with meaningful work that supports one of the world's leading museums of conflict.
Why This Role Matters
Cyber security plays a vital role in protecting IWM's systems, services and information assets from an evolving threat landscape. As Cyber Assurance & Risk Analyst, you'll help strengthen the organisation's cyber resilience by ensuring compliance with government and industry security standards, embedding secure-by-design principles into projects and managing cyber risks across our supplier landscape.
By delivering key assurance activities, you'll help improve organisational cyber capability and ensure IWM continues to safeguard the services relied upon by colleagues, visitors, researchers and stakeholders.
What You'll Be Doing
Coordinate and manage IWM's Cyber Essentials certification, including evidence gathering, submission management and remediation tracking.
Lead GovAssure submissions through control mapping, evidence collation and stakeholder engagement.
Manage compliance against Civil Aviation Authority (CAA) cyber security requirements and other relevant standards.
Maintain assurance documentation and support continuous compliance against recognised cyber security frameworks.
Embed secure-by-design principles into technology and digital projects from initiation through to delivery.
Review proposed solutions and provide assurance that appropriate security controls are implemented before go-live.
Own and operate IWM's third-party cyber risk management platform, supporting supplier onboarding, assessments and ongoing monitoring.
Identify, assess, manage and escalate cyber risks across the supply chain, tracking remediation activities where required.
Produce assurance, compliance and cyber risk reports for governance boards and senior stakeholders.
Support cyber governance activities, risk management processes and the maintenance of accurate cyber risk records.
Contribute to the development of cyber security policies, standards, controls and continuous improvement initiatives.
Provide guidance on cyber compliance matters and work collaboratively with colleagues, suppliers and external partners to support assurance objectives.
Support financial administration activities, including purchase orders, invoice processing and departmental administration where required.
What We're Looking For
Experience of cyber security governance, assurance, compliance or risk management activities.
Knowledge of recognised cyber security frameworks and standards such as Cyber Essentials, NCSC guidance, ISO 27001 or equivalent.
Experience managing compliance evidence, audit activities or regulatory submissions.
Experience of supplier or third-party cyber risk assessment and management processes.
Strong analytical skills with the ability to identify risks and communicate findings clearly to a range of stakeholders.
Experience producing reports, dashboards or management information for governance forums and senior audiences.
Benefits
The benefits listed below are discretionary and IWM reserves the right, with due notice, to vary or withdraw them at any time.
Annual Leave: You'll have 25 days of annual leave, with public holidays on top. After 3 years, this increases to 27 days and after 5 years, you’ll get 30 days
Company Group Pension Plan: Includes competitive employer contributions to your pension starting at 7% to a maximum of 12%.
Enhanced Maternity and Paternity Benefits: Celebrate life’s milestones with confidence, knowing that our policies support growing families.
IWM4me: Tailor your benefits to your unique needs through IWM4me. Access health, protection, and lifestyle benefits at corporate rates, ensuring your holistic well-being.
Free Sanitary Products: We prioritise your comfort by providing free sanitary products across all our sites.
Retail Discounts: 25% off IWM Cafes, 20% discount in on-site shops, Benefits hub offering retail discounts to several high street shops and MyActive discounts for health and wellbeing based retail discounts
Free Entry to IWM Air Shows: Witness the thrill of vintage aircraft at our air shows.
To Apply
If you feel you are a suitable candidate and would like to work for Imperial War Museum, please click apply to be redirected to our website to complete your application.
Neutral 2–4 sentence summary of what working at this company is like, drawn from public reviews and press coverage. Tone, collaboration style, pace, benefits highlights.
