Security Risk Analyst (Cybersecurity)

Location: Hybrid, with a minimum of 20% attendance at the Oxford office per month; Oxford, GB

Company

hirify.global operates the .UK domain registry and provides DNS expertise supporting critical internet infrastructure, including government services.

What you will do

• Assess security risks and controls across systems, projects, business areas, and suppliers using ISO 27001, NIST, CIS Controls, and the NCSC Cyber Assessment Framework.
• Identify control gaps and track risk treatment plans, exceptions, corrective actions, and remediation with owners.
• Support supplier security assessments and follow agreed actions through completion.
• Maintain accurate records of risks, controls, compliance obligations, and assurance activity.
• Improve security risk approaches, policies, and standards while keeping them clear and proportionate.
• Build security awareness by turning complex security information into practical advice for stakeholders.

Requirements

• Experience supporting, managing, implementing, or auditing security risk, compliance, or assurance activity.
• Ability to assess controls and risks, agree practical actions with owners, and maintain accurate auditable records.
• Knowledge of information security standards or guidance such as ISO 27001, NIST, CIS Controls, or NCSC guidance.
• Understanding of supplier security risk and controls including access management, vulnerability management, and incident response.
• Ability to analyse qualitative and quantitative information and explain findings clearly.
• Strong analytical and communication skills, with the ability to work with stakeholders to resolve issues.
• All roles are subject to a Baseline Personnel Security Standard check; some roles may require additional security clearance.
• Visa sponsorship and relocation support are not available.

Culture & Benefits

• Permanent employment with hybrid working and a 34-hour working week on full-time pay, including an early finish at midday on Friday.
• 30 days of annual leave plus bank holidays, with the option to buy five additional days.
• Bupa private healthcare, Employee Assistance Programme, Medicash discounts, and a pension scheme matched to 7%.
• Electric vehicle scheme with on-site charging, rewards platform discounts, and an annual company bonus.
• Values include making things happen, pulling together, maintaining a positive mindset, and keeping things simple.

Hiring process

• First stage: 30–45-minute introduction call with a Talent Acquisition team member.
• Second stage: 30-minute hiring manager interview.
• Third stage: 60-minute onsite interview.