Senior Information Security Risk Analyst

Senior Information Security Risk Analyst

SWIFT

London, United Kingdom

Are you passionate about security Governance, Risk and Compliance (GRC)? Do you thrive in a dynamic environment where your experience and your security expertise can shape the future of our organization?

We are looking for a Cyber Risk/Information Security Risk Specialist like you to join our growing Information Security Governance team.

In this role, you will:

• Support information security risk assessments across business initiatives, technologies, and third‑party engagements, ensuring risks to confidentiality, integrity, and availability are properly identified, assessed, and documented.
• Maintain and continuously improve the security risk management framework, including methodologies, policies, standards, and supporting documentation.
• Coordinate the monitoring, reporting, and escalation of security risks, including maintaining the Security Risk Registry and supporting risk review and decision forums.
• Partner with stakeholders across Technology, Business, and Security teams to ensure consistent risk treatment, risk acceptance, and remediation tracking in line with risk appetite.
• Contribute to security governance activities, including preparation of management and committee reporting, metrics, and risk insights for senior stakeholders.
• Support compliance with regulatory, oversight, and audit expectations by providing clear evidence of effective information security risk management.
• Promote risk awareness and security-by-design by advising on controls, design decisions, and risk trade‑offs throughout the lifecycle of projects, products, and services.
• Act as a trusted subject‑matter expert on cyber and information security risk, continuously tracking emerging threats, control gaps, and best practices.

What to expect:

You will join a great team of cyber security professionals supporting SWIFT Global Security GRC practices. As part of our Security Risk function, you will work with diverse talented teams committed to excellence: you will work closely with business units, risk department teams, technology teams and other units.

You have the unique talent of marrying business concepts, including SWIFT services, operations and technologies with information security risks and compliance obligations.

You have excellent inter-personal skills and can manage relationships effectively. You are able to see win-win outcomes and drive discussions toward such outcomes.

While you will follow a standardized approach, you will innovate and change processes as needed. You will spot areas of improvement and work towards making meaningful changes. You will ensure that SWIFT tackles the most urgent and highest priorities, using data and your analytical skills.

You will work on leading edge practices and technologies (agile teams, data analytics, container, cloud) supporting a worldwide critical infrastructure, highly secure and advanced financial organization. You will grow your cyber security knowledge, relate cyber to business benefits and learn from the leaders in the secure financial transactions space.

Qualifications:

What will make you successful

Technical skills & knowledge:

• Broad knowledge of cyber security concepts including cryptography, authentication and authorization, access control, secure architectures, threat modeling, vulnerabilities and software security.
• Strong knowledge of regulatory requirements (e.g. GDPR, ISO27001, PCI-DSS) and experience in regulatory reporting.
• 3-5 years of experience in GRC and/or security risk management
• A bachelor’s degree in computer science, Cyber Security or similar disciplines.
• Excellent interpersonal skills and the ability to communicate effectively with technical and non-technical audience.
• Good analytical skills to translate complex GRC activities into clear and actionable insight.

Preferred Qualifications

• Relevant security certifications (e.g. CRISC, CISA, CISSP) are a plus.
• Expertise in cyber security working for financial institutions or other critical infrastructures.
• Expertise in working within global organizations with offices around the world.
• Prior consulting or similar service-oriented experience for internal and external customers.

Professional skills & competencies

• Autonomous, driven, with strong ability to quickly adapt and respond to change.
• Customer oriented and quality mindset – we continually strive to deliver true customer value.
• Open-minded, solutions oriented, and a true team player – gaining energy through collaboration with others.
• Fluent in English (spoken and written).
• You have the unique talent of marrying business concepts, including SWIFT services, operations and technologies with cyber security risks.
• You have excellent inter-personal skills and can manage relationships effectively. You are able to see win-win outcomes and drive discussions toward such outcomes.