Opportunity ID
703
/*generated inline style */
Location
IWM Duxford
/*generated inline style */
Career Level
D
/*generated inline style */
Salary
£42,500 to £45,000 per annum
/*generated inline style */
Hours
36
/*generated inline style */
Department
AV Services, IT Services
/*generated inline style */
Position type
Permanent
/*generated inline style */
Job Summary
What It's Like to Work Here
At Imperial War Museums, we're driven by a shared purpose: helping people understand conflict and its impact on people's lives, from the First World War through to the present day. Our collections contain millions of items, stories and digital assets that preserve some of the most important moments in modern history.
You'll join a collaborative team who work together to protect and make these collections accessible for future generations. It's a unique opportunity to combine cyber security expertise with meaningful work that supports one of the world's leading museums of conflict.
Why This Role Matters
Cyber security plays a vital role in protecting IWM's systems, services and information assets from an evolving threat landscape. As Cyber Assurance & Risk Analyst, you'll help strengthen the organisation's cyber resilience by ensuring compliance with government and industry security standards, embedding secure-by-design principles into projects and managing cyber risks across our supplier landscape.
By delivering key assurance activities, you'll help improve organisational cyber capability and ensure IWM continues to safeguard the services relied upon by colleagues, visitors, researchers and stakeholders.
What You'll Be Doing
Coordinate and manage IWM's Cyber Essentials certification, including evidence gathering, submission management and remediation tracking.
Lead GovAssure submissions through control mapping, evidence collation and stakeholder engagement.
Manage compliance against Civil Aviation Authority (CAA) cyber security requirements and other relevant standards.
Maintain assurance documentation and support continuous compliance against recognised cyber security frameworks.
Embed secure-by-design principles into technology and digital projects from initiation through to delivery.
Review proposed solutions and provide assurance that appropriate security controls are implemented before go-live.
Own and operate IWM's third-party cyber risk management platform, supporting supplier onboarding, assessments and ongoing monitoring.
Identify, assess, manage and escalate cyber risks across the supply chain, tracking remediation activities where required.
Produce assurance, compliance and cyber risk reports for governance boards and senior stakeholders.
Support cyber governance activities, risk management processes and the maintenance of accurate cyber risk records.
Contribute to the development of cyber security policies, standards, controls and continuous improvement initiatives.
Provide guidance on cyber compliance matters and work collaboratively with colleagues, suppliers and external partners to support assurance objectives.
Support financial administration activities, including purchase orders, invoice processing and departmental administration where required.
What We're Looking For
We'd love to hear from you if you have:
Experience of cyber security governance, assurance, compliance or risk management activities.
Knowledge of recognised cyber security frameworks and standards such as Cyber Essentials, NCSC guidance, ISO 27001 or equivalent.
Experience managing compliance evidence, audit activities or regulatory submissions.
Experience of supplier or third-party cyber risk assessment and management processes.
Strong analytical skills with the ability to identify risks and communicate findings clearly to a range of stakeholders.
Experience producing reports, dashboards or management information for governance forums and senior audiences.
Experience of GovAssure, Cyber Essentials Plus, government cyber assurance frameworks, cyber risk management platforms and experience within the public sector, cultural sector or other regulated environments would be advantageous
How You'll Work
You'll work collaboratively with the IT & AV Services team, internal teams and external partners to strengthen IWM's cyber resilience, support regulatory compliance and enable secure delivery of digital services.
What Success Looks Like (First 6-12 Months)
Develop a strong understanding of IWM's technology environment, cyber security requirements and organisational priorities.
Become a trusted advisor on cyber assurance, compliance and supply chain cyber risk management across the organisation.
Independently supporting Cyber Essentials and GovAssure evidence collection activities.
Managing supplier onboarding and cyber risk assessment activities through the third-party risk management platform.
Embed secure-by-design principles within projects and contribute to stronger cyber governance and resilience across IWM.
Build effective relationships with colleagues, suppliers and stakeholders to support the delivery of cyber assurance objectives.
For a full list of duties and the person specification (which your application will be marked against) please view the Job Description.
/*generated inline style */
/*generated inline style */
Application closing date
September 8th 2026, 11:55 PM
/*generated inline style */
Interview Details
Interviews for this post are planned for the week commencing Monday 14th September.
/*generated inline style */
Benefits
The benefits listed below are discretionary and IWM reserves the right, with due notice, to vary or withdraw them at any time. All such benefits apply during the course of your employment only.
Annual Leave: You'll have 25 days of annual leave, with public holidays on top. After 3 years, this increases to 27 days and after 5 years, you’ll get 30 days
Company Group Pension Plan: Our commitment to your financial well-being includes competitive employer contributions to your pension starting at 7% to a maximum of 12%.
Enhanced Maternity and Paternity Benefits: Celebrate life’s milestones with confidence, knowing that our policies support growing families.
IWM4me: Tailor your benefits to your unique needs through IWM4me. Access health, protection, and lifestyle benefits at corporate rates, ensuring your holistic well-being.
Free Sanitary Products: We prioritise your comfort by providing free sanitary products across all our sites.
Retail Discounts: 25% off IWM Cafes, 20% discount in on-site shops, Benefits hub offering retail discounts to several high street shops (via our EAP provider) and MyActive discounts for health and wellbeing based retail discounts (via IWM4me)
Free Entry to IWM Air Shows: Witness the thrill of vintage aircraft at our air shows.
Free Entry to Partner Museums & Galleries: Immerse yourself in art, history, and culture through our reciprocal arrangements with other institutions.
In-House Training Programmes: Fuel your intellectual curiosity and professional growth through our comprehensive training initiatives.
Season Ticket Loan Scheme: Simplify your daily commute with our interest-free loan program.
Cycle 2 Work & Cycle Hire: Promote well-being and environmental consciousness by cycling to work.
Eye Tests: Money back up to £80 for an eye test and a new pair of glasses.
Employee Assistance Programme: Access confidential support for personal or work-related challenges.
Benenden Healthcare & Dental Insurance: Prioritise your health with access to quality healthcare services (subject to terms and conditions).
Civil Service Sports Club Membership: Opportunity to join and enjoy additional discounts and perks as part of a vibrant community.
Staff Events and Networks: Join fellow colleagues in social gatherings and events, fostering camaraderie and shared experiences.
…and more!
Ready to embark on this exciting journey with us? Apply now and become part of IWM!
/*generated inline style */
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions. This role is subject to:
/*generated inline style */
A basic check, which shows unspent convictions and conditional cautions.
/*generated inline style */
Equal Opportunities and Flexible Working
IWM is committed to a policy of Equal Opportunities.
We miss out when people feel IWM isn't for them, and are committed to removing and reducing barriers to make IWM open to everyone.
Our Access and Inclusion strategy has been developed to promote openness, equal opportunities to access, inclusivity and encourage diversity in everything that we do, from employment practices, the services we provide to our visitors to the facilities we make available to public.
At IWM we seek to address the need for greater diversity within our workforce as well as the wider museum and heritage sector. In all our practices we embrace diversity and promote equality of opportunity and we welcome applications from suitable candidates of all backgrounds.
We value and respect difference and are committed to building an inclusive culture by creating an environment where you can balance a successful career with your commitments and interests outside of work. We believe that you will do your best at work if you have a work / life balance. Some roles lend themselves to flexible options more than others, so if this is important to you please raise this with your recruitment contact, as we are open to discussing agile working opportunities during the hiring process.
/*generated inline style */
/*generated inline style */
