Security Risk and Controls Lead (12 Month Fixed Term Contract)

Page Tiger Limited; Peterborough; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A UK-based technology firm is seeking a Security Risk and Controls Lead for a 12-month fixed-term contract based in Peterborough (hybrid). You will assess and enhance security controls, lead risk assessments, and maintain documentation for audits. This crucial role requires expert knowledge in NIST 800-53 and ISO 27001 standards, and solid analytical skills. Benefits include free onsite parking, free lunch options, and a strong team culture.

Benefits

Modern work environment

Free onsite parking

Free lunch option

Great team culture

Qualifications

• Proven experience in designing and embedding security controls within IT or cyber security environments.
• Expert-level knowledge of NIST 800-53 and ISO 27001 standards.
• Strong analytical, problem-solving and communication skills with a high attention to detail.

Responsibilities

• Assess existing security controls and identify gaps against NIST 800-53 and ISO 27001 requirements.
• Design and develop an enhanced security controls framework.
• Lead risk assessments and strengthen the enterprise risk register.
• Drive closure of identified risk and control gaps.
• Maintain audit-ready documentation to support audits and certifications.

Skills

Experience designing security controls

Expert knowledge of NIST 800-53

Strong risk management experience

Stakeholder engagement skills

Analytical skills

Job description

Job Title: Security Risk and Controls Lead (12 Month Fixed Term Contract)

Location: Peterborough (Hybrid)

Are you a senior security risk professional with deep expertise in controls, risk frameworks and compliance reporting? Do you enjoy translating complex standards into practical, effective controls that strengthen security posture and support strategic decision‑making?

ABF’s Business Technology Services (BTS) Cyber Security function is looking for a Security Risk and Controls Lead to play a pivotal role in driving the development and implementation of security controls and enhancing enterprise risk management. Reporting to the GRC Manager, you’ll lead on controls maturity, risk framework development and reporting, while providing hands‑on support and guidance to the wider GRC team during a critical phase of cyber transformation.

What You’ll Be Doing

• Assessing existing BTS security controls and identifying gaps against NIST 800‑53 and ISO 27001 requirements
• Designing, developing and embedding an enhanced security controls framework aligned to industry‑recognised standards
• Leading risk assessments and strengthening the enterprise risk register to ensure both operational and strategic risks are accurately captured
• Actively driving the closure of identified risk and control gaps, supporting remediation activities across BTS
• Establishing and maintaining robust risk and controls reporting, including dashboards, scorecards and defined KPIs
• Defining, tracking and reporting key metrics such as control effectiveness, risk coverage, gap closure rate and audit readiness
• Maintaining audit‑ready documentation and evidence to support internal and external audits and certifications
• Providing hands‑on support, coaching and guidance to GRC colleagues, ensuring consistency and maturity across risk‑related activities

What You’ll Bring

• Proven experience designing, implementing and embedding security controls and risk management frameworks within complex IT or cyber security environments
• Expert‑level knowledge of NIST 800‑53 and ISO 27001, including control families, implementation and assurance activities
• Strong experience leading risk management, control assurance and compliance programmes at enterprise level
• Demonstrable ability to translate regulatory and framework requirements into practical, actionable controls
• Experience building and maintaining enterprise risk registers, risk radars, dashboards and KPI‑driven reporting
• Solid understanding of IT and security environments (infrastructure, applications and cloud) to effectively assess and design controls
• Excellent stakeholder engagement skills, with the confidence to influence senior leadership and cross‑functional teams
• Strong analytical, problem‑solving and communication skills, with high attention to detail

Location

Hybrid, a mix of office and homeworking. This role will be based at our Peterborough offices on the Lynchwood Business Park. The office has recently been renovated and along with a modern work environment has great public transport links, free onsite parking, free drink facilities, free lunch option each day and a great team culture.