Cyber Risk EOL_Consultant

Who is HelloKindred?

HelloKindred are specialists in staffing marketing, creative and technology roles, offering a range of talent solutions that can be delivered on-site, remotely or hybrid.

Our vision is to make work accessible and people’s lives better. We do this by disrupting traditional employment barriers – connecting ambitious talent to flexible opportunities with trusted brands.

Anticipated Contract End Date/Length: October 30, 2026

Work Set Up: Hybrid

Our client in the Information Technology and Services industry is looking for a Cyber Risk EOL Consultant to execute detailed risk assessments and analysis of End-of-Life (EOL) technologies. The role involves collecting and analyzing data on EOL systems, evaluating cyber risks using defined methodologies, and supporting the implementation of remediation plans. The consultant will perform hands-on evaluation of assets and vulnerabilities, maintain risk documentation, and collaborate closely with the Lead Consultant and various technology teams. Strong analytical skills, attention to detail, and a proactive approach to managing cyber risks across legacy technologies are essential.

What you will do:

• Perform in-depth cyber risk assessments for identified EOL systems and technologies following established methodology.
• Gather information on assets, including software, hardware, and applications that are end-of-life or end-of-support.
• Evaluate potential cyber threats, vulnerabilities, and business impacts for each asset.
• Document findings meticulously, describing likelihood, impact, and severity in the risk register.
• Apply the cyber risk rating methodology consistently across technologies and conduct quality assurance on risk assessments.
• Identify mitigation options, including upgrades, patches, segmentation, monitoring, or compensating controls.
• Support prioritization and remediation of risks by coordinating with technical teams and communicating risk details to application owners or engineers.
• Track progress of remediation activities and escalate blockers or delays to the Lead Consultant.
• Monitor risk treatment plans and ensure remediation steps are completed or on track.
• Prepare status updates and contribute to risk reports, highlighting resolved items, pending actions, and changes in risk posture.
• Engage with stakeholders to gather data, validate risk assumptions, and communicate technical findings clearly to technical and non-technical audiences.
• Contribute to process improvements, templates, and checklists to enhance risk assessment accuracy and efficiency.
• Build awareness of cybersecurity risks and best practices among project teams.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent experience in cyber risk or IT security roles.
• Relevant industry certifications (e.g., CompTIA Security+, CEH, GIAC/GSEC, CRISC, CISA, ISO 27001) highly valued.
• Training in cyber risk analysis, enterprise risk management, or IT audit beneficial.
• Approximately 3–5+ years of experience in cybersecurity or IT risk roles, including Cyber Risk Analyst, IT Risk Analyst, Security Analyst, Vulnerability Management Specialist, or GRC Analyst.
• Hands-on experience conducting risk or security assessments, maintaining risk registers, and tracking mitigation actions.
• Experience in large enterprise IT environments, preferably with legacy systems or tech refresh projects.
• Knowledge of cybersecurity principles, risk frameworks, and standards such as NIST or ISO 27001.
• Strong analytical and problem-solving skills, attention to detail, and ability to assess complex IT systems.
• Solid written and verbal communication skills to produce clear risk documentation and collaborate with stakeholders.
• Collaborative mindset, ability to work under direction, and take initiative within team responsibilities.
• Good organizational and time management skills to handle multiple assessment tasks and meet project deadlines.
• Adaptability to overlap with UK working hours if offshore, quickly learn new tools or EOL technologies, and maintain proactive risk management.

All your information will be kept confidential according to EEO guidelines.

Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.

HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.

We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.

HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.