Risk And Control Analyst

Key Responsibilities

• Build strong working relationships with technology stakeholders, including IT Service Owners, technical leads, developers and architects.
• Identify technology control gaps, risks and vulnerabilities across end-to-end services.
• Work closely with Cybersecurity, senior management and business stakeholders to address security and control issues.
• Support the development and continuous improvement of IT risk management processes, procedures and tools.
• Champion best practices across Software Lifecycle Management, Identity & Access Management (IDAM), Evergreening and Data Movement (DMOV).
• Develop and maintain vulnerability reporting and monitoring solutions for stakeholders ranging from engineers through to senior technology leadership.
• Work with technology product owners and IT Service Owners to drive timely remediation of identified vulnerabilities and risks.
• Coordinate with cybersecurity teams around patching requirements and remediation deadlines.
• Maintain process documentation, control guides and remediation records.
• Produce clear reports, dashboards and presentations for senior stakeholders and governance forums.
• Support continuous improvement by keeping up to date with industry trends, technology risks and security best practices.

Essential Experience

• Strong experience in IT Risk and Control Management.
• Good understanding of risk management frameworks and technology controls.
• Experience analysing patching, vulnerability and risk reports.
• Ability to assess threats, vulnerabilities and control effectiveness.
• Strong understanding of security concepts and principles.
• Knowledge of network, host and application security practices.
• Excellent communication skills, with the ability to communicate effectively with both technical and non-technical stakeholders.
• Strong analytical, reporting, and documentation skills.
• Experience working with multiple technology and cybersecurity stakeholders.

Desirable/Technical Skills: Experience with one or more of the following would be beneficial:

• BMC Control-M
• Cyberport
• Cyberflows
• Power BI
• Confluence
• Jira
• Vulnerability Management
• Patch Management
• Identity & Access Management
• Software Lifecycle Management
• IT Risk & Controls

Mandatory

BMC Control-M and relevant Risk Management experience, particularly within IT, Operations, Credit or Market Risk environments.

Disclaimer

Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.