Description
The Risk & Controls Analyst, Corporate Engineering role supports the coordination of risk management activities across Corporate Engineering. The successful candidate will report to the Risk & Controls Officer, Corporate Engineering.
Key responsibilities include:
- Analysing and interpreting data to provide regular reports and recommendations to stakeholders, identifying technology, cyber and resilience risks.
- Conducting risk reviews and assessments of existing and proposed methodologies, policies, standards and best practices, providing recommendations for improvement and supporting their implementation.
- Supporting the reporting of KRIs and KCIs to various committees.
- Supporting core risk activities, including risk control assessments, issue management, external assurance, risk governance, and risk reporting.
- Engaging with internal stakeholders on risk remediation using technical knowledge.
- Preparing reports for internal committees, senior management, and stakeholders.
- Partnering with capability teams to produce reports and analysis, offering guidance where necessary.
- Building knowledge of the organisation, processes, and stakeholders to assist with risk oversight.
The ideal candidate will have:
- 2+ years of combined Technology and Cyber risk management experience.
- 2+ years of experience supporting and building risk processes.
- 2+ years of experience driving risk remediation.
- Excellent verbal and written communication skills.
- Good understanding of risk management frameworks and their practical application.
- Previous IT Audit, 2nd line Technology Risk or 1st line technology risk assurance expertise in financial services.
- Knowledge of controls over SDLC, agile, tooling, architecture, disaster recovery, operational resilience, IT asset management, incident and problem management, IT third-party risk management, program/project management, and infrastructure practices.