Description
This is an opportunity to develop one of the foundations of LSEG's future Technology & Cyber Governance, Risk and Compliance model. The role will help build and operate the unified control library and standards capability that defines what good looks like for standard and control owners across Technology and Cyber Security.
The Senior Analyst will own defined components of the control and standards lifecycle, translating regulatory obligations, recognised frameworks, audit lessons and technical requirements into clear standards requirements, control objectives, practical implementation guidance and evidence expectations. Working with Technology and Cyber specialists, the role will challenge gaps, unclear ownership and weak control language so that the framework is usable, traceable and decision-ready.
The role will also help modernise how the standards and control library is run, using data, automation and approved artificial intelligence capabilities to improve mapping, quality checks, traceability and reporting while retaining human review and accountability.
Responsibilities:
- Maintain and improve assigned areas of the unified Technology & Cyber control library and standards
- Translate regulatory obligations, industry recognised frameworks and internal policies into clear standards and control requirements
- Draft and refine standards and controls, implementation guidance, evidence requirements and reusable templates
- Lead periodic and ad hoc reviews of standards and controls
- Partner with control owners, domain specialists and others to challenge control scope, ownership and build quality
- Support Risk and Control Self Assessments (RCSA), audits, regulatory examinations and certifications
- Monitor emerging Technology, Cyber, operational resilience and artificial intelligence requirements
- Use analysis, reporting and approved automation or artificial intelligence capabilities to improve control mapping and data quality
Requirements:
- Relevant experience in Technology or Cyber GRC, IT/Cyber Audit or Risk Management within a complex organisation
- Sound understanding of implementing Cyber and Technology controls
- Understanding of the hierarchy of policies, standards and guidelines
- Practical experience writing, reviewing or improving control or standards content
- Technical competence and experience implementing and reviewing controls for various security domains
- Solid understanding of recognised frameworks or standards such as NIST Cybersecurity Framework or ISO/IEC 27001