Attestations and Client Audit Senior Analyst D & A (DORA)

London Stock Exchange Group; Nottingham; On-site; GBP 50,000 - 90,000; Full time

Job summary

Join a forward-thinking organization that prioritizes operational resilience and security. In this role, you will be instrumental in developing and implementing SOC 2 and ISAE 3000 attestations for key products. Collaborate with various teams to enhance the organization's security posture while ensuring compliance with industry standards. Your expertise will be crucial in conducting audits, mentoring colleagues, and engaging with clients to deliver exceptional service. This position offers a dynamic environment where your contributions will significantly impact the company's success and client satisfaction.

Qualifications

• 5+ years in information security or compliance roles.
• Experience managing SOC 1/2 and ISAE 3000 frameworks globally.

Responsibilities

• Develop and deliver SOC 2 and ISAE 3000 attestations.
• Conduct audits to ensure compliance with regulations.

Skills

Information Security

Compliance Management

SOC 2 Framework

Risk Management

Analytical Skills

Communication Skills

Education

Bachelor's in Information Security

Bachelor's in Computer Science

Bachelor's in Business

Tools

ISO 27001

PCI DSS 4.0

NIST

Cyber Essentials Plus

Job description

Requirements

You will be part of a team responsible for ensuring that the organization obtains new attestations (SOC 2 / ISAE 3000) for key products that can be shared with our customers within Europe.

This role involves assessing and improving the organization's resilience security posture in line with the Digital Operational Resiliency Act (DORA), developing the necessary frameworks, conducting readiness assessments, and collaborating with external auditors to obtain clean reports.

The position also requires contact with our customers for delivering client audits.

You will work closely with various groups to ensure the successful delivery of new SOC 2 / ISAE 3000 attestations.

What you'll be doing:

• Assisting with the development, implementation, and delivery of SOC 2 (Type 1 or 2) and ISAE 3000 attestations for LSEG's products.
• Conducting regular audits and assessments to ensure compliance with regulations, frameworks, and best practices.
• Coordinating the remediation of identified gaps, issues, or incidents related to the frameworks.
• Providing mentorship and support on compliance matters related to the frameworks.
• Creating and delivering reports and presentations on framework status.
• Engaging in risk management processes, including risk identification, assessment, mitigation, and supervision to ensure compliance and protect company assets.

Essential Criteria:

• Industry qualification related to audit, information security, or a relevant business subject area.
• At least five years of experience in an information security or compliance-related role.
• Deep experience managing SOC 1/2 and ISAE 3000 frameworks within a global company.
• Strong understanding of information security compliance frameworks such as ISO 27001, 9001, 22301, SOC 1/2, PCI DSS 4.0, NIST, SWIFT, and Cyber Essentials Plus.
• Excellent communication, analytical, and problem-solving skills.
• High attention to detail and accuracy.
• Ability to work independently and collaboratively across functions in a global environment.
• Proactive and adaptable approach to work.

Desirable Criteria:

• Bachelor's degree or equivalent in Information Security, Computer Science, or a related field.
• Bachelor's degree or equivalent in a Business-related subject.
• Previous experience working within LSEG.
• Proven record of people management.
• Experience in client engagement and delivering client audits.
• Experience in customer service.