Business Continuity and Risk Analyst

Bango PLC; Cambridge; On-site; GBP 40,000 - 65,000; Full time

Benefits offered by this job

Private Medical Insurance

Health Cash Plan

25 days holiday + 3 via service

Cycle to work

Gym discount

Weekly Pilates & Yoga (virtual)

Financial support for activity groups

Free fruit, drinks and snacks

Company hoodie

Life assurance

Employee Assistance Program

1Password

Income Protection

Chilly’s bottle & coffee cup

Job summary

Bango PLC is seeking a Business Continuity and Risk Analyst to support ISO 22301 and ISO 27001 compliance, risk registers, and continuity planning. You will coordinate incident response activities, maintain policies, and work with cross-functional teams to strengthen resilience.

The role suits someone early in their GRC career, with 1–2 years' experience, and a proactive, detail-oriented approach. The position emphasizes collaboration, governance, and ongoing improvement.

Qualifications

• 1–2 years’ experience in a risk, business continuity, or GRC-related role.
• Good understanding of business continuity and information security principles, with direct exposure to ISO 22301 and/or ISO 27001 frameworks.
• Demonstrated ability to manage and maintain a risk register or continuity documentation with minimal oversight.
• Strong organizational and documentation skills, with close attention to detail.
• Confident using data to prepare clear reports and track metrics and KPIs, and comfortable presenting findings to senior stakeholders.
• Good communication and stakeholder management skills, with the ability to work effectively across teams.
• Willingness to support incident response activities and audits as needed.
• Comfortable working with spreadsheets and GRC tools to help maintain risk registers and supplier repositories.
• Studying towards, or holding, a relevant certification (e.g., CBCI, working towards MBCI, CRISC, or equivalent).
• Exposure to additional regulatory compliance frameworks (e.g., NIST, SOC 2, DORA).
• Experience working within a technology, fintech, or payments environment.
• Familiarity with GRC platforms or risk management and reporting tools.
• Experience supporting business continuity exercises (e.g., simulations, tabletop exercises).

Responsibilities

• Help identify, evaluate, and prioritize risks across operations, information systems, and third-party relationships.
• Maintain the risk register and support risk processes for owners.
• Support BCMS embedding, BIAs, continuity planning, and annual continuity exercises.
• Assist with ISO 22301 and ISO 27001 audits and compliance activities.
• Support incident investigations and feed lessons learned into plans and controls.
• Support supplier due-diligence and third-party risk assessments.
• Assist in risk and continuity training programs and maintain documentation.
• Collect and analyze risk and continuity metrics and prepare reports for senior stakeholders.

Skills

Risk management

ISO 22301

ISO 27001

GRC

Stakeholder management

Data reporting

Spreadsheets

Communication

Tools

GRC platforms

Job description

Bango enables content providers to reach more paying customers through global partnerships. Bango revolutionized the monetization of digital content and services, by opening-up online payments to mobile phone users worldwide.

Today, the Digital Vending Machine® is driving the rapid growth of the subscriptions economy, powering choice and control for subscribers.

The world’s largest content providers, including Amazon, Google and Microsoft trust Bango technology to reach subscribers everywhere.

Bango, where people subscribe.

Role

At Bango, the Business Continuity and Risk Analyst reports to the VP of Managed Services and Support (MS&S) and supports the day-to-day operation of Bango’s continuity and risk frameworks. You will help maintain compliance with ISO 22301 (the global standard for business continuity) and ISO 27001 (the leading international standard for information security management), assisting in the ongoing embedding of controls that strengthen the Bango continuity, risk, and information security posture.You will support the maintenance and administration of risk and continuity policies, frameworks, and documentation, helping to ensure these remain aligned with the wider business and security strategy. You will contribute to the evaluation and implementation of solutions that drive resilience and risk reduction across the business.In the event of a disruption or incident, you will support the coordination of response activities, assist with root cause analysis, and help prepare communications for internal stakeholders and key customers. This includes contributing to incident reports and supporting the presentation of findings and remediation plans.As a Business Continuity and Risk Analyst, you will build effective working relationships across Bango teams, helping to keep colleagues informed of policy and process changes and supporting them in identifying, managing, and escalating functional risks. You will also assist in maintaining relationships with external suppliers, supporting due diligence and risk assessment activities.This role suits someone building their experience in security, risk management, and governance, risk & compliance (GRC). You will help track emerging threats, industry trends, and regulatory changes, and support Bango leadership with relevant research and insight.You may also assist with the delivery of technical and non-technical training sessions across the organization, acting as a helpful and knowledgeable point of contact on continuity, risk, and security matters.

Responsibilities

• Support enterprise risk management: Help identify, evaluate, and prioritize risks across Bango’s operations, information systems, and third-party relationships. Support the maintenance of the risk register, help functional risk owners apply risk processes, and contribute to regular updates on risk posture, resilience, and control effectiveness.
• Support the BCMS (Business Continuity Management System) for Bango: Help keep the BCMS fully embedded, effective, and ISO 22301-compliant. Support BIAs (Business Impact Analyses), continuity planning, and the coordination of at least one annual continuity exercise (e.g., simulations or DR tests) to validate readiness and drive continual improvement.
• Certification and audit support: Support the implementation and maintenance of ISO 22301 and assist the Information Security team with ISO 27001 compliance. Help coordinate internal and external audits, track corrective actions, and help ensure Bango remains audit-ready at all times.
• Incident and control support: Help ensure incidents with tangible impact are accurately recorded and linked to enterprise risks. Support the Security Incident Response Team with investigations, helping ensure lessons learned feed back into continuity plans, risk registers, and control enhancements.
• Third-party risk support: Support the supplier due diligence process by maintaining the supplier repository, helping conduct regular risk assessments, and promoting organization-wide awareness of third-party risk policies and standards.
• Awareness, training, and documentation: Support the design and delivery of risk and continuity training programs, helping foster a security- and resilience-conscious culture. Help maintain accurate and accessible documentation (policies, procedures, and frameworks) supporting ISO standards.
• Metrics and continuous improvement: Collect and help analyze risk and continuity metrics, support the tracking of KRIs, and help identify trends or gaps requiring attention. Assist in preparing actionable reporting for senior stakeholders.
• 1–2 years’ experience in a risk, business continuity, or GRC-related role.
• Good understanding of business continuity and information security principles, with direct exposure to ISO 22301 and/or ISO 27001 frameworks.
• Demonstrated ability to manage and maintain a risk register or continuity documentation with minimal oversight, given the more direct reporting line.
• Strong organizational and documentation skills, with close attention to detail.
• Confident using data to prepare clear reports and track metrics and KPIs, and comfortable presenting findings to senior stakeholders.
• Good communication and stakeholder management skills, with the ability to work effectively across teams and operate with a degree of independence.
• Willingness to support incident response activities and audits as needed.
• Comfortable working with spreadsheets and GRC tools to help maintain risk registers and supplier repositories.
• Studying towards, or holding, a relevant certification (e.g., CBCI, working towards MBCI, CRISC, or equivalent).
• Exposure to additional regulatory compliance frameworks (e.g., NIST, SOC 2, DORA).
• Experience working within a technology, fintech, or payments environment.
• Familiarity with GRC platforms or risk management and reporting tools.
• Experience supporting business continuity exercises (e.g., simulations, tabletop exercises).
• A friendly, informal working environment
• Your own Bango buddy – to help you settle in
• Bendi-time (flexible working hours)
• Choose your own headphones, keyboard & mouse
• Private Medical Insurance
• Health Cash Plan
• 25 days holiday a year increasing to 28 days with 4 years’ service
• Cycle to work, gym discount
• Weekly Pilates & Yoga classes (virtual)
• Financial support for employee activity groups and charitable activities
• Free fruit, drinks and snacks, limitless tea, coffee and good quality espressos
• Company branded hoodie… to keep you happy and comfortable
• Life assurance
• Employee Assistance Program
• 1Password
• Income Protection
• Bango branded Chilly’s bottle and coffee cup

Please read our Privacy Policy below before proceeding to Application