Business Continuity & Risk Analyst (ISO 22301/27001)

Bango PLC; Cambridge; On-site; GBP 40,000 - 65,000; Full time

Benefits offered by this job

Private Medical Insurance

Health Cash Plan

25 days holiday + 3 via service

Cycle to work

Gym discount

Weekly Pilates & Yoga (virtual)

Financial support for activity groups

Free fruit, drinks and snacks

Company hoodie

Life assurance

Employee Assistance Program

1Password

Income Protection

Chilly’s bottle & coffee cup

Job summary

Bango PLC is seeking a Business Continuity and Risk Analyst to support ISO 22301 and ISO 27001 compliance, risk registers, and continuity planning. You will coordinate incident response activities, maintain policies, and work with cross-functional teams to strengthen resilience.

The role suits someone early in their GRC career, with 1–2 years' experience, and a proactive, detail-oriented approach. The position emphasizes collaboration, governance, and ongoing improvement.

Qualifications

• 1–2 years’ experience in a risk, business continuity, or GRC-related role.
• Good understanding of business continuity and information security principles, with direct exposure to ISO 22301 and/or ISO 27001 frameworks.
• Demonstrated ability to manage and maintain a risk register or continuity documentation with minimal oversight.
• Strong organizational and documentation skills, with close attention to detail.
• Confident using data to prepare clear reports and track metrics and KPIs, and comfortable presenting findings to senior stakeholders.
• Good communication and stakeholder management skills, with the ability to work effectively across teams.
• Willingness to support incident response activities and audits as needed.
• Comfortable working with spreadsheets and GRC tools to help maintain risk registers and supplier repositories.
• Studying towards, or holding, a relevant certification (e.g., CBCI, working towards MBCI, CRISC, or equivalent).
• Exposure to additional regulatory compliance frameworks (e.g., NIST, SOC 2, DORA).
• Experience working within a technology, fintech, or payments environment.
• Familiarity with GRC platforms or risk management and reporting tools.
• Experience supporting business continuity exercises (e.g., simulations, tabletop exercises).

Responsibilities

• Help identify, evaluate, and prioritize risks across operations, information systems, and third-party relationships.
• Maintain the risk register and support risk processes for owners.
• Support BCMS embedding, BIAs, continuity planning, and annual continuity exercises.
• Assist with ISO 22301 and ISO 27001 audits and compliance activities.
• Support incident investigations and feed lessons learned into plans and controls.
• Support supplier due-diligence and third-party risk assessments.
• Assist in risk and continuity training programs and maintain documentation.
• Collect and analyze risk and continuity metrics and prepare reports for senior stakeholders.

Skills

Risk management

ISO 22301

ISO 27001

GRC

Stakeholder management

Data reporting

Spreadsheets

Communication

Tools

GRC platforms

Job description

Bango PLC is seeking a Business Continuity and Risk Analyst to support ISO 22301 and ISO 27001 compliance, risk registers, and continuity planning. You will coordinate incident response activities, maintain policies, and work with cross-functional teams to strengthen resilience.

The role suits someone early in their GRC career, with 1–2 years' experience, and a proactive, detail-oriented approach. The position emphasizes collaboration, governance, and ongoing improvement.