Governance, Risk and Compliance Analyst

Smart Communications, Inc.; City Of London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading technology firm in London is seeking a Governance, Risk and Compliance Analyst. The candidate will manage security policies, conduct audits, and ensure compliance with regulations. Ideal for someone passionate about developing skills in security. The position offers a competitive salary and benefits, along with a hybrid work setup with days in the office.

Benefits

Extensive health insurance

Income protection

Life assurance

Subsidised gym membership

Leisure travel insurance

Pension contribution

25 days' holiday allowance plus birthday off

Qualifications

• Experience supporting projects and supplier/customer onboarding.
• Internal audit experience is beneficial.

Responsibilities

• Creating and maintaining policies related to Information Security.
• Managing third party security risk management.
• Conducting risk assessments and audits.

Skills

Knowledge of ISO27001

Knowledge of PCI DSS

Knowledge of SOC2

Knowledge of NIST

Knowledge of CIS benchmarking

Knowledge of DPA

Knowledge of GDPR

Knowledge of cloud environments (AWS, Azure)

Knowledge of Unix/Linux

Knowledge of Windows environments

Tools

CISA certification

CISSP certification

Experience with ITIL frameworks

Job description

Vacancy Name: Governance, Risk and Compliance Analyst

Employment Type: Permanent

Location: UK - London Office

Job Details

Summary

Reporting to the Governance, Risk and Compliance Director, the Governance, Risk and Compliance Analyst will be responsible for all things Governance, Risk, and Compliance. You will influence and ensure a culture of embedding security culture into the fabric of the organisation. The role would suit a career driven individual with a passion to develop their own skills and knowledge in security for this challenging but highly rewarding position.

About Smart Communications

Smart Communications is the trusted choice for regulated enterprises looking to modernize complex processes and connect with customers in the moments that matter most. Our Conversation Cloud platform powers frictionless, compliant, digital-first experiences through omnichannel communications, intelligent data capture, and secure digital archival. More than 650 enterprises worldwide—including Zurich Insurance, Priority Health, The Pacific Financial Group, and The Bancorp—rely on Smart Communications to reduce compliance risk, boost operational efficiency, lower costs, and fast-track digital transformation that fuels business growth and elevates the customer experience. With more than 30 pre-built connectors, Smart Communications\' cloud-native platform integrates effortlessly with the world\'s most trusted enterprise systems including Salesforce, Guidewire, DuckCreek, OneSpan, and Pega, enabling more than 60 billion mission-critical customer conversations globally, and driving faster time to value.

Responsibilities

• Creating and maintaining policies, standards, and guidelines related to Information Security
• Managing third party security risk management practices
• Designing, implementing, and managing training and awareness initiatives
• Audit compliance to internal policies, standards, and guidelines, producing and tracking progress of corrective action reports
• Conducting risk assessments and audits
• Experience supporting projects, and supplier/customer onboarding, ensuring necessary contractual clauses are embedded into contracts
• Reporting on the status of Compliance status across the business
• Completion of security questionnaires/RFP\'s
• Work cooperatively with project team when assigned and ensure that new project and changes adhere to Compliance requirements

What we\'re looking for

Must have skills/experience

• Knowledge and experience of ISO27001, PCI DSS, SOC2, NIST and CIS benchmarking
• Knowledge and experience achieving and maintaining compliance with relevant legislation, such as DPA, GDPR
• Knowledge of cloud environments (AWS, Azure)
• Knowledge of Unix/Linux and Windows environments

Advantageous skills/experience

• Certifications (CISA, CISSP)
• Internal audit experience
• Experience with frameworks such as ITIL

Values

• Speak Openly - We are positive, creative, helpful, kind and we have fun. We listen and provide constructive feedback. Through meaningful conversations we encourage each other to be the best that we can be. We\'re not complainers we\'re problem solvers.
• Make a Difference - We focus on the things that matter and prioritize the things that have the greatest impact. We celebrate success and hold ourselves accountable for our choices. We don\'t sit on the sidelines.
• Agile & Flexible - We are focused on evolving, improving and growing. We think differently and challenge the status quo with open minds. We ask \"why?\" so that we can help remove complexity. We don\'t allow hurdles to get in our way.
• Results-Focused - We get stuff done by being efficient, working at pace and paying attention to detail. We focus on finding solutions and fixing things. We don\'t believe in being busy for the sake of being busy, we focus on productivity.
• Teamwork - We are stronger and better together. We collaborate, trust and support each other to deliver results for our company and our customers. We don\'t want anyone to feel disengaged, we\'re in this together!

What\u2019s the deal?

We will provide you with the tools, equipment and support to give you the best possible chance of success and over-achieving your goals. Salary will depend on your experience and will be highly competitive. In addition to a friendly and fun working environment, we provide a range of other benefits, including extensive health insurance, income protection, life assurance, subsidised gym membership, leisure travel insurance, pension contribution and 25 days\' holiday allowance plus an additional day off for your birthday! Located in Covent Garden, our offices are comfortable, flexible, and are always stocked with free beverages and fresh fruit. This role has a hybrid setup with 2 days a week in the office required.

So, if we interest you, please let us know by applying for this position and tell us all about yourself.

Please note: we only consider applicants with current legal right to work in the countries in which our positions are based. All qualified applicants will receive consideration for employment regardless of colour, religion, sex, national origin, sexual orientation, age, disability, marital status or gender identity.

To learn more about Smart Communications visit

We invite you to visit the company site for more information: www.smartcommunications.com