IT Risk Analyst

Core-Asset Consulting Ltd; North East; On-site; GBP 40,000 - 60,000; Full time

Job summary

A leading UK-based financial services organisation is seeking an experienced IT Risk Analyst to join their collaborative risk and compliance team. This position focuses on implementing risk management practices and supporting IT risk assessments while engaging with various stakeholders across the business.

Benefits

Highly competitive salary

Wider benefits package

Qualifications

• Experience in a risk-based role within financial services.
• Understanding of IT risk frameworks and control environments.
• Familiarity with ISO 27001, NIST, or similar frameworks.

Responsibilities

• Facilitate IT and business risk assessments and control testing exercises.
• Maintain and update risk and control registers.
• Contribute to the development of a strong risk culture across the organisation.

Skills

Stakeholder engagement

Communication

IT risk frameworks

Cyber security concepts

Risk methodologies

Education

Certifications such as CompTIA Security+, CISA, CISSP, CISM, or CRISC

Understanding of UK regulatory standards (e.g., FCA, GDPR)

Tools

Microsoft Office

Job description

Job Description:

Are you passionate about technology risk and governance? Core-Asset Consulting is partnering with a leading UK-based financial services organisation to recruit an experienced IT Risk Analyst.

This is an exciting opportunity to join a highly collaborative risk and compliance team, playing a key role in embedding effective risk management practices across a growing and dynamic business.

Essential Skills/Experience:

• Prior experience working in a risk-based role within financial services
• Understanding of IT risk frameworks and control environments
• Knowledge of risk methodologies such as RCSA, KRI/KCI design and incident/root cause analysis
• Solid grasp of cyber/information security concepts and controls
• Familiarity with frameworks such as ISO 27001, NIST, or similar
• Strong stakeholder engagement and communication skills, including the ability to explain technical risk concepts to non-technical audiences
• Proficiency with Microsoft Office tools (Excel, Word, PowerPoint)
• Working knowledge of UK regulatory standards (e.g., FCA, GDPR, Consumer Duty)
• Experience supporting or engaging with internal audit functions
• Certifications such as CompTIA Security+, CISA, CISSP, CISM or CRISC (or studying towards)
• Exposure to technology change risk assessments and remediation planning

Core Responsibilities:

• Facilitate IT and business risk assessments and control testing exercises
• Maintain and update risk and control registers
• Support the design and tracking of key risk indicators (KRIs) and key control indicators (KCIs)
• Assist in the review and validation of root cause analysis from risk events and incidents
• Monitor and report on remediation plans and internal loss events
• Support IT risk dashboards, reporting packs, and regulatory insights for senior stakeholders
• Contribute to the development of a strong risk culture across the organisation
• Collaborate with internal teams to oversee the risk impact of technology change programmes

Benefits:

• A highly competitive salary
• Wider Benefits package

Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.

Job reference: 16145

To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.

At Core-Asset, we're committed to protecting and respecting your privacy.Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.We may change this policy from time to time, so please check this policy occasionally to ensure that you're happy with any changes.

By engaging with us (either by applying for a job we're advertising, registering through our website, or getting in touch with our business) you're agreeing to be bound by this policy.

Core-Asset Consulting is committed to protecting the privacy of our candidates, clients and website users.For further information, please refer to our full Privacy Statement available on our website http://www.core-asset.co.uk/about-core-asset/privacy-statement

Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland.

INDPERM