IT Risk Analyst

Core-Asset Consulting; North East; On-site; GBP 45,000 - 60,000; Full time

Job summary

A leading financial services organization seeks an experienced IT Risk Analyst to join their collaborative risk and compliance team. This role involves facilitating risk assessments, maintaining control registers, and ensuring effective risk management practices across the business. Ideal candidates will possess knowledge of IT risk frameworks, strong stakeholder engagement skills, and relevant certifications. This position offers a competitive salary and benefits package.

Benefits

Highly competitive salary

Wider benefits package

Qualifications

• Prior experience in a risk-based role within financial services.
• Strong understanding of various risk frameworks.
• Familiarity with ISO 27001, NIST, or similar frameworks.

Responsibilities

• Facilitate IT and business risk assessments and control testing.
• Maintain and update risk and control registers.
• Monitor and report on remediation plans and internal loss events.

Skills

Understanding of IT risk frameworks and control environments

Knowledge of risk methodologies

Cyber/information security concepts

Stakeholder engagement skills

Microsoft Office proficiency

UK regulatory standards knowledge

Technology change risk assessments

Education

Certifications such as CompTIA Security+, CISA, CISSP, CISM, or CRISC

Job description

Social network you want to login/join with:

Job Description:

Are you passionate about technology risk and governance? Core-Asset Consulting is partnering with a leading UK-based financial services organisation to recruit an experienced IT Risk Analyst.

This is an exciting opportunity to join a highly collaborative risk and compliance team, playing a key role in embedding effective risk management practices across a growing and dynamic business.





Essential Skills/Experience:

* Prior experience working in a risk-based role within financial services
* Understanding of IT risk frameworks and control environments
* Knowledge of risk methodologies such as RCSA, KRI/KCI design and incident/root cause analysis
* Solid grasp of cyber/information security concepts and controls
* Familiarity with frameworks such as ISO 27001, NIST, or similar
* Strong stakeholder engagement and communication skills, including the ability to explain technical risk concepts to non-technical audiences
* Proficiency with Microsoft Office tools (Excel, Word, PowerPoint)
* Working knowledge of UK regulatory standards (e.g., FCA, GDPR, Consumer Duty)
* Experience supporting or engaging with internal audit functions
* Certifications such as CompTIA Security+, CISA, CISSP, CISM or CRISC (or studying towards)
* Exposure to technology change risk assessments and remediation planning





Core Responsibilities:

* Facilitate IT and business risk assessments and control testing exercises
* Maintain and update risk and control registers
* Support the design and tracking of key risk indicators (KRIs) and key control indicators (KCIs)
* Assist in the review and validation of root cause analysis from risk events and incidents
* Monitor and report on remediation plans and internal loss events
* Support IT risk dashboards, reporting packs, and regulatory insights for senior stakeholders
* Contribute to the development of a strong risk culture across the organisation
* Collaborate with internal teams to oversee the risk impact of technology change programmes





Benefits:

* A highly competitive salary
* Wider Benefits package



Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.

Job reference: 16145

To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.

At Core-Asset, we’re committed to protecting and respecting your privacy. Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. We may change this policy from time to time, so please check this policy occasionally to ensure that you’re happy with any changes.

By engaging with us (either by applying for a job we’re advertising, registering through our website, or getting in touch with our business) you’re agreeing to be bound by this policy.

Core-Asset Consulting is committed to protecting the privacy of our candidates, clients and website users. For further information, please refer to our full Privacy Statement available on our website http://www.core-asset.co.uk/about-core-asset/privacy-statement

Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland.

INDPERM