Risk And Control Analyst

Square One Resources; Sheffield; On-site; GBP 65,000 - 83,000; Full time

Job summary

Square One Resources is seeking an experienced Risk and Control Analyst in Sheffield to join our technology function on a 3 days per week onsite contract. You will work as an IT Risk and Control Specialist to strengthen technology controls and risk processes across cybersecurity and operations.

You will build relationships with IT service owners, identify control gaps, and drive remediation with stakeholders.

Qualifications

• Experience in IT risk and control management within technology environments.
• Ability to identify control gaps, risks and vulnerabilities across end-to-end services.
• Strong communication with technical and non-technical stakeholders.
• Familiarity with risk management frameworks and security controls.

Responsibilities

• Build strong working relationships with technology stakeholders, including IT Service Owners and architects.
• Identify technology control gaps, risks and vulnerabilities across end-to-end services.
• Work with Cybersecurity, senior management and business stakeholders to address security issues.
• Support development and improvement of IT risk management processes, procedures and tools.
• Champion best practices across Software Lifecycle Management, Identity & Access Management, Evergreening and Data Movement.
• Develop and maintain vulnerability reporting and monitoring solutions for stakeholders.
• Remediate vulnerabilities and risks with product owners and IT Service Owners.
• Coordinate with cybersecurity teams on patching requirements and deadlines.
• Maintain process documentation and remediation records.
• Produce reports and dashboards for senior stakeholders and governance forums.
• Keep up to date with industry trends and security best practices.

Skills

IT Risk & Control

Risk assessment

Stakeholder communication

Tools

Power BI

Confluence

Jira

Vulnerability Management

Patch Management

Identity & Access Management

Software Lifecycle Management

IT Risk & Controls

Job description

Risk and Control Analyst

Location: Sheffield
Working Pattern: 3 days per week onsite
Contract: Initial 6 months
Rate: £350-£450 per day, Inside IR35
Duration: Contract

We are currently seeking an experienced IT Risk and Control Specialist / Senior Consultant to join a technology function supporting People Governance, Communications and Group COO Technology.

This is an excellent opportunity for an experienced IT Risk professional to work across technology, cybersecurity, risk and control teams, helping to strengthen technology controls, improve risk management processes and support a secure, resilient technology environment.

Key Responsibilities

• Build strong working relationships with technology stakeholders, including IT Service Owners, technical leads, developers and architects.
• Identify technology control gaps, risks and vulnerabilities across end-to-end services.
• Work closely with Cybersecurity, senior management and business stakeholders to address security and control issues.
• Support the development and continuous improvement of IT risk management processes, procedures and tools.
• Champion best practices across Software Lifecycle Management, Identity & Access Management (IDAM), Evergreening and Data Movement (DMOV).
• Develop and maintain vulnerability reporting and monitoring solutions for stakeholders ranging from engineers through to senior technology leadership.
• Work with technology product owners and IT Service Owners to drive timely remediation of identified vulnerabilities and risks.
• Coordinate with cybersecurity teams around patching requirements and remediation deadlines.
• Maintain process documentation, control guides and remediation records.
• Produce clear reports, dashboards and presentations for senior stakeholders and governance forums.
• Support continuous improvement by keeping up to date with industry trends, technology risks and security best practices.

Essential Experience

• Strong experience in IT Risk and Control Management.
• Good understanding of risk management frameworks and technology controls.
• Experience analysing patching, vulnerability and risk reports.
• Ability to assess threats, vulnerabilities and control effectiveness.
• Strong understanding of security concepts and principles.
• Knowledge of network, host and application security practices.
• Excellent communication skills, with the ability to communicate effectively with both technical and non-technical stakeholders.
• Strong analytical, reporting, and documentation skills.
• Experience working with multiple technology and cybersecurity stakeholders.

Desirable / Technical Skills

Experience with one or more of the following would be beneficial:

• BMC Control-M
• Cyberport
• Cyberflows
• Power BI
• Confluence
• Jira
• Vulnerability Management
• Patch Management
• Identity & Access Management
• Software Lifecycle Management
• IT Risk & Controls

Mandatory: BMC Control-M and relevant Risk Management experience, particularly within IT, Operations, Credit or Market Risk environments.

Disclaimer
Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.
Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.