Senior Risk and Controls Analyst - McCabe & Barton

Jobs via eFinancialCareers; London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services organization is seeking a Senior Risk and Controls Analyst to join their dynamic Technology Governance, Risk, and Compliance team. This role presents an exciting opportunity to enhance compliance and risk reduction initiatives across the organization. As a key player, you will manage technology risk processes, conduct controls analysis, and lead audits while collaborating with various stakeholders. If you're passionate about risk management and compliance in the technology sector, this position offers a competitive salary and the chance to make a significant impact in a prestigious environment.

Qualifications

• University degree in Information/Cyber Security or equivalent compliance experience.
• Strong stakeholder management and communication skills required.

Responsibilities

• Maintain and mature technology Risk and Controls processes.
• Drive risk management activities and support regulatory initiatives.

Skills

Stakeholder Management

Written Communication

Verbal Communication

Presentation Skills

Project Management

Understanding of Security KPIs

GRC Knowledge

Education

University Degree in Information/Cyber Security

Equivalent Compliance Experience

Tools

GRC Frameworks (NIST, CIS)

Job description

Location: London (3 days per week in office)

A leading financial services client is seeking a Senior Risk and Controls Analyst to join their Technology Governance, Risk, and Compliance team. This role offers an exciting opportunity to drive compliance and risk reduction initiatives across the organization.

Key Responsibilities:

1. Maintain and mature 1st Line of Defence technology Risk and Controls processes
2. Perform controls analysis and testing, providing best practice recommendations
3. Drive risk management activities including analysis, identification, and oversight
4. Support and produce Management Information for committees and stakeholders
5. Lead internal and external audits and support regulatory initiatives
6. Support Third-Party Risk Management (TPRM) Assurance activities
7. Deliver continuous enhancement to support GRC maturity initiatives
8. Manage exceptions against policies and standards
9. Create and deliver InfoSec Assurance awareness briefings

Required Qualifications and Skills:

1. University degree in Information/Cyber Security or related field, or equivalent compliance experience
2. Strong stakeholder management skills across multiple business functions
3. Excellent written, verbal, and presentation skills
4. Understanding of security-related KPIs, KRIs, metrics, and reporting
5. Ability to manage multiple projects and deliver timely, effective solutions
6. Rapid understanding of complex business operating environments
7. Applied knowledge of GRC to drive compliance and improve service delivery

Preferred Experience:

1. Professional security qualifications (e.g., CISM, CRISC, CISSP)
2. Experience in regulated markets or financial services
3. Knowledge of Information Security Domains and frameworks (e.g., NIST, CIS)
4. Background in 1st Line of Defence Risk & Control roles or IT/Cyber Architecture
5. Experience in risk management, audit oversight, and TPRM assessments

This role offers a competitive salary and the opportunity to work with a prestigious financial services organization. If you're passionate about risk management and compliance in the technology sector, we want to hear from you!

Please apply with an updated CV if you think you would be a good fit for this role.