Risk & Controls Analyst (Cyber & Technology)
We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and cyber risks across a complex business environment. The role will help strengthen the control framework, improve risk visibility and provide constructive challenge to ensure that key risks are identified, assessed and managed within agreed appetite.
Responsibilities will include maintaining risk and control documentation, supporting risk and control assessments, and helping to identify gaps, weaknesses and opportunities for improvement. You will coordinate control testing and assurance activity, review evidence, track remediation plans and monitor actions through to completion. The role will also involve analysing incidents, audit findings and control failures to identify recurring themes and emerging risks, preparing clear management information, and producing concise reports for governance forums and senior stakeholders. You will work closely with technology, cyber security, privacy, compliance, audit and operational teams to embed proportionate controls and promote consistent risk management practices. Where required, you will contribute to the development and review of policies, standards, procedures and risk acceptance documentation.
To succeed, you should have experience in technology risk, information security, IT controls, cyber governance or a related discipline, ideally within a regulated or complex organisation. You will be comfortable interpreting control frameworks and recognised standards, such as ISO 27001, NIST, COBIT or similar, and applying them in a practical business context. Strong analytical and problem-solving skills are essential, along with the ability to assess evidence, identify control deficiencies and communicate recommendations clearly to both technical and non-technical audiences. You should be organised, proactive and confident managing multiple priorities, with excellent written and verbal communication skills. Relevant professional qualifications or certifications, such as CISA, CRISC, CISSP or ISO 27001, would be advantageous but are not essential.
Risk & Controls Analyst (Cyber & Technology)
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer