Job Search

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. This role will work with stakeholders across technology, security, risk and business functions to assess the design and operating effectiveness of controls, identify areas for improvement and promote consistent risk management practices.

Responsibilities will include maintaining risk and control assessments, supporting the development and monitoring of key risk and performance indicators, and contributing to the management of issues, actions and remediation plans. You will assist with control testing, evidence gathering and the preparation of clear reports for governance forums and senior stakeholders. The role will also involve reviewing policies, standards and procedures, supporting risk assessments for new technologies and projects, and helping to ensure alignment with relevant regulatory, industry and internal requirements. You may also contribute to audit activity, incident reviews, third-party risk assessments and continuous improvement initiatives.

The successful candidate will have experience in technology risk, cyber security controls, IT assurance, internal audit or a related discipline. You should understand common control frameworks and principles, such as ISO 27001, NIST, COBIT or similar, and be comfortable evaluating risks across areas including access management, change management, vulnerability management, data protection, resilience and supplier security. Strong analytical, written and verbal communication skills are essential, together with the ability to interpret technical information and explain it clearly to non-technical audiences. Experience using governance, risk and compliance tools, managing multiple priorities and working collaboratively with stakeholders at different levels would be advantageous. Relevant qualifications in information security, technology, risk or audit are desirable.

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. Working with stakeholders across technology, cyber security, risk, audit and the wider business, you will help strengthen the control environment and promote consistent, risk-based practices across the organisation.

Your responsibilities will include maintaining risk and control registers, coordinating control assessments, reviewing evidence and monitoring remediation activity. You will support the design, implementation and testing of controls relating to areas such as access management, vulnerability management, change management, incident response, third-party risk, data protection and business continuity. You will analyse control performance, identify weaknesses and emerging risks, and prepare clear reports, dashboards and recommendations for relevant governance forums. The role will also involve supporting internal and external audits, tracking actions to completion, contributing to policy and procedure updates, and helping to embed cyber and technology risk awareness throughout the business.

We are looking for experience in technology risk, information security, IT controls, cyber assurance, audit or a closely related discipline. You will have a good understanding of common control frameworks and standards, such as ISO 27001, NIST, COBIT or ITIL, together with practical knowledge of risk assessment and control testing methodologies. Strong analytical and problem-solving skills are essential, as is the ability to interpret technical information and communicate it clearly to both technical and non-technical audiences. You should be organised, detail-focused and confident managing multiple priorities and stakeholders. Relevant professional qualifications, such as CISA, CRISC, CISSP, ISO 27001 or equivalent experience, would be advantageous.

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and operational risks across a complex business environment. This role will help strengthen the control framework, promote consistent risk management practices and provide insight into the organisation’s cyber and technology risk profile. You will work with stakeholders across technology, security, risk, compliance and business functions, building constructive relationships and helping teams understand and manage their control responsibilities.

Key responsibilities will include maintaining risk and control documentation, coordinating control assessments and supporting the identification, evaluation and treatment of cyber and technology risks. You will assist with control testing, issue and remediation tracking, risk reporting and the preparation of clear management information for governance forums. The role will also involve reviewing policies, standards and procedures; supporting audit and regulatory requests; monitoring key risk indicators; and contributing to the development of risk assessments for technology change, third-party services, cloud environments and operational processes. You will investigate control exceptions, challenge evidence where appropriate and ensure actions are recorded, monitored and closed in line with agreed expectations.

The successful candidate will have experience in technology risk, information security, cyber assurance, IT controls, audit or a related discipline, ideally within a regulated or complex organisation. You will have a sound understanding of control frameworks, risk assessment methodologies, governance processes and common cyber and technology risks. Familiarity with standards such as ISO 27001, NIST, COBIT or ITIL would be beneficial, as would experience using risk management or governance, risk and compliance tools. Strong analytical, organisational and communication skills are essential, along with the confidence to work with both technical and non-technical stakeholders. You should be comfortable interpreting detailed information, producing concise reports and managing multiple priorities while maintaining a constructive, pragmatic and risk-aware approach.

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and cyber risks across a complex business environment. The role will help strengthen the control framework, improve risk visibility and provide constructive challenge to ensure that key risks are identified, assessed and managed within agreed appetite.

Responsibilities will include maintaining risk and control documentation, supporting risk and control assessments, and helping to identify gaps, weaknesses and opportunities for improvement. You will coordinate control testing and assurance activity, review evidence, track remediation plans and monitor actions through to completion. The role will also involve analysing incidents, audit findings and control failures to identify recurring themes and emerging risks, preparing clear management information, and producing concise reports for governance forums and senior stakeholders. You will work closely with technology, cyber security, privacy, compliance, audit and operational teams to embed proportionate controls and promote consistent risk management practices. Where required, you will contribute to the development and review of policies, standards, procedures and risk acceptance documentation.

To succeed, you should have experience in technology risk, information security, IT controls, cyber governance or a related discipline, ideally within a regulated or complex organisation. You will be comfortable interpreting control frameworks and recognised standards, such as ISO 27001, NIST, COBIT or similar, and applying them in a practical business context. Strong analytical and problem-solving skills are essential, along with the ability to assess evidence, identify control deficiencies and communicate recommendations clearly to both technical and non-technical audiences. You should be organised, proactive and confident managing multiple priorities, with excellent written and verbal communication skills. Relevant professional qualifications or certifications, such as CISA, CRISC, CISSP or ISO 27001, would be advantageous but are not essential.