Risk and Control Analyst

Location: Sheffield
Working Pattern: 3 days per week onsite
Contract: Initial 6 months
Rate: £350-£450 per day, Inside IR35
Duration: Contract

We are currently seeking an experienced IT Risk and Control Specialist / Senior Consultant to join a technology function supporting People Governance, Communications and Group COO Technology.

This is an excellent opportunity for an experienced IT Risk professional to work across technology, cybersecurity, risk and control teams, helping to strengthen technology controls, improve risk management processes and support a secure, resilient technology environment.

Key Responsibilities

• Build strong working relationships with technology stakeholders, including IT Service Owners, technical leads, developers and architects.
• Identify technology control gaps, risks and vulnerabilities across end-to-end services.
• Work closely with Cybersecurity, senior management and business stakeholders to address security and control issues.
• Support the development and continuous improvement of IT risk management processes, procedures and tools.
• Champion best practices across Software Lifecycle Management, Identity & Access Management (IDAM), Evergreening and Data Movement (DMOV).
• Develop and maintain vulnerability reporting and monitoring solutions for stakeholders ranging from engineers through to senior technology leadership.
• Work with technology product owners and IT Service Owners to drive timely remediation of identified vulnerabilities and risks.
• Coordinate with cybersecurity teams around patching requirements and remediation deadlines.
• Maintain process documentation, control guides and remediation records.
• Produce clear reports, dashboards and presentations for senior stakeholders and governance forums.
• Support continuous improvement by keeping up to date with industry trends, technology risks and security best practices.

Essential Experience

• Strong experience in IT Risk and Control Management.
• Good understanding of risk management frameworks and technology controls.
• Experience analysing patching, vulnerability and risk reports.
• Ability to assess threats, vulnerabilities and control effectiveness.
• Strong understanding of security concepts and principles.
• Knowledge of network, host and application security practices.
• Excellent communication skills, with the ability to communicate effectively with both technical and non-technical stakeholders.
• Strong analytical, reporting, and documentation skills.
• Experience working with multiple technology and cybersecurity stakeholders.

Desirable / Technical Skills

Experience with one or more of the following would be beneficial:

• BMC Control-M
• Cyberport
• Cyberflows
• Power BI
• Confluence
• Jira
• Vulnerability Management
• Patch Management
• Identity & Access Management
• Software Lifecycle Management
• IT Risk & Controls

Mandatory: BMC Control-M and relevant Risk Management experience, particularly within IT, Operations, Credit or Market Risk environments.

Disclaimer
Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.
Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.