IT Risk & Controls Analyst

IT Risk & Controls Analyst page is loaded
IT Risk & Controls Analyst
Apply
locations
London
time type
Full time
posted on
Posted 6 Days Ago
job requisition id
CMC3687
CMC are hiring an
IT Risk & Controls Analyst as
part of the wider IT Production Department the IT Risk and Control function
is responsible for
a broad range of governance, audit,
resilience,
and controls activities. You will be working closely with the Security team and wider IT department as well as the Business
as a whole to
deliver practical solutions and support across all areas.
The IT Risk & Controls Analyst will have a broad understanding of Governance, Risk and Compliance (GRC) and play a key part supporting the operation of the IT Compliance, Business Continuity and Operational Resilience functions.
The role requires someone with
a proactive,
personable,
and positive attitude, who is willing to work across
several
different projects and tasks as the needs arise.
Roles and Responsibilities
Support the Operational Resilience Manager and Audit and Compliance Manager
Support delivery of Operational Resilience regulatory requirements which includes
identifying
importantbusinessservices, impact tolerances, mapping, scenario testing and self-assessment.
Support the Security Due Diligence process.
Assist
with the development of the Information Security Management System (ISMS) in support of ISO27001 requirements.
Provide
support for Internal and External audits and reviews.
Assist
with the development and maintenance of the IT Control Framework
Assist
with the management of Security Awareness training and supporting material.
Play an active part in developing the IT Compliance, Business Continuity and Operational Resilience functions.
Key Skills and Experience
Able to work with both
technical
experts and Business stakeholders equally.
Strong communication
,
presentation,
and organisational skills
Adaptable and able to respond effectively to a changing environment.
Enjoys problem solving, able to use initiative and apply a pragmatic approach when dealing with issues and reviews.
Nice to have:
Familiarity with Governance, Risk and Compliance (GRC) processes
Experience of Business Continuity and Disaster Recovery
Experience
operating
within Operational Resilience
Understanding of Information Security best practice and its implementation
Prior experience of working with Internal and External Auditors in a regulated environment
#J-18808-Ljbffr