Risk & Policy Analyst
Recruiter
SidTech
Listed on
14th June 2021
Location
Glasgow
Type
Contract
Start Date
2021-06-13 00:00:00
This job has now expired please search on the home page to find live IT Jobs.
Risk & Policy Analyst Profile Required-Glasgow Job Description: The Resources will be based in Glasgow, UKSeniority level: Manager The Role’s responsibilities include: Lead a program of transformational change that will integrate the Technology risk assurance processes from 4 different acquisitions into Banks Understand, interpret current state across all acquisitions of Technology Risk assurance processes and architect an interim and target operating model.Perform indepth analysis of controls landscape across all acquired companies Communicate important information and insights to business and IT stakeholders on both Bank and its acquired business equivalents. Indepth business analysis and mapping of controls, making recommendations to adapt existing business strategiesParticipation in Transformation Squads working within the AGILE framework.
ExperienceWorking knowledge of key Technology concepts e.g. data classification, protection, policies, governance, privacy, security assessment tools Understanding of key concepts related to risk assessment and controlsEngages in process based thinking to effectively obtain, analyze and interpret information, identify root causes of problems, and draw the appropriate conclusionsWorking knowledge of technology applications and can identify and validate risk and controls Understanding of the relevant local technology risk regulations and the associated application to a financial services business
Desired Skills and CompetenciesExcellent written and verbal communication skills.Good organizational skills; a high degree of attention to detail and ability to manage multiple prioritiesBusiness/Product Knowledge: Familiarity and experience with electronic trading platforms is a strong plus, but is not required
Education, Background & Experience Required
Education: Bachelor's degreeA minimum of 5 years of relevant risk experience from roles in any of the following: Audit (internal or external)Risk Officer / Information Security OfficerTechnology Risk GovernanceRisk Assessment (e.g., RCSA)Control Testing (e.g., SOX)Information Security / IT Security (e.g., Entitlements Management, Segregation of Duties, Threat Management, Penetration Testing, Strategy)Regulatory (e.g., working as a financial services regulator or having experience dealing with regulators)Technology / Information Security Policy / ProceduresProcess/Risk/Control Frameworks, e.g., COBIT
Qualifications DesiredCertifications: Attainment of the following certifications is a strong plus, but not requiredCertified Information Systems Auditor (CISA)Certified in Governance for Enterprise IT (CGEIT)Certified Internal AuditorCertified Information Security Manager (CISM)Certified Information Systems Security Professional (CISSP)Certified in Risk and Information Systems Control (CRISC)ISO 27001 Auditor
