Risk and Compliance Analyst

2 months ago


United Kingdom HAAR Recruitment Full time

Senior GRC Consultant
ROLE PURPOSE

The Security Advisory team, of which Governance, Risk and Compliance is a key part, is of strategic importance. By helping our customers navigate the rapidly evolving and increasing complex world of Governance, Risk and Compliance, we bring significant value to organisations through our independent, consultative approach.

The Senior GRC Advisory Specialist role comprises of three core functions: 1) consultancy and delivery. 2) pre-sales and customer-facing support . And 3) developing new Advisory and assessment-led services based on business requirements.

Key functions consist of engaging with customer stakeholders to define their requirements, supporting the delivery of security assessments, managing key third-party relationships, and supporting the pre-sales/sales functions to drive new opportunities, and ultimately growing the business.

In addition, as a senior role within the Business Unit, the successful candidate will have input in to establishing and defining the strategic direction of the GRC Consultancy arm of the business unit.

This varied role will include the preparation and coordination of security advisory engagements across a broad range of market sectors. This position will encompass a client facing aspect and you will be expected to support the delivery of presentations to clients as well as articulate cyber security against business outcomes.

This is a home-based role, though will require occasional travel to customers sites, London and Dublin offices and other locations to support the needs of the business. All expenses will be paid.

RESPONSIBILITIES

Pre-sales support
Driving awareness of the security advisory portfolio internally across the wider organisation and externally at conferences and events
Ad-hoc travel to client site to develop stakeholder relationships and present the security advisory portfolio
Development of GRC advisory services collateral and presentations
Conduct training sessions with sales/pre-sales surrounding GRC advisory services
Undertaking cross-department collaboration sessions to integrate GRC advisory services into other service offerings
Reviewing and drafting initial responses to tenders
Developing Statements of Works and preparing quotes to meet clients’ requirements
Engaging and managing key third-party relationships

Consultancy
Delivering assessments against security best practice frameworks e.g. ISO 27001, Cyber Essentials, CIS Controls etc
Supporting the delivery of consultancy engagements
Co-ordinating client engagements and undertaking elements of project management throughout the lifecycle of the engagement.
Drafting and reviewing client reports
Drive follow-on work from the initial assessments
Auditing and frameworks

KNOWLEDGE AND EXPERIENCE

Required experience/knowledge
Understanding of NIS2 & DORA
Consultancy and delivery of Security best practice frameworks including : ISO 27001, CIS Critical Security Controls, NIST Cyber Security Framework and NUK NCSC Cyber Assessment Framework.
Understanding and scoping for Penetration Testing
Understanding and scoping Red Teaming/Purple Teaming
Understanding, scoping, creation and delivery of Incident Readiness activities (Playbooks, policy development, tabletop exercises)
Knowledge and understanding of Zero Trust
Data protection and Governance

Desired experience/knowledge
# Consultancy and delivery of Cyber Essentials
# Understanding/consultancy/delivery of PCI DSS.
# AI Governance
# Supply chain management
# Asset Management
# Policy development (eg, End User Access, Acceptable Use Policy etc)
# OT Security


Profile
Excellent communication skills (interpersonal, verbal, written, presentation)
Attention to detail, able to produce high-quality reports
Ability to translate security requirements into business language
Experience in GRC/Security Advisory, either in a Consulting firm or as an internal or external Security Professional
Ability to work independently
Ability to work as part of a team
Desire for personal and carer growth
Previous team management experience desirable

Qualifications
IT Security based degree/equivalent industry experience, and one of the following:

Certified ISO 27001 Lead Implementer/ Auditor
Certified Information Security Manager (CISM)
Certified in Risk and Information Systems Control (CRISC)
Certified in the Governance of Enterprise IT (CEGIT)
Certified Information Systems Auditor (CISA)
Certified Information Systems Security Professional (CISSP)

Excellent communication skills (interpersonal, verbal, written, presentation)
Attention to detail, able to produce high-quality reports
Ability to translate security requirements into business language
Experience in GRC/Security Advisory, either in a Consulting firm or as an internal or external Security Professional
Ability to work independently


  • Compliance Analyst

    2 weeks ago


    United Kingdom Ntrinsic Consulting Full time

    Compliance Analyst – Fully Remote UKCompliance Analyst is required by our FinTech client to take ownership the ongoing review of the Conduct Risk Framework, proposing enhancements for the effective management, monitoring and reporting of Conduct Risk. As Compliance Analyst you will embed Consumer Duty into BAU practice, review and update policies and...

  • Compliance Analyst

    2 weeks ago


    United Kingdom Ntrinsic Consulting Full time

    Compliance Analyst – Fully Remote UKCompliance Analyst is required by our FinTech client to take ownership the ongoing review of the Conduct Risk Framework, proposing enhancements for the effective management, monitoring and reporting of Conduct Risk. As Compliance Analyst you will embed Consumer Duty into BAU practice, review and update policies and...


  • United Kingdom AJ FOX COMPLIANCE Full time

    Are you a highly skilled and dedicated professional with expertise in Anti-Money Laundering (AML) sanctions and compliance? An exceptional opportunity has arisen for a remote Compliance Officer within an International law firm. In this role, you’ll handle a broad range of compliance, conflicts and AML issues and have the chance to handle escalations from...

  • Risk Data Analyst

    1 month ago


    United Kingdom Spinks Full time

    Risk Data Analyst - Remote - £ 60 - 70KSpinks have recently partnered with an exciting start-up who are disrupting the global Jewellery Industry. Having recently grown to 400 heads, they're now looking to build out their Risk team with an experienced Data Analyst.As a Risk Data Analyst, you will be responsible for utilising Data Visualisation tools and...

  • Risk Data Analyst

    1 month ago


    United Kingdom Spinks Full time

    Risk Data Analyst - Remote - £ 60 - 70KSpinks have recently partnered with an exciting start-up who are disrupting the global Jewellery Industry. Having recently grown to 400 heads, they're now looking to build out their Risk team with an experienced Data Analyst.As a Risk Data Analyst, you will be responsible for utilising Data Visualisation tools and...


  • United Kingdom AJ FOX COMPLIANCE Full time

    Our client, a Top International Law Firm, is in need of a Junior AML & Conflicts Analyst in London. Within this role, you will support various business functions in anti-money laundering, general conflicts, and risk and compliance checks. You will carry out background analysis, collect documentation and oversee general progress. The ideal candidate has...


  • United Kingdom Birchlake Recruitment Full time

    We are delighted to be working on behalf of a key insurance client on an exclusive basis, to help bolster their Risk & Compliance team during a period of continued growth. This is a hybrid role with the expectation of working in the office 2 days a week. Role Purpose Advise on day-to-day compliance with FCA and other regulatory, and legislative...

  • Compliance Analyst

    4 weeks ago


    United Kingdom Legal.io Full time

    Legal.io is working with a leading CRM/software development company that is seeking to engage an experience Sanctions/Trade Compliance Analyst on a full-time (40 hours per week) contract basis, for an initial 6 month term. (Health, Dental, Vision, and 401k available).Technology: KharonHours: 40 Hours / WeekPay Rate: $40 - $60 / hrInitial Term: 6...

  • Compliance Officer

    1 month ago


    United Kingdom AJ FOX COMPLIANCE Full time

    Are you a highly skilled and dedicated professional with expertise in Anti-Money Laundering (AML) sanctions and compliance? An exceptional opportunity has arisen for a remote Compliance Officer within an International law firm. In this role, you’ll handle a broad range of compliance, conflicts and AML issues and have the chance to handle escalations from...

  • Analyst, Risk

    4 months ago


    United Kingdom AJ FOX COMPLIANCE Full time

    We have an exciting opportunity to join a Global Law Firm on a remote working basis. The function of this role is to support the Conflicts Manager to ensure all policies and procedures are in place to avoid conflicts of interest, protect confidential information, and comply with legislative and regulatory requirements. In order to apply for this role, you...

  • Analyst, Risk

    3 months ago


    United Kingdom AJ FOX COMPLIANCE Full time

    We have an exciting opportunity to join a Global Law Firm on a remote working basis. The function of this role is to support the Conflicts Manager to ensure all policies and procedures are in place to avoid conflicts of interest, protect confidential information, and comply with legislative and regulatory requirements. In order to apply for this role, you...

  • Pensions Risk Analyst

    2 months ago


    United Kingdom RED10 Full time €70,000

    Risk Analyst / Insurance / Enterprise Risk Management (ERM) Hybrid working perm role based in London, global insurer, salary up to £70k + bonus & benefits KEY SKILLS Background within risk gained in the insurance industry Strong exposure of Enterprise Risk Management (ERM) Ability to implement and maintain risk identification and monitoring...


  • United Kingdom Barclay Simpson Full time

    Job Title: Investment Risk - Equities Analyst Location: [Location] Company: [Hedge Fund Name] Our Client is a leading hedge fund with over $2bn in assets under management, renowned for our dynamic, high-performance investment strategies. They are experiencing significant growth and are expanding our Risk team to continue driving our success. As part...


  • United Kingdom Compliance Professionals Full time

    Our client is a global investment management business with offices based in the West End. We have been exclusively instructed to assist with their hire of a Compliance Director on a 13-month FTC. Work within the region to expand and develop the firm’s financial crime programme. Conduct due diligence of clients, counterparties, potential joint venture...


  • United Kingdom JAM Recruitment Full time €45,000 - €60,000

    Job Title: Risk Analyst Working within a multi-national engineering and construction business you will be working supporting an ongoing early phase construction project. The combined value of the project is circa £1.This role will be part of a developing risk management function that will play an integral part in the successful delivery of this project...


  • United Kingdom Barclay Simpson Full time

    Job Title: Investment Risk - Equities Analyst Location: [Location] Company: [Hedge Fund Name] AUM: $2bn+ About Us: Our Client is a leading hedge fund with over $2bn in assets under management, renowned for our dynamic, high-performance investment strategies. They are experiencing significant growth and are expanding our Risk team to continue driving...

  • Head of Risk

    1 month ago


    United Kingdom MERJE Full time

    SIX FIGURE SALARY Lancashire - Hybrid MERJE is excited to present an exceptional opportunity for a Head of Risk & Compliance in the IT Services and Telecoms sector. This pivotal role offers a chance to lead risk management and compliance strategies for a dynamic company at the forefront of technology and communications. Our client is a leading player in...


  • United Kingdom AJ FOX COMPLIANCE Full time

    We have a fantastic opportunity with a leading commercial law firm who are seeking an AML Compliance Manager to join their Bristol office. In this role, you will support the Compliance Department to strengthen their existing resources in this area, deliver a highly efficient, top-quality service to the firm’s management and lawyers, and to support the...

  • IT Risk

    1 month ago


    United Kingdom Brown & Brown Europe Full time

    IT Risk & Compliance Manager Location: Hybrid - London Package: Negotiable + Benefits We are seeking an experienced leader to join our growing organisation as the IT Risk and Compliance Manager. In this high profile role, you will be responsible for evolving, implementing, and maintaining a robust IT risk management and compliance framework that...


  • United Kingdom IAC Full time

    IAC are on the lookout for an enthusiastic and driven Impact Analyst to join the Private Infrastructure Development Group (PIDG) and support sustainable development, climate action, and creating lasting change in underserved regions. This exciting opportunity allows you to shape the future of infrastructure investments, ensuring they deliver...