Risk, Compliance & Controls Analyst

TL;DR

Risk, Compliance & Controls Analyst (Cybersecurity): Managing compliance and assurance frameworks across the organization with an accent on risk assessment, regulatory monitoring, and control deficiency identification. Focus on developing policies, tracking remediation efforts, and ensuring alignment with industry standards like ISO 27001 and GDPR.

Location: Must be based in the UK (Hybrid role in Aberdeen or London).

Company

A leading provider of business technology solutions within the Energy, Public, and Finance sectors.

What you will do

• Identify, assess, and prioritize organizational risks.
• Monitor regulatory developments and ensure compliance with internal policies and laws.
• Document control deficiencies and collaborate on corrective action plans.
• Track remediation efforts to ensure timely resolution of compliance gaps.
• Develop and maintain risk management and compliance policies.
• Support vendor risk management and provide training on compliance areas.

Requirements

• Must be based in the UK.
• Substantial experience in control management, governance, compliance, and IT audits.
• Strong understanding of regulatory requirements including GDPR and Data Protection Act.
• Knowledge of information security frameworks such as ISO 27001, ITIL, COBIT, and NIST.
• Excellent stakeholder management and communication skills.
• High level of personal integrity and ability to handle confidential matters.

Nice to have

• Industry certifications such as ISO 27001/27005, CoBIT, or ITIL.
• Experience with OneTrust risk management toolset.

Culture & Benefits

• Flexible working arrangements to support work-life balance.
• Personalized career development plans and learning opportunities.
• Generous annual leave allowance and enhanced family-friendly benefits.
• Pension scheme and access to private health, well-being, and insurance schemes.
• Inclusive and diverse workplace culture.