Security Risk Analyst 6-month contract London/Remote Inside IR35 My Customer is looking for a Security Risk Analyst to join their Governance, Risk & Compliance (GRC) team. You will play a key role in strengthening their risk management processes, working primarily with Archer and other GRC tools to support risk assessment, compliance, and governance activities. In this role, you will be responsible for identifying, assessing, and tracking security risks across assets, systems, and third parties, ensuring compliance with internal standards, policies, and regulatory frameworks. Key Skills from the Security Risk Analyst: Strong background in Security Risk and Governance with hands-on experience in Archer (experience with other GRC tools is also valuable). Solid understanding of risk assessment methodologies, security frameworks (NIST, ISO (phone number removed , and compliance requirements (GDPR, PCI DSS, SOX). Strong written communication skills, able to produce clear technical reports and risk documentation. Excellent stakeholder management, able to collaborate across technical and non-technical teams. Beneficial certifications: CISSP, CISA, CISM (or equivalent). ISO27001 / ISMS Accredited qualifications would be beneficial Experience working in financial sector would be beneficial Experience in ensuring internal IT system compliance against agreed standards Key Responsibilities of the Security Risk Analyst: Maintain and improve the security risk assessment framework, procedures, and workflows. Manage and update security questionnaires to align with compliance requirements, industry standards, and regulations. Conduct asset-level and third-party/vendor risk assessments. Analyse and document inherent and residual risks, providing clear recommendations. Produce detailed technical reports highlighting findings, control gaps, and proposed remediation plans. Drive remediation Perform periodic and ad-hoc risk assessments in line with organisational policies. The Security Risk Analyst is required onsite in London, once a week. Apply now to speak with VIQU IT in confidence about the Security Risk Analyst role. Or reach out to Connor Smal via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.
Sep 04, 2025
Contractor
Security Risk Analyst 6-month contract London/Remote Inside IR35 My Customer is looking for a Security Risk Analyst to join their Governance, Risk & Compliance (GRC) team. You will play a key role in strengthening their risk management processes, working primarily with Archer and other GRC tools to support risk assessment, compliance, and governance activities. In this role, you will be responsible for identifying, assessing, and tracking security risks across assets, systems, and third parties, ensuring compliance with internal standards, policies, and regulatory frameworks. Key Skills from the Security Risk Analyst: Strong background in Security Risk and Governance with hands-on experience in Archer (experience with other GRC tools is also valuable). Solid understanding of risk assessment methodologies, security frameworks (NIST, ISO (phone number removed , and compliance requirements (GDPR, PCI DSS, SOX). Strong written communication skills, able to produce clear technical reports and risk documentation. Excellent stakeholder management, able to collaborate across technical and non-technical teams. Beneficial certifications: CISSP, CISA, CISM (or equivalent). ISO27001 / ISMS Accredited qualifications would be beneficial Experience working in financial sector would be beneficial Experience in ensuring internal IT system compliance against agreed standards Key Responsibilities of the Security Risk Analyst: Maintain and improve the security risk assessment framework, procedures, and workflows. Manage and update security questionnaires to align with compliance requirements, industry standards, and regulations. Conduct asset-level and third-party/vendor risk assessments. Analyse and document inherent and residual risks, providing clear recommendations. Produce detailed technical reports highlighting findings, control gaps, and proposed remediation plans. Drive remediation Perform periodic and ad-hoc risk assessments in line with organisational policies. The Security Risk Analyst is required onsite in London, once a week. Apply now to speak with VIQU IT in confidence about the Security Risk Analyst role. Or reach out to Connor Smal via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.
IT Security Analyst Location: Hybrid - Buckinghamshire Salary: £50,000 - £55,000 + Benefits 83zero are partnered with a market-leading software company who are on a mission to transform the construction and related industries through their end-to-end digital solutions. With teams across the UK, Europe, USA and India, they are delivering large-scale transformation projects on a global scale and are continuing to expand. We are now looking for a highly organised and detail-driven IT Security Analyst to join their growing security function. This role plays a key part in securing customer trust and supplier integrity, ensuring compliance with recognised frameworks, and supporting wider security initiatives. The Role Own and manage responses to customer security questionnaires (SIG, CAIQ, bespoke). Work cross-functionally with Legal, Compliance, Procurement, Product and Security teams. Maintain the security assurance Matrix in line with ISO 27001, Cyber Essentials, and SOC 2. Act as the key point of contact for security assurance queries. Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls. Manage the third-party due diligence programme, including onboarding and periodic reviews. Track and publish key security metrics such as risk severity, SLA adherence, and turnaround times. Provide audit artefacts and support internal/external audits. Contribute to broader security initiatives and continuous improvement within the organisation. About You 3+ years' experience in Information Security, GRC, or Vendor Risk Management. Strong experience issuing or responding to security questionnaires. Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA. Excellent communication skills, able to translate technical risk to non-technical stakeholders. Eligible to work in the UK and able to pass background checks. Desirable: Certifications such as CRISC, CISSP, CISA, or ISO 27001 Lead Auditor. Familiarity with SaaS/cloud platforms (AWS, Azure, GCP). Understanding of secure software supply chains (SBOM, SLSA). What's on Offer £50,000 - £55,000 base salary 25 days annual leave + public holidays (increasing with service) Matched pension scheme Private medical insurance & life assurance Fitness allowance Paid study leave & volunteering days Flexible hybrid working Excellent career development and training opportunities
Sep 04, 2025
Full time
IT Security Analyst Location: Hybrid - Buckinghamshire Salary: £50,000 - £55,000 + Benefits 83zero are partnered with a market-leading software company who are on a mission to transform the construction and related industries through their end-to-end digital solutions. With teams across the UK, Europe, USA and India, they are delivering large-scale transformation projects on a global scale and are continuing to expand. We are now looking for a highly organised and detail-driven IT Security Analyst to join their growing security function. This role plays a key part in securing customer trust and supplier integrity, ensuring compliance with recognised frameworks, and supporting wider security initiatives. The Role Own and manage responses to customer security questionnaires (SIG, CAIQ, bespoke). Work cross-functionally with Legal, Compliance, Procurement, Product and Security teams. Maintain the security assurance Matrix in line with ISO 27001, Cyber Essentials, and SOC 2. Act as the key point of contact for security assurance queries. Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls. Manage the third-party due diligence programme, including onboarding and periodic reviews. Track and publish key security metrics such as risk severity, SLA adherence, and turnaround times. Provide audit artefacts and support internal/external audits. Contribute to broader security initiatives and continuous improvement within the organisation. About You 3+ years' experience in Information Security, GRC, or Vendor Risk Management. Strong experience issuing or responding to security questionnaires. Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA. Excellent communication skills, able to translate technical risk to non-technical stakeholders. Eligible to work in the UK and able to pass background checks. Desirable: Certifications such as CRISC, CISSP, CISA, or ISO 27001 Lead Auditor. Familiarity with SaaS/cloud platforms (AWS, Azure, GCP). Understanding of secure software supply chains (SBOM, SLSA). What's on Offer £50,000 - £55,000 base salary 25 days annual leave + public holidays (increasing with service) Matched pension scheme Private medical insurance & life assurance Fitness allowance Paid study leave & volunteering days Flexible hybrid working Excellent career development and training opportunities
Job title: Business Analyst - Financial Crime Location: London/Hybrid Duration: until 31/03/2026 initially Adecco is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. The role: To act as a business analyst within the FCMO Planning team, providing detailed overviews of business processes, and assisting in the documentation of process change. To assist in the creation and distribution of EMEA FCMO Management information to local management teams, governance committees and Senior Management committee meetings such as OGRC. EXCO and the EMEA meeting. To provide support for Bank wide projects impacting FCMO, and FCMO change initiatives, ensuring the successful deployment and that the associated training, and procedural updates are completed. Responsibilities: In relation to change initiatives, help to collate and documents Business requirement documents, current and future state process maps, meeting documentation and facilitate meeting / workshops in relation to system upgrades and proposed process change. Complete business requirement traceability matrix - mapping business requirements to design and mapping design to successful testing Investigate root causes of project issues, document the issue and support the resolution activities where required. Working with the BAU teams to ensure that the centralised FCMO procedures are up to date and accurately reflect current process and policy, ensuring they meet their annual review dates. Contribute to the Kaizen business process re-engineering process, suggesting enhancements to policy and procedures that will provide greater efficiency or reduce the opportunity for error. To act as liaison between operations areas, external Departments and FCMO for the escalation of queries, data requests or issues. Assist in the preparation of section MI and related paperwork for OAD Committee and Steerco's ensuring accurate and transparent reporting. Requirements: Strong project and business analytical skills Flexible and adaptable to changing business requirements and new task assignment. Able to multitask and work on several initiatives at one time Self-motivated to continually improve existing practices with minimal supervision and able to take the lead in documenting requirements. Ability to work unaided on projects / initiatives and manage their own time to meet deadlines. The role requires excellent communication skills, both written and verbal, with the ability to communicate process change, complex system issues, business requirements or feedback to all levels of the organisation. Ability to collaborate with all levels of personnel with differing expertise and backgrounds as part of project workstreams, supporting others to ensure the overall team objectives are achieved. Candidates will ideally show evidence of the above in their CV in order to be considered. Please be advised if you haven't heard from us within 48 hours then unfortunately your application has not been successful on this occasion, we may however keep your details on file for any suitable future vacancies and contact you accordingly.
Sep 04, 2025
Contractor
Job title: Business Analyst - Financial Crime Location: London/Hybrid Duration: until 31/03/2026 initially Adecco is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. The role: To act as a business analyst within the FCMO Planning team, providing detailed overviews of business processes, and assisting in the documentation of process change. To assist in the creation and distribution of EMEA FCMO Management information to local management teams, governance committees and Senior Management committee meetings such as OGRC. EXCO and the EMEA meeting. To provide support for Bank wide projects impacting FCMO, and FCMO change initiatives, ensuring the successful deployment and that the associated training, and procedural updates are completed. Responsibilities: In relation to change initiatives, help to collate and documents Business requirement documents, current and future state process maps, meeting documentation and facilitate meeting / workshops in relation to system upgrades and proposed process change. Complete business requirement traceability matrix - mapping business requirements to design and mapping design to successful testing Investigate root causes of project issues, document the issue and support the resolution activities where required. Working with the BAU teams to ensure that the centralised FCMO procedures are up to date and accurately reflect current process and policy, ensuring they meet their annual review dates. Contribute to the Kaizen business process re-engineering process, suggesting enhancements to policy and procedures that will provide greater efficiency or reduce the opportunity for error. To act as liaison between operations areas, external Departments and FCMO for the escalation of queries, data requests or issues. Assist in the preparation of section MI and related paperwork for OAD Committee and Steerco's ensuring accurate and transparent reporting. Requirements: Strong project and business analytical skills Flexible and adaptable to changing business requirements and new task assignment. Able to multitask and work on several initiatives at one time Self-motivated to continually improve existing practices with minimal supervision and able to take the lead in documenting requirements. Ability to work unaided on projects / initiatives and manage their own time to meet deadlines. The role requires excellent communication skills, both written and verbal, with the ability to communicate process change, complex system issues, business requirements or feedback to all levels of the organisation. Ability to collaborate with all levels of personnel with differing expertise and backgrounds as part of project workstreams, supporting others to ensure the overall team objectives are achieved. Candidates will ideally show evidence of the above in their CV in order to be considered. Please be advised if you haven't heard from us within 48 hours then unfortunately your application has not been successful on this occasion, we may however keep your details on file for any suitable future vacancies and contact you accordingly.
Senior Information Security Analyst We are looking for a Senior Information Security Analyst with a strong operational background with a focus on Cyber Security and a working knowledge of GRC to be part of a central team supporting a mixture of security operations ensuring compliance with business needs. This will focus around vulnerability and threat management, making sure security controls are functioning, mentorship of junior members and working being part of a 24 x 7 remote support rota. If you have experience of working in Cyber Security and are keen to make a difference here is what we are looking for: Significant experience of working in a security related role, with demonstrable experience within an operational aspect with extensive vulnerability and threat management. A strong understanding of Risk Assessment frameworks and methodologies. The ability to explain complex security issues in a fashion that could be understood by non-technical people. Knowledge of cloud security, with a knowledge of Azure/O365 Possess a knowledge of various technologies, how they can combine and how a system should be designed.
Sep 01, 2025
Full time
Senior Information Security Analyst We are looking for a Senior Information Security Analyst with a strong operational background with a focus on Cyber Security and a working knowledge of GRC to be part of a central team supporting a mixture of security operations ensuring compliance with business needs. This will focus around vulnerability and threat management, making sure security controls are functioning, mentorship of junior members and working being part of a 24 x 7 remote support rota. If you have experience of working in Cyber Security and are keen to make a difference here is what we are looking for: Significant experience of working in a security related role, with demonstrable experience within an operational aspect with extensive vulnerability and threat management. A strong understanding of Risk Assessment frameworks and methodologies. The ability to explain complex security issues in a fashion that could be understood by non-technical people. Knowledge of cloud security, with a knowledge of Azure/O365 Possess a knowledge of various technologies, how they can combine and how a system should be designed.
Senior Information Security Analyst We are looking for a Senior Information Security Analyst with a strong operational background with a focus on Cyber Security and a working knowledge of GRC to be part of a central team supporting a mixture of security operations ensuring compliance with business needs. This will focus around vulnerability and threat management, making sure security controls are functioning, mentorship of junior members and working being part of a 24 x 7 remote support rota. If you have experience of working in Cyber Securityand are keen to make a difference here is what we are looking for: Significant experience of working in a security related role, with demonstrable experience within an operational aspect with extensive vulnerability and threat management. A strong understanding of Risk Assessment frameworks and methodologies. The ability to explain complex security issues in a fashion that could be understood by non-technical people. Knowledge of cloud security, with a knowledge of Azure/O365 Possess a knowledge of various technologies, how they can combine and how a system should be designed.
Sep 01, 2025
Full time
Senior Information Security Analyst We are looking for a Senior Information Security Analyst with a strong operational background with a focus on Cyber Security and a working knowledge of GRC to be part of a central team supporting a mixture of security operations ensuring compliance with business needs. This will focus around vulnerability and threat management, making sure security controls are functioning, mentorship of junior members and working being part of a 24 x 7 remote support rota. If you have experience of working in Cyber Securityand are keen to make a difference here is what we are looking for: Significant experience of working in a security related role, with demonstrable experience within an operational aspect with extensive vulnerability and threat management. A strong understanding of Risk Assessment frameworks and methodologies. The ability to explain complex security issues in a fashion that could be understood by non-technical people. Knowledge of cloud security, with a knowledge of Azure/O365 Possess a knowledge of various technologies, how they can combine and how a system should be designed.
The GRC Analyst will play a pivotal role in ensuring effective governance, risk, and compliance practices within the organisation's technology department. This position requires a keen eye for detail and the ability to support risk management processes in a not-for-profit environment. Client Details An UK leading housing group with a significant focus on technology-driven initiatives. It is committed to delivering impactful services and maintaining high standards of governance and compliance across its operations. Description Support the development and implementation of governance, risk, and compliance frameworks within the technology department. Monitor and assess risks, ensuring they are effectively identified, documented, and mitigated where necessary. Conduct regular audits and reviews to ensure compliance with organisational and regulatory standards. Provide guidance and training to staff on compliance-related matters and best practices. Collaborate with internal teams to enhance security and data protection measures. Prepare detailed reports and documentation for senior management and stakeholders. Stay updated on relevant industry regulations and standards, ensuring the organisation remains compliant. Support the resolution of compliance-related incidents and recommend improvements to processes. Profile A successful GRC Analyst should have: Experience in governance, risk, and compliance within a technology-focused environment. Strong analytical and problem-solving skills with a detail-oriented mindset. Knowledge of relevant industry regulations and best practices. (NIST / ISO27001) Ability to manage multiple tasks and priorities effectively. Excellent communication skills to liaise with internal teams and stakeholders. A professional qualification in a related field or equivalent experience. Job Offer Yearly bonus Generous pension scheme. Life assurance coverage Support for professional development. Primarily remote working with occasional commuting to London
Sep 01, 2025
Full time
The GRC Analyst will play a pivotal role in ensuring effective governance, risk, and compliance practices within the organisation's technology department. This position requires a keen eye for detail and the ability to support risk management processes in a not-for-profit environment. Client Details An UK leading housing group with a significant focus on technology-driven initiatives. It is committed to delivering impactful services and maintaining high standards of governance and compliance across its operations. Description Support the development and implementation of governance, risk, and compliance frameworks within the technology department. Monitor and assess risks, ensuring they are effectively identified, documented, and mitigated where necessary. Conduct regular audits and reviews to ensure compliance with organisational and regulatory standards. Provide guidance and training to staff on compliance-related matters and best practices. Collaborate with internal teams to enhance security and data protection measures. Prepare detailed reports and documentation for senior management and stakeholders. Stay updated on relevant industry regulations and standards, ensuring the organisation remains compliant. Support the resolution of compliance-related incidents and recommend improvements to processes. Profile A successful GRC Analyst should have: Experience in governance, risk, and compliance within a technology-focused environment. Strong analytical and problem-solving skills with a detail-oriented mindset. Knowledge of relevant industry regulations and best practices. (NIST / ISO27001) Ability to manage multiple tasks and priorities effectively. Excellent communication skills to liaise with internal teams and stakeholders. A professional qualification in a related field or equivalent experience. Job Offer Yearly bonus Generous pension scheme. Life assurance coverage Support for professional development. Primarily remote working with occasional commuting to London
