Senior Analyst, Controls & Standards Governance
Core
Build and operate the unified control library and standards capability for Technology and Cyber Security, translating regulatory obligations and frameworks into clear standards requirements and implementation guidance.
Role type
Senior GRC Analyst (Controls & Standards)
Builds
Unified control library, standards taxonomy, and implementation guidance for Technology and Cyber Security
Domain
Financial Markets Infrastructure / Cyber Security Governance
Required skills
Technology and Cyber GRC, IT/Cyber Audit, Risk Management, Control Lifecycle Management, Regulatory Framework Translation, Standards Design, Gap Analysis, Remediation Tracking, Data Analysis, Automation
Preferred skills
NIST Cybersecurity Framework, COBIT, ISO/IEC 27001, SOC 2, Identity & Access Management, Cloud Security, Incident Management, Operational Resilience
Technologies
NIST, COBIT, ISO/IEC 27001, SOC 2, Automation tools, AI capabilities
Responsibilities
Maintain and improve the unified control library and standards taxonomy; Translate regulatory obligations into clear control requirements; Draft standards, implementation guidance, and evidence requirements; Lead reviews of standards and controls for governance forums; Partner with control owners to challenge scope and build quality; Support RCSA, audits, and regulatory examinations with control mappings.
Seniority
Senior, hands-on IC
