Senior Analyst, Controls & Standards Governance
Core
Build and operate the unified control library and standards capability for Technology and Cyber Security, translating regulatory obligations and frameworks into clear standards requirements and implementation guidance.
Role type
Senior GRC Analyst (Controls & Standards)
Builds
Unified control library, standards taxonomy, implementation guidance, and evidence expectations for Technology and Cyber domains.
Domain
Financial markets infrastructure, Technology Risk, Cyber Security Governance
Required skills
Technology/Cyber GRC experience, control lifecycle management, regulatory framework mapping (NIST, COBIT, ISO 27001), control design and testing, gap analysis, systems thinking, technical competence in security domains (IAM, Cloud, SOC, etc.), analytical skills
Preferred skills
Financial services experience, control-library convergence experience, GRC platform proficiency, automation/AI interest, CISA/CISM/CRISC/CISSP certifications
Technologies
GRC platforms, data analysis tools, visualization tools
Responsibilities
Maintain and improve the unified control library and standards taxonomy; translate regulatory obligations into clear standards requirements; draft implementation guidance and evidence requirements; lead periodic reviews and present changes at governance forums; partner with control owners to challenge scope and build quality; support RCSA, audits, and regulatory examinations with control mappings; monitor emerging Technology and Cyber requirements; use analysis and approved automation to improve control mapping and data quality.
Seniority
Senior, hands-on IC
