Senior Analyst – Regulatory Assurance
- London
- Permanent
- Full-time
- Lead gap analyses and solutions that keep us DORA-compliant
- Embed the six pillars of DORA into the business: ICT Risk Management, Incident Reporting, Resilience Testing, Information Sharing, Third Party Risk, and Governance
- Collaborate with operational resilience and business continuity teams
- Design and execute testing initiatives to measure cyber and digital resilience
- Assess third-party resilience as part of our TPRM efforts
- Partner closely with IT and Risk stakeholders on cross-functional projects
- Act as a subject matter expert and champion of digital resilience
- Develop and evolve policies to meet both local and enterprise-wide regulations
- Contribute to our core information security policy framework
- Support ongoing control maintenance and internal audits
- Work with stakeholders to assess risk and strengthen mitigation strategies
- Cultivate deep knowledge of regulated business services
- Degree in IT, InfoSec, Risk Management or related field
- Strong knowledge of DORA, NIS2, UK and EU cyber regulations
- Familiarity with frameworks like ISO27001, NIST, COBIT and CAF
- Recognised security certifications (e.g. CISSP, CISM, CISA, CRISC, CTPRP)
- Experience with European financial regulation (BaFin, AMF, etc.)
- Proven background in information security, audit, or risk management
- Financial services experience with a sharp eye on cybersecurity trends
- Proactive problem solver with excellent analytical thinking
- Strong written and verbal communication, including presenting to senior leadership
- Collaborative with stakeholder management skills
- Proficient in Microsoft Office (Excel, PowerPoint, Visio)
- Willingness to travel within Europe