IT Compliance Analyst

We are hiring an IT Compliance Analyst who will support the IT Compliance Manager and assist with the implementation and running of a best practice IT General Control Framework. This will deliver continual improvements in support of Audit and Risk management. As part of the Information Security team, a focus will be on the implementation, running, monitoring and reporting on effective security and other IT controls and processes.

Responsibilities

• Work with the IT Audit & Compliance manager in delivering a Controls Framework
• Produce regular KPI reporting on IT Audit and Compliance activities and the overall programme’s status
• Own coordination of the ongoing compliance monitoring, awareness training and testing.
• Coordinate, execute and oversee key controls and processes.
• Track and manage continual improvement activities across IT Audit and Compliance programmes.
• Assist in the definition, documentation and maintenance of security baselines, standards, policy and procedures in conjunction with relevant IT teams;
• Maintain and take ownership of IT Audit Findings log and track actions to completion,
• Provide expert assistance and consultancy to all other IT teams, in line with best practice and to meet business requirements;
• Ensure any ad-hoc audit work required is completed in a timely manner;
• Automate compliance checking of agreed standards, policy and controls;
• Support the IT Production Heads in matters relating to IT & Audit Compliance
• Maintain personal/professional development to meet the changing demands of the role, including all relevant regulatory and legislative training;
• When dealing with all customers, clients or colleagues ensure that we provide a clear, fair and consistent high quality service that presents a professional and positive image of CMC Markets;
• Take all reasonable steps to ensure appropriate confidentiality;
• Undertake such other duties, training and/or hours of work as may be reasonably required and which are consistent with the general level of responsibility of this role.

Key Skills and Experience

• Knowledge of applicable regulatory policies, standards, procedures and controls (ISO27001/SOC/MAS TRM/BAIT/CIS/NIST/Cyber Essentials etc.)
• Understanding of IT standards, best practices for information and IT security and applicable laws and regulations.
• Previous Experience in a Compliance, Risk Management, Internal Audit or External Audit role
• Experience of working in a Regulated Environment (Financial Services)
• Experience of Security controls, processes and governance desirable (e.g. access recertification)
• Documenting, reviewing and reporting, must have excellent written communication skills and good experience of working with Microsoft Office
• Competence using Excel, and IT tools, basic scripts to process information efficiently (e.g. csv data, comparisons, reporting)
• Confidence to engage with audiences remotely (i.e. via Teams) as well as engaging face-to-face with smaller groups and senior stakeholders
• Enjoys self-learning/teaching and problem-solving with a strong attention to detail
• Some experience in environments where they are required to perform a wide range of types of tasks from week-to-week (e.g. start-up or small organisation experience) – perhaps looking to move into a larger organisation