Risk Analyst

ASA Recruitment’s client, a Public Sector organisation in Edinburgh are currently looking to recruit a Risk Analyst, for an initial 12 month contract (with potential extensions) on a rate c.£450/day inside of IR35 (based on experience).

• Maintain an awareness current industry risk management standards and best practices to support gathering accurate detailed data related to risk.
• Conduct assessments of risks related to projects, changes, and digital services – with a focus on digital risks – through structured conversations and checking system configuration reports.
• Contribute to the development and improvement of risk management processes and ensure risk data is accurately captured and maintained.
• Interpret outputs from assurance activities (e.g., vulnerability scans, audits, or penetration tests) and incorporate findings into the risk management process.
• Support generations of clear, prioritised recommendations for risk treatment and mitigation and tracker application of treatments.
• Support the design and enhancement of risk data models and tools to enable consistent, efficient risk tracking – such as Power
  
  BI dashboards or similar
• Work collaboratively across business and technical teams with ability to bridge business and technical language differences and priorities.

• Office suite (Excel, Word, etc.)
• Cloud platforms (Azure)
• M365 (e.g. Microsoft forms)
• Power Platform (desirable but not required)

• Risk Assessment or Audit with Digital / Cyber experience
• Understanding of and experience of business processes mapping and documenting digital service reliance
• Ability to work well in an agile environment with internal colleagues and suppliers
• Ability to self-start and see through deadlines, improvements and benefits realisation
• Ability to explain context and goals with colleagues and collaborate with business and technical colleagues

• Familiarity with information / security related risk management frameworks and tools
• Experience supporting or maintaining technical risk registers or GRC systems.
• Awareness of cloud and enterprise service environments.
• Understanding of assurance activities such as audits, vulnerability assessments, and penetration tests.