Description
ASA Recruitment’s client, a Public Sector organisation in Edinburgh are currently looking to recruit a Risk Analyst, for an initial 12 month contract (with potential extensions) on a rate c.£450/day inside of IR35 (based on experience).
Responsibilities:
1. Maintain an awareness current industry risk management standards and best practices to support gathering accurate detailed data related to risk.
2. Conduct assessments of risks related to projects, changes, and digital services – with a focus on digital risks – through structured conversations and checking system configuration reports.
3. Contribute to the development and improvement of risk management processes and ensure risk data is accurately captured and maintained.
4. Interpret outputs from assurance activities (e.g., vulnerability scans, audits, or penetration tests) and incorporate findings into the risk management process.
5. Support generations of clear, prioritised recommendations for risk treatment and mitigation and tracker application of treatments.
6. Support the design and enhancement of risk data models and tools to enable consistent, efficient risk tracking – such as PowerBI dashboards or similar
7. Work collaboratively across business and technical teams with ability to bridge business and technical language differences and priorities.
Technical Scope
8. Office suite (Excel, Word, etc.)
9. Cloud platforms (Azure)
10. M365 (e.g. Microsoft forms)
11. Power Platform (desirable but not required)
Essential Skills & Experience:
12. Risk Assessment or Audit with Digital / Cyber experience
13. Understanding of and experience of business processes mapping and documenting digital service reliance
14. Ability to work well in an agile environment with internal colleagues and suppliers
15. Ability to self-start and see through deadlines, improvements and benefits realisation
16. Ability to explain context and goals with colleagues and collaborate with business and technical colleagues
Desirable Skills
17. Familiarity with information / security related risk management frameworks and tools
18. Experience supporting or maintaining technical risk registers or GRC systems.
19. Awareness of cloud and enterprise service environments.
20. Understanding of assurance activities such as audits, vulnerability assessments, and penetration tests.