Information Risk Analyst & Policy

Posted 9 April by BrighterBox

This specialist asset manager is at the forefront of designing and delivering solutions to meet clients’ specific and evolving investment needs.

Having won industry recognition for their investment capabilities across liability driven investment, fixed income, multi asset and absolute return, they are now looking to hire an outstanding graduate to support their Risk Management team.

The team’s overarching philosophy is to provide the right set of tools and services to enable the business to deliver solutions to clients in a high quality, cost efficient, scalable and risk controlled manner. They only undertake operational activities where they believe we can add value or gain competitive advantage. In many cases, where credible alternatives are available, they will work with external partners to deliver core functions, for example, IT applications or administration services.

Job Description


The purpose of the role is to support the risk and policy management function within the Information Risk team. This comprises:
  • Ownership and maintenance of the information risk profiles within the company-wide RCSA
  • Management and operation of the ISMS risk management cycle and risk structure
  • Assessment of information risks with support where necessary from the Head of Information Risk
  • Maintenance and distribution of complete, current, compliant and coherent policy and standard sets
  • Management and operation of the ISMS policy exception management cycle

In addition to the core responsibilities, the Analyst will participate in the broader functions of the team, including:
  • Approvals for high-sensitivity access and privilege
  • Response to customer and prospect diligence enquiries
  • Response to colleagues and assistance with training and awareness programmes.
  • Support and evidence for audits
  • Identification and selection of tools and systems for efficient operation of the Information Risk function
About you
  • The role is primarily addressing risk management rather than information technology controls, however exposure to IT and cyber risk management is likely to be very valuable.
  • The role depends on familiarity with policy as a tool and a control, and it will benefit from experience building relationships with users and stakeholders to write, develop, and maintain policy and standards.
  • Some understanding of investment management business and regulators would be beneficial but is not essential.
  • We would expect to see analytical skills with the ability to work. The role requires a sceptical thinker able to defend their view with good written and spoken communication skills.

Required skills

  • Policy

Application question

Do you have a degree in Politics, Economics, Finance or similar?

Reference: 34856340

Bank or payment details should not be provided when applying for a job. reed.co.uk is not responsible for any external website content. All applications should be made via the 'Apply now' button.

Report this job