Senior Analyst Controls

Role Purpose: Support the wider team with Information Security controls assurance activities (testing of Design and Operational Effectiveness) and Governance of Information Security Standards & Guidelines. Job Role: Maintain and update the cyber security control library ensuring controls and other key attributes of the library are aligned to industry best practice (NIST Cyber Risk Institute Profile). Conduct the assurance of controls with control owners and operators. Support the wider team with testing of controls, ensuring evidences and metrics are reviewed to demonstrate controls are designed and operated effectively (DE & OE testing). Report gaps in control effectiveness to control owners and track remediation activities through to completion. Support the annual review of Cyber Security Standards with standard owners and key SME's. Handle internal feedback from SME's. Support gap assessments of cyber controls and standards to industry recognised best practice. Work closely with other GRC teams and respond to queries raised on cyber controls and standards. Liaise with multiple customers across business units e.g. BISO's, LSEG legal entities, second and third line of defence ensuring GRC related queries are addressed in a timely manner. Knowledge: Have an understanding of one of the following frameworks : NIST, ISO27001, SOC2 and/or ISF Standard of Good Practice. Experience of conducting Risk and Controls Assessment or knowledge of testing controls to ensure if they are designed and operating effectively (DE & OE). Be able to challenge control owners, identify control gaps and propose suitable remediation plans. Experience in reviewing Cyber Security Standards, understanding the hierarchy of policies, standards and guidelines. Understanding the level of detail required in Policies, Standards and Procedures. Although this is not a technical role, demonstrate technical competences in Identity & Access Management, Vulnerability Management, Security Engineering, Security Architecture, Security Operations Centre and Cloud Security where controls are deployed. Proficient in Microsoft Office, in particular Excel and PowerPoint. Analyse data and produce reports and metrics. Key Relationships: Support Business Information Security Officers across different LSEG divisions. Maintain key relationships with Cyber Security stakeholders and second line of defence. About us: LSEG (London Stock Exchange Group) is more than a diversified global financial markets infrastructure and data business. We are dedicated, open-access partners with a dedication to excellence in delivering the services our customers expect from us. With extensive experience, deep knowledge and worldwide presence across financial markets, we enable businesses and economies around the world to fund innovation, manage risk and create jobs. It's how we've contributed to supporting the financial stability and growth of communities and economies globally for more than 300 years. Through a comprehensive suite of trusted financial market infrastructure services - and our open-access model - we provide the flexibility, stability and trust that enable our customers to pursue their ambitions with confidence and clarity. LSEG is headquartered in the United Kingdom, with significant operations in 70 countries across EMEA, North America, Latin America and Asia Pacific. We employ 25,000 people globally, more than half located in Asia Pacific. LSEG's ticker symbol is LSEG. Our People: People are at the heart of what we do and drive the success of our business. Our culture of connecting, creating opportunity and delivering excellence shape how we think, how we do things and how we help our people fulfil their potential. We embrace diversity and actively seek to attract individuals with unique backgrounds and perspectives. We break down barriers and encourage teamwork, enabling innovation and rapid development of solutions that make a difference. Our workplace generates an enriching and rewarding experience for our people and customers alike. Our vision is to build an inclusive culture in which everyone feels encouraged to fulfil their potential. We know that real personal growth cannot be achieved by simply climbing a career ladder - which is why we encourage and enable a wealth of avenues and interesting opportunities for everyone to broaden and deepen their skills and expertise. As a global organisation spanning 70 countries and one rooted in a culture of growth, opportunity, diversity and innovation, LSEG is a place where everyone can grow, develop and fulfil your potential with meaningful careers LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership , Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions. Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. You will be part of a collaborative and creative culture where we encourage new ideas and are committed to sustainability across our global business. You will experience the critical role we have in helping to re-engineer the financial ecosystem to support and drive sustainable economic growth. Together, we are aiming to achieve this growth by accelerating the just transition to net zero, enabling growth of the green economy and creating inclusive economic opportunity. LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives. We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it's used for, and how it's obtained, your rights and how to contact us as a data subject . If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.