Refinitiv Hiring For Senior Analyst, Controls & Standards Governance at Bengaluru , Bangalore Full Time

Role Purpose

Support the wider team for management of Control library, Cybersecurity controls assessments and Standards Governance.

Key relationships & committees

• Maintain key relationships with first line of defence management within Cyber Security and second line of defence.
• Support Business Information Security Officers.

Key responsibilities

• Provide support with the execution of risk and controls assessments & other assurance related activities for the Control Assurance and Standards function.
• Maintain and update the control library ensuring controls and other key attributes of the library are aligned to industry best practice (NIST FSSCC).
• Aid the review of controls with control owners for completeness and accuracy.
• Support the wider team with testing of security controls, ensuring artefacts are reviewed/assessed to demonstrate design and operational effectiveness.
• Track remediation plans with control owners through to completion.
• Ensure evidence and metrics are collated from control owners at regular intervals. Provide suitable reporting on metrics for consumption by wider LSEG audience.
• Maintain Cyber Security Standards in line with industry best practice.
• Ensure the annual review of Cyber Security Standards is completed. Manage internal stakeholder feedback.
• Assist and support other GRC teams to ensure their deliverables are met.
• Liaise with multiple stakeholders across different business units e.g. BISO’s, other LSEG legal entities, second and third line of defence ensuring GRC related queries are addressed in a timely manner.

Critical deliverables

• Supporting the risk and control assessment including the quarterly LSEG RCA.
• Cyber Security Controls Library using key risk metrics, indicators and industry standards.
• Cyber Security Standards aligned to industry best practice.

Technical / job functional knowledge

• Have a good understanding of NIST Cyber Security Framework, ISO27001 and/or ISF Standard of Good Practice.
• Although this is not a technical role, you must be able to demonstrate technical competence. Therefore, demonstrate experience of implementing suitable controls for IAM, perimeter security, SDLC, vulnerability management, security engineering, security architecture, SOC and cloud principles.
• Experience of conducting RCA or other controls assessments. Knowledge of testing controls to determine if they are designed and operating effectively. Be able to challenge control owners, identifying gaps and propose suitable remediation plans.
• Understanding the hierarchy of policies, standards and guidelines.
• Proficient in Microsoft Office, in particular excel/PowerPoint and producing reports. Experience in the use and understanding requirements of GRC platform preferred.
• Good understanding of upcoming legal and regulatory requirements affecting Information Security and Technology.
• Experience in Financial Services or other organisations where mature controls are implemented would be beneficial.
• Suitable qualifications such as CISSP, CISM, CRISC or MSc in Information Security.

Business and sector expertise

• Financial Services
• FTSE 250
• Technology & Information Security

Personal skills and capabilities

• An adaptable team player.
• As required support other GRC teams or work on ad-hoc projects. This is a role where your peers will be able to support you and likewise you should be able to support them on engagements which cover different GRC domains.
• Good communication and presentation skills when engaging with clients and other internal stakeholders. This role requires you to regularly interact with 2LoD and different legal entities within LSEG.
• Be able to work within a global team which is based across multiple locations.
• A can-do attitude, being able to meet deadlines and prioritise workload.
• Objective analysis of poorly defined problems
• Partnership and influence
• Negotiation management
• Able to engage with technical stakeholders and discuss technical controls.

At LSEG, we believe that creating a diverse and inclusive organisation is fundamental to the way we deliver on our promise of creating essential partnerships and open opportunities. Our open culture is central to how we deliver our purpose – driving financial stability, empowering economies and enabling customers to create sustainable growth – in everything we do.

Working with us means that you will be part of a dynamic organisation of 25,000 people across 70 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. You will be part of a collaborative and creative culture where we encourage new ideas and are committed to sustainability across our global business. You will experience the critical role we have in helping to re-engineer the financial ecosystem to support and drive sustainable economic growth. Together, we are aiming to achieve this growth by accelerating the just transition to net zero, enabling growth of the green economy and creating inclusive economic opportunity.

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants and employees religious practices and beliefs, as well as any mental health or physical disability needs.

Please take a moment to read this carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, .

If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.