Risk Analyst

Urgent

Job Description

ASA Recruitment’s client, a Public Sector organisation in Edinburgh are currently looking to recruit a Risk Analyst, for an initial 12 month contract (with potential extensions) on a rate c.£450/day inside of IR35 (based on experience).

Responsibilities

  • Maintain an awareness current industry risk management standards and best practices to support gathering accurate detailed data related to risk.
  • Conduct assessments of risks related to projects, changes, and digital services – with a focus on digital risks – through structured conversations and checking system configuration reports.
  • Contribute to the development and improvement of risk management processes and ensure risk data is accurately captured and maintained.
  • Interpret outputs from assurance activities (e.g., vulnerability scans, audits, or penetration tests) and incorporate findings into the risk management process.
  • Support generations of clear, prioritised recommendations for risk treatment and mitigation and tracker application of treatments.
  • Support the design and enhancement of risk data models and tools to enable consistent, efficient risk tracking – such as PowerBI dashboards or similar
  • Work collaboratively across business and technical teams with ability to bridge business and technical language differences and priorities.

Technical Scope

  • Office suite (Excel, Word, etc.)
  • Cloud platforms (Azure)
  • M365 (e.g. Microsoft forms)
  • Power Platform (desirable but not required)

Essential Skills & Experience

  • Risk Assessment or Audit with Digital / Cyber experience
  • Understanding of and experience of business processes mapping and documenting digital service reliance
  • Ability to work well in an agile environment with internal colleagues and suppliers
  • Ability to self-start and see through deadlines, improvements and benefits realisation
  • Ability to explain context and goals with colleagues and collaborate with business and technical colleagues

Desirable Skills

  • Familiarity with information / security related risk management frameworks and tools
  • Experience supporting or maintaining technical risk registers or GRC systems.
  • Awareness of cloud and enterprise service environments.
  • Understanding of assurance activities such as audits, vulnerability assessments, and penetration tests.

Location