Role Overview
The Senior Risk Analyst plays a critical role in LSEG’s risk and assurance ecosystem by supporting client due diligence, audit engagements, regulatory inquiries, and vulnerability‑related updates. This role ensures that risk information is accurate, timely, and aligned with internal standards and regulatory expectations. The analyst will partner closely with security, compliance, engineering, operations, and client‑facing teams to maintain a strong risk posture and enable trusted relationships with customers and regulators.
Key Responsibilities
Client Due Diligence & Assurance
- Lead the end‑to‑end response process for due diligence questionnaires (DDQs), security assessments, and sophisticated risk inquiries, ensuring high‑quality, consistent, and timely responses.
- Maintain and curate standard due‑diligence artefacts (including ISO/SOC certifications, policies, resilience statements, etc.).
- Coordinate with SMEs to gather technical and procedural evidence required for enhanced due diligence or advanced requests.
- Support the uplift of due diligence processes by leveraging governance, standardisation, and content lifecycle improvements.
- Contribute to the continuous improvement of third‑party and client assurance frameworks in alignment with internal policies.
Audit Support (Internal & External)
- Assist in preparing evidence, narratives, and walkthroughs for external audits (ISO 27001, ISO 27017, SOC2, regulatory audits, client audits) and internal risk reviews.
- Liaise with risk, compliance, engineering, and service teams to ensure audit readiness.
- Track audit findings, remediation plans, and associated control owners to ensure timely closure.
Regulatory Queries & Compliance Support
- Respond to regulatory information requests relating to outsourcing, operational resilience, security controls, and material service changes in accordance with TPRM and regulatory notification requirements.
- Work with Risk, Legal, Compliance, and SMEs to draft accurate and regulator‑ready responses aligned to local jurisdictional requirements.
- Maintain documentation and evidence required for compliance obligations.
Vulnerability & Risk Updates
- Work with security engineering and platform teams to monitor relevant vulnerability bulletins, security advisories, and risk insights.
- Track vulnerability remediation progress, flag overdue items, and ensure risk treatment documentation is up to date.
- Support communication of technology risk themes to interested parties, including customers when part of assurance processes.
Risk Reporting & Governance
- Produce risk reports, metrics, and dashboards for leadership, highlighting themes from due diligence requests, audit outcomes, vulnerability trends, and regulatory interactions.
- Maintain accurate documentation in risk repositories, assurance libraries, and control systems.
- Participate in risk governance forums, working groups, and continuous‑improvement initiatives.
Key Skills & Experience
- Proven experience in risk management, cybersecurity, operational risk, or compliance within financial services or a similarly regulated industry.
- Strong understanding of information security frameworks (ISO 27001/27017, NIST CSF), third‑party risk, and due‑diligence activities.
- Experience partnering with engineering and technical teams to interpret and translate technical controls for client and regulatory audiences.
- Excellent communication skills.
- Capable of drafting well‑structured, clear, and defensible responses for audits, clients, and regulators.
- Ability to manage multiple concurrent assessments with strong attention to detail.
Desirable
- Understanding of operational resilience, outsourcing regulations, and global supervisory expectations.
- Familiarity with content management, assurance libraries, or automation tools used in client assurance functions.
- Experience with vulnerability management or security operations processes.
Qualifications & Experience
- University degree or equivalent, and/or working towards a relevant professional certification.
- Previous relevant experience.
Behaviours & Attributes
The role is ideal for a structured problem solver with strong analytical and problem‑solving ability. The individual needs to be comfortable operating in a fast‑paced environment with many collaborators, highly organised, proactive, and committed to continuous improvement. The ability to challenge constructively, influence outcomes, and maintain high standards of accuracy and integrity is key!
Career Stage
Senior Associate
Equal Opportunity Statement
We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.
#J-18808-Ljbffr