Certification and Assurance - Senior Security/Technology Risk Analyst

The Vocalink Control Office function seeks a Senior Technology Risk Analyst with Information Security knowledge to support the Certification and Assurance team within Vocalink Limited. The role supports Certifications, Certification Audits, and Assurance activities to retain certifications and deliver assurance requirements, including conducting control testing. It requires understanding security and technology controls and frameworks like ISO27001, ISO22301, PCI DSS.

Support preparation for annual certification audits and assess controls against security standards and obligations. Assist in managing certifications such as ISO27001 and PCI DSS, and assurance activities like ISAE3000. Prepare clear control testing documentation, conduct periodic testing, and collect evidence from Control Owners.

Maintain close relationships with Control and Process Owners, 1st Line teams, 2nd Line Security partners, and Internal Audit. Support the team Director in delivering the Certification and Assurance plan. Contribute to management information, dashboards, and thematic analysis for governance forums.

Support development of certification management, assurance, and control testing processes, standards, and methodologies. Adhere to control testing standards and provide input to streamline activities. Contribute to the maturity of the 3 Lines of Defence model.