Risk Analyst
Marshall Wolfe is proud to be supporting a global company in their search for a Risk Analyst. The role is permanent, with 3 days a week in their Ipswich office.
This individual will be supporting the
Risk Acknowledgement and Mitigation Plan (RAMP)
process, ensuring security policy exceptions are assessed and documented. This role involves collaborating with IT and business teams, leading RAMP review
meetings, and providing risk reports to governance teams. Key Responsibilities: Create and manage RAMPs, ensuring compliance and risk mitigation. Lead weekly RAMP Review Group (RRG) meetings and maintain audit trails. Provide monthly risk reports to IT, Security, and Risk Governance teams. Act as an Information Security Champion, advising teams on security policies. Requirements: 5+ years in Risk Management (required) or Information Security (preferred). Strong knowledge of Risk Frameworks (ISO 31000, NIST 800-30, FAIR, ENISA). Understanding of Information Security frameworks (Mitre ATT&CK, NIST, ISO 27001) (Preferred). Experience in multinational companies. Ability to communicate risk concepts to C-Level executives. Please apply with your CV in the first instance.
Risk Acknowledgement and Mitigation Plan (RAMP)
process, ensuring security policy exceptions are assessed and documented. This role involves collaborating with IT and business teams, leading RAMP review
meetings, and providing risk reports to governance teams. Key Responsibilities: Create and manage RAMPs, ensuring compliance and risk mitigation. Lead weekly RAMP Review Group (RRG) meetings and maintain audit trails. Provide monthly risk reports to IT, Security, and Risk Governance teams. Act as an Information Security Champion, advising teams on security policies. Requirements: 5+ years in Risk Management (required) or Information Security (preferred). Strong knowledge of Risk Frameworks (ISO 31000, NIST 800-30, FAIR, ENISA). Understanding of Information Security frameworks (Mitre ATT&CK, NIST, ISO 27001) (Preferred). Experience in multinational companies. Ability to communicate risk concepts to C-Level executives. Please apply with your CV in the first instance.
