IT Risk and Control Analyst

About Columbia Threadneedle Investments

About Columbia Threadneedle Investments

You'll find the promise we make to our clients is the same one we make to our employees: Your success is our priority.

Here, you'll find growth and career opportunities across all our businesses. We're intentionally built to help you succeed. Our reach is expansive with a global team of 2,000 people working together. Our expertise is diverse with more than 450 investment professionals sharing global perspectives across all major asset classes and markets. Our clients have access to a broad array of investment strategies and we have the capability to create bespoke solutions matched to clients' specific requirements.

Columbia Threadneedle is a people business and we recognise that our success is due to our talented people, who bring diversity of thought, complementary skills and capabilities. We are committed to providing an inclusive workplace that supports the diversity of our employees and reflects our broader communities and client-base. We welcome applications from returners to the industry.

We appreciate that work-life balance is an important factor for many when considering their next move so please discuss any flexible working requirements directly with your recruiter.

Job Purpose Statement

The role will drive the identification and remediation of control improvements. The resource will cover tracking existing solution remediations, updating control maps, facilitating control improvement workshops to identify new opportunities to strengthen or automate controls and also carry out specific deep dive workshops when risk events are realised.

Role Responsibilities

Where you'll fit in & what our team goals are....

• Process map and evaluate processes deemed as high or medium at least annually or on material change
• Review low risk processes annually to confirm low rating; if low rating is now H/M, map & evaluate process
• Track the implementation of process or control improvements through to closure
• Review any risks identified and update RCSAs, business dashboard & KRIs
• Miscellaneous actions
• Advise and coordinate any appropriate changes to local Policies and Procedures ensuring governance on SharePoint where applicable.
• Advise and coordinate changes to local operating models where applicable.
• Enter the control improvements identified by Business Units and new items identified after the project into risk tracking tool as per usual ORM process
• SharePoint Updates - Designate a process POC & RLO on SharePoint
• Risk Acceptance Review
• Review list of risk accepted control gaps at least annually and take applicable action as needed -
• Review low-risk processes annually to ensure that the low rating is still correct - Each business should have an inventory of all their processes, which includes the risk rating of each process.
• Review low risk processes annually to confirm low rating; if low rating is now H/M, map & evaluate process
• Work with the Technology Risk team on control testing and evidence collation

Key Capabilities

How you'll spend your time....

• 6-years preferred in Business, Computer Science, Information Technology or related field including Technology Risk experience.
• Financial services experience - particularly Asset Management
• Strong understanding of controls in a technology environment
• Experience of control implementation and remediation
• Strong level of knowledge and experience in Technology Infrastructure.
• Strong planning and delivery capabilities

Desired Capabilities

If you also had this, it would be great....
Experince of deploying and montioring controls across a number of teams.
Certifications Preferred: CISA, CGEIT, CRISC Experience in public accounting, consulting or internal audit.
Strong executive presentation skills.