risk and control analyst

EFG Holding

<div>
 
 
 Purpose
 
 
 
 Establish and develop policies and procedures of operational risk and work closely with all departments to prepare Risk &amp; Control Assessments and ensure that the Key Risk Indicators framework is followed across the firm.
 
 
 
 
 
 
 Responsibilities
 
 
 <ol>
 <li>
 Develop and maintain Key Risk Indicators (KRIs) for all main risks in cooperation with other departments. Assess needs and suggest mitigating action for such risks across the firm and develop and implement analytical tools to support these functions.
 </li>
 <li>
 Coordinate all departments&rsquo; bottom-up exercises on operational risk measurements and assessments to ensure the development of KRI&rsquo;s and regularly review the results of this exercise.
 </li>
 <li>
 Aggregate and analyse risk events reported by the business units based on Basel 2 categories.
 </li>
 <li>
 Maintain and update the group&rsquo;s risk and control registers.
 </li>
 <li>
 Assist in preparing reports for the Risk Forum, Executive Management and Board Risk &amp; Audit Committee.
 </li>
 <li>
 Report monthly on the implementation of top and emerging risks&rsquo; action plan to the Executive Management.
 </li>
 <li>
 Assist the Principal Risk Owners and Principal Risk Coordinators with the identification of key risks and mitigating controls within their business units, along with the action plans needed to address any gaps in the mitigating measures identified.
 </li>
 <li>
 Assist in developing the annual Anti-Fraud training course.
 </li>
 <li>
 Assist in developing, updating, and reviewing the of Business Continuity Planning framework, policies and procedures.
 </li>
 <li>
 Ensure compliance with all applicable AML/CTF rules and regulations as required in the conduct of the role.
 </li>
 <li>
 Ensure timely completion of all relevant AML/CTF training provided by the Group.
 </li>
 <li>
 Ensure response to AML, CTF &amp; sanctions inquiries in a timely manner.
 </li>
 </ol>
 
 
 
 
 
 Job Requirements
 
 
 <ol>
 <li>
 Bachelor&rsquo;s degree in Business Administration, Finance, Economics or other related disciplines.
 </li>
 <li>
 2&ndash;4 years of experience in identifying and assessing business process risks and controls (RCA), developing and monitoring Key Risk Indicators (KRIs), and supporting Operational Risk Management activities.
 </li>
 <li>
 Knowledge of:
 </li>
 <li>
 financial markets and the risks associated with them.
 </li>
 <li>
 international standards for internal controls and enterprise risk management frameworks.
 </li>
 <li>
 the KRI methodology and implementation as part of an integrated risk platform.
 </li>
 <li>
 Excellent command of Arabic and English.
 </li>
 <li>
 Excellent communication skills (written, verbal and listening).
 </li>
 <li>
 Able to build partnerships and work well in teams.
 </li>
 <li>
 Can identify problems and refer/escalate complex issues to a higher level.
 </li>
 <li>
 Multi-tasker, with the ability to meet changing deadlines, and to prioritize and handle multiple projects.
 </li>
 <li>
 Attention to details; ensure deliverables are always of a high quality.
 </li>
 </ol>
 
 
 
 
 
 &ldquo;Thank you for your interest in applying to EFG Holding. Due to the high volume of applications/interest, please note that we are only able to respond directly to applicants that are shortlisted for interviews.&rdquo;
 
 
</div>

Associate, Operational Risk

Capco

<div>Job Title: Ledger Control

 About Us

&ldquo;Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar &amp; Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery.
WHY JOIN CAPCO?

You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry.

MAKE AN IMPACT

Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services.

#BEYOURSELFATWORK

Capco has a tolerant, open culture that values diversity, inclusivity, and creativity.

CAREER ADVANCEMENT

With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands.

DIVERSITY &amp; INCLUSION

We believe that diversity of people and perspective gives us a competitive advantage. 

Job Description:

Ledger strategy roles explicitly require adherence to the HSBC Risk &amp; Control framework and controls (and the FRD family includes controls/assurance entries).</div><div></div>

Ledger - Controls

Arkansas Children's

<div><div>ARKANSAS CHILDREN'S IS A TOBACCO FREE WORKPLACE. FLU VACCINES ARE REQUIRED. ARKANSAS CHILDREN'S IS AN EQUAL OPPORTUNITY EMPLOYER. ALL QUALIFIED APPLICANTS WILL RECEIVE CONSIDERATION FOR EMPLOYMENT WITHOUT REGARD TO RACE, COLOR, RELIGION, SEX, SEXUAL ORIENTATION, GENDER IDENTITY OR EXPRESSION, NATIONAL ORIGIN, AGE, DISABILITY, PROTECTED VETERAN STATUS OR ANY OTHER CHARACTERISTIC PROTECTED BY FEDERAL, STATE, OR LOCAL LAWS.</div><div></div><div>
CURRENT EMPLOYEES: Please apply via the internal career site by logging into your <div>Workday Account</div> (<div>https://www.myworkday.com/archildrens/</div>)and search the &quot;Find Jobs&quot; report.</div><div></div><div>
Work Shift:</div>
Day Shift<div></div><div>
Time Type:</div>
Full time<div></div><div>
Department:</div>
CC407070 Audit Services<div></div><div>
Summary:</div>
Monday to Friday, 8:00 a.m. to 5:00 p.m. &mdash; Remote/Hybrid (Must reside in Arkansas)<div></div><div>
Additional Information:</div><div>
Responsible for independently conducting and communicating relevant, reliable, timely and independent assessments of the risk, control, and business environments by planning and conducting moderate to complex internal audits of department, functions, and operations. Works with all levels of the organization from front line staff to Senior Leadership.</div><div></div><div>
Required Education:</div>
Bachelor's Degree<div></div><div>
Recommended Education:</div>
Master's Degree<div></div><div>
Required Work Experience:</div>
Accounting - 5 years with at least 2 years of audit<div></div><div>
Recommended Work Experience:</div><div></div><div>
Required Certifications:</div>
1 of the following certifications is required - , Certified Internal Auditor (CIA) - Institute of Internal Auditors (IIA), Certified Public Accountant (CPA) - Arkansas State Board of Public Accountancy<div></div><div>
Recommended Certifications:</div>
Certified Information Systems Auditor (CISA) - Information Systems Audit and Control Association (ISACA)<div></div><div>
Description</div><div>
1. Develops and/or maintains understanding of organization and its subsidiaries organizational structure and lines of authority, an understanding of internal audit policies, procedures, and practices. 
 
2. Performs research on subject or area to be audited to identify and assess any risk associated with project area. Determines the audit scope and objectives and prepares an audit program to accomplish the objectives. 
 
3. Coordinates, communicates, and prepares meeting agendas and status reports to facilitate discussion with management about audit activities and objectives in a timely and productive manner. 
 
4. Prepares supporting documentation for audit findings to meet project commitment and standards. Provides constructive recommendations and guidance to management to strengthen internal controls and improve operating efficiencies. Prepares a draft report that presents the purpose, scope, and results of the audit project, including findings and recommendations. 
 
5. Issues a final report to management, incorporating the management responses and reasonable action plan dates for audit findings and recommendations. Measures and tracks the results of the action plan with timely follow-up. 
 
6. Provides consultant services to others within the organization when appropriate. Assists in training other audit staff. 
 
7. Practices in conformance with the Institute of Internal Auditors International Professional Practices Framework (Standards). Maintains independence in all audit work. Adheres to strict confidentiality as required by the IPPF. 
 
8. Performs other duties as assigned.</div></div><div></div>

Senior Internal Auditor

American Express

<div>At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.
As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to gain experience new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
How will you make an impact in this role?
As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers&rsquo; digital lives. Here, you can collaborate with talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems. American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source. And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development. Find your place in technology on #TeamAmex.
The objective of the Enterprise Technology Services (ETS) Control &amp; Compliance, Issues, Events &amp; Remediation team is to ensure timely identification, response, and resolution of risk events and issues to minimize impact, as well as to prevent recurrence through effective remediation and lesson learning.
ETS Control &amp; Compliance is looking for a Senior Associate Issues, Events &amp; Remediation, who will be part of the team responsible for the Enterprise Platforms &amp; Technology Business Management (EP &amp; TBM) portfolio, focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies.
The Senior Associate Issues, Events &amp; Remediation will:<ul><li>
Collaborate on investigation and conduct root cause analysis to address repeated issue types.</li><li>
Perform quality assurance on documentation of certain issues/ORE type, urgency, severity/impact (e.g., impact analysis)</li><li>
Support portions of the remediation process, these may include:</li><li>
Tracking progress</li><li>
Validating resolution efficacy and</li><li>
Communicating status updates to stakeholders</li><li>
Perform quality assurance on documentation and maintenance of records of specific issues/OREs and remediations to ensure transparency and accountability in the issue management process.</li><li>
Identify trends in issues and events to identify potential systemic risks or control weaknesses within BU processes.</li><li>
Support portions of the End-to-End (E2E) BU issue resolution process.</li><li>
Perform sample testing of specific issues to ensure resolution is complete and effective.</li><li>
Analyze data to assist in preparation of detailed reports on issue status, trends, and outcomes.</li><li>
Support sharing insights, better practices, themes, etc. across the enterprise.</li></ul>
Required Qualifications:
<ul><li>2+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function) Understanding of critical operational risk management lifecycle activities.</li><li>
Project management, communication, and interpersonal skills</li><li>
Experience in process governance, with an understanding of processes that align with policies, regulatory frameworks, and/or operational standards.</li><li>
Sound analytical and critical thinking skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively.</li></ul>
Preferred Qualifications:
<ul><li>Bachelor&rsquo;s degree in finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous.</li><li>
Experience in at least one of the following:
</li><li>Scoping, prioritizing, and support remediation of operational issues</li><li>
Experience investigating and conducting root cause analysis to address repeated operational risk issue types.</li><li>
Facilitating quality assurance on documentation of operational risk issues and events</li><li>
Recommendation of remediation process for operational risk issues and events</li><li>
Performing Quality Assurance of documentation and maintaining records of operational risk issues and events to ensure transparency and accountability</li><li>
Supporting the BU E2E issue resolution process</li></ul>

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:<ul><li>
Competitive base salaries</li><li>
Bonus incentives</li><li>
Support for financial well-being and retirement</li><li>
Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)</li><li>
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need.</li><li>
Generous paid parental leave policies (depending on your location)</li><li>
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)</li><li>
Free and confidential counseling support through our Healthy Minds program</li><li>
Career development and training opportunities</li></ul>
American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.
Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.</div>

Sr Associate - Issues, Events & Remediation Enterprise Platforms

AMER Technology, Inc.

<div>
 
 
 Job Title: Cybersecurity Risk &amp; Compliance Analyst &ndash; System Security &amp; Risk (GRC) Specialist
 
 
 
 
 Client:
 
 Texas Health and Human Services Commission (HHSC)
 
 
 
 Location:
 
 701 W 51st Street, Austin, TX 78751
 
 
 
 Work Mode:
 
 100% Onsite (Local Candidates Only)
 
 
 
 Position Overview
 
 
 
 The Texas Health and Human Services Commission (HHSC) is seeking an experienced
 
 Cybersecurity Risk &amp; Compliance Analyst &ndash; System Security &amp; Risk (GRC) Specialist
 
 to support enterprise cybersecurity governance, risk management, and compliance operations.
 
 
 This role is responsible for ensuring that HHSC information systems remain secure, compliant, and audit-ready by supporting:
 
 <ul>
 <li>
 System Security Plan (SSP) development
 </li>
 <li>
 Security Assessments (SA)
 </li>
 <li>
 Risk Assessments (RA)
 </li>
 <li>
 Authorization to Operate (ATO) support
 </li>
 <li>
 Continuous monitoring initiatives
 </li>
 </ul>
 
 The analyst will collaborate closely with:
 
 <ul>
 <li>
 Information Owners (IO)
 </li>
 <li>
 Information Custodians (IC)
 </li>
 <li>
 Technical &amp; Application Teams
 </li>
 <li>
 HHSC CISO Office
 </li>
 </ul>
 
 All activities must align with:
 
 <ul>
 <li>
 
 NIST SP 800-53
 
 </li>
 <li>
 
 NIST Risk Management Framework (RMF)
 
 </li>
 <li>
 
 DIR Security Control Standards
 
 </li>
 <li>
 HHSC cybersecurity policies
 </li>
 </ul>
 
 RSA Archer serves as the system of record for all GRC activities.
 
 
 
 Key Responsibilities
 
 
 
 
 System Security Planning (SSP)
 
 
 <ul>
 <li>
 Develop, maintain, and update System Security Plans for HHSC systems and applications.
 </li>
 <li>
 Gather and validate control implementation evidence.
 </li>
 <li>
 Ensure documentation aligns with NIST, DIR, and HHSC CISO standards.
 </li>
 <li>
 Support lifecycle updates of SSPs for compliance and audit readiness.
 </li>
 </ul>
 
 
</div>

Cybersecurity Risk & Compliance Analyst

Stellar Hunters

<div>We are seeking a detail-oriented and strategically minded Information Security Compliance Analyst to join our security and risk team. The ideal candidate will support the development, implementation, and maintenance of information security compliance programs, frameworks, and controls; ensure alignment with applicable regulatory and contractual requirements; and collaborate with IT, engineering, legal, and business stakeholders to reduce risk and demonstrate compliance. This role requires hands-on compliance experience, strong knowledge of security frameworks and standards, excellent documentation skills, and the ability to communicate technical requirements to non-technical audiences.<h3 class="jobSectionHeader">
Key Responsibilities for Information Security Compliance Analyst</h3><ul><li>
Implement, maintain, and monitor information security compliance programs and control frameworks (e.g., ISO 27001, NIST CSF, SOC 2, PCI-DSS, HIPAA) to ensure ongoing alignment with regulatory, contractual, and business requirements.</li><li>
Manage and execute internal compliance assessments, risk assessments, and control testing; document findings, track remediation activities, and verify corrective actions.</li><li>
Support third-party security assessments and vendor risk management processes, including intake questionnaires, evidence collection, review of results, and coordination of mitigation plans with vendors and internal stakeholders.</li><li>
Coordinate and support external audits and certification efforts (e.g., SOC 2 audits, ISO certifications, regulatory reviews), serving as a primary point of contact for auditors and external assessors.</li><li>
Develop, maintain, and update security policies, standards, procedures, and control matrices; ensure documentation is current, accessible, and mapped to applicable frameworks and requirements.</li><li>
Collect, analyze, and report compliance metrics and status to security leadership and cross-functional partners; prepare evidence packages and executive-ready reports demonstrating control effectiveness and remediation progress.</li><li>
Collaborate with Information Security, IT operations, engineering, legal, and business teams to interpret compliance requirements, integrate controls into processes and systems, and advise on remediation or compensating controls.</li><li>
Stay informed of changes in privacy, security, and regulatory landscapes; evaluate impacts to the organization and recommend required updates to policies, controls, or compliance programs.</li><li>
Provide training and awareness sessions for employees on security compliance topics, control responsibilities, and evidence collection best practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Risk Management, or related field, or equivalent experience.</li><li>
3+ years of experience in information security compliance, audit, risk management, or related roles within technology-driven or regulated organizations.</li><li>
Practical knowledge of common security frameworks and standards (e.g., SOC 2, ISO 27001, NIST CSF, PCI-DSS) and experience mapping controls to requirements.</li><li>
Experience performing control testing, risk assessments, vendor security reviews, and preparing evidence for audits or certifications.</li><li>
Strong written and verbal communication skills; ability to produce clear policy and procedure documentation and present compliance status to technical and non-technical stakeholders.</li><li>
Familiarity with security and compliance tooling (e.g., GRC platforms, SIEM, vulnerability management, ticketing/ITSM systems) and proficient with Excel or similar data analysis tools.</li><li>
Excellent organizational skills and attention to detail, with the ability to manage multiple priorities, deadlines, and cross-functional projects.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications - Certifications &amp; Tools</h4><ul><li>
Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer/Auditor, CRISC, or similar are preferred.</li><li>
Experience supporting SOC 2 or ISO 27001 audits, or leading vendor risk and third-party assessment programs.</li><li>
Familiarity with cloud security controls and compliance in AWS, Azure, or GCP, and experience working with DevOps/engineering teams to embed controls into CI/CD pipelines.</li><li>
Prior experience with GRC platforms (e.g., RSA Archer, ServiceNow GRC, OneTrust, Drata) or automation of compliance evidence collection is a plus.</li></ul><h5 class="jobSectionHeader">
Work Environment &amp; Compensation</h5><ul><li>
Full-time position with an onsite work model.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, continuing education support, and assistance with certification costs.</li><li>
Collaborative and inclusive team culture committed to diversity, equity, and professional growth.</li></ul></div>

Information Security Compliance Analyst

HSBC

<div>Some careers have more impact than others.
If you&rsquo;re looking for a career where you can make a real impression, join HSBC and discover how valued you&rsquo;ll be.
HSBC is one of the largest banking and financial services organizations in the world, with operations in 62 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions.
We are currently seeking an experienced professional to join our team in the role of Analyst &ndash; Credit Risk
In this role, you will:
Impact on Business<ul><li>
Identifying the breaks between various front end trading systems and the risk portal systems working towards the remediation.</li><li>
Investigating and reporting credit risk arising from trading activities against approved limits and against the utilizations shown in risk systems.</li><li>
Reporting and analyzing the cause of variation and addressing the issues to correct the same.</li></ul>
Customers / Stakeholders<ul><li>
Provide regular information to Traded Credit Risk Control managers on the performance of the team in terms of capacity and quality of output. Collaborate and partner with relevant stakeholders to ensure end to end process is connected and streamlined.</li></ul><ul><li>
Put in place the improvement plans for repeated errors and work in close coordination with the analyst to ensure that the plan is implemented effectively</li><li>
Escalation of errors and client feedback to relevant stakeholders as per process.</li></ul>
To be successful you will:<ul><li>
A degree / qualification in Finance, Economics, Commerce or equivalent or previous experience in Risk management (Credit Risk)</li><li>
Knowledge of Credit Risk, Treasury products, operations, systems, related regulations, group risk systems, primary trading systems and static data systems desirable</li><li>
Knowledge Financial Services sector, terminology and issues an advantage. Programming in VBA, Excel and SQL would be an advantage</li><li>
Previous experience in a Traded Credit Risk Control management environment is highly desirable.</li><li>
Experience in documenting processes, developing KPIs and troubleshooting</li></ul>
You&rsquo;ll achieve more at HSBC
Hsbc.Com/Careers
HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.&rdquo;
Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.
***Issued By HSBC Electronic Data Processing (India) Private LTD***</div>

Analyst - Credit Risk

Search 10000+ Risk and control analyst jobs near you this March. New roles added regularly across leading industries. Apply today.