Enterprise Governance Analyst

This role coordinates the governance and administration that keeps our client's security controls operating effectively. As the firm moves towards embedding efficiencies and AI tools, this role will play a key part in maintaining registers, records and procedures, administering testing and assurance processes, tracking remediation and security debt.

You'll also represent the security function on key governance forums and Working Groups

Skills/Experience:

Qualifications related to Enterprise Security are desirable

Experience maintaining control registers, procedures, evidence and audit trails

Ability to coordinate penetration testing, security exceptions, audits and remediation activity

Good understanding of cyber security, infrastructure and risk-management concepts

Experience producing management information, key risk indicators and clear progress reporting

Working knowledge of AI governance, application approval and technology change controls

Strong attention to detail with the ability to follow issues through to closure

Good supplier, stakeholder and service-management skills

Relevant technology, security or risk-management certification is desirable

Core Responsibilities:

Maintain AI application, agent and solution registers, including ownership, guardrails, approvals and periodic re-attestations

Administer AI application-approval processes and track material changes to models, features and supporting platforms

Track ongoing peer review of AI-generated code and maintain evidence required by the AI governance process

Administer penetration tests, red-team exercises and security exceptions, ensuring findings and actions are recorded and tracked

Coordinate internal and external audits and track regulatory and standards remediation to completion

Maintain security procedures and map control frameworks to relevant standards and requirements

Coordinate security-debt remediation and provide clear reporting on backlog, ownership and progress

Produce security management information and complete scheduled key-risk-indicator reporting

Triage non-incident security requests and coordinate follow-up with the Help Desk and relevant Technology teams

Coordinate access reviews and maintain the evidence required to demonstrate completion

Monitor emerging regulatory and standards developments and flag potential impacts for assessment

Coordinate supplier security meetings and track agreed actions and remediation

Publish internal threat-intelligence and security-awareness communications

Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.

To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.

At Core-Asset, we're committed to protecting and respecting your privacy. Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. We may change this policy from time to time, so please check this policy occasionally to ensure that you're happy with any changes.

By engaging with us (either by applying for a job we're advertising, registering through our website, or getting in touch with our business) you're agreeing to be bound by this policy.

Core-Asset Consulting is committed to protecting the privacy of our candidates, clients and website users. For further information, please refer to our full Privacy Statement available on our website http://www.core-asset.co.uk/about-core-asset/privacy-statement

Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland.