Senior Risk Analyst (Sheffield)

Job Description

Senior Risk Analyst – Sheffield – Full time

About us:

Fragomen is the world’s leading exclusive provider of immigration services. We are a firm of more than 6,200 immigration-focused professionals and staff spanning more than 60 offices worldwide. Immigration has been our sole focus for 70 years, and today we offer support in more than 170 countries. We are problem-solvers, innovators and established thought leaders in immigration, providing strategic immigration advice to a diverse range of clients from individuals to the world’s leading multinational corporations.

Fragomen’s professionals are respected thought leaders in the immigration field providing expertise to governments across the world including the US Congress, the UK Parliament, the European Union and the United Nations.

A career at Fragomen will provide you with the opportunity to work in an exciting environment for a broad range of clients, where no two days will be the same. You will face interesting challenges and you will work with dedicated, friendly and ambitious people, where providing exceptional client service is at the core of what we do. We are extremely proud of our diverse workforce at Fragomen and we are fully committed to providing equal opportunities.  We believe that our differences make us stronger.

About the role:

Fragomen is seeking an experienced Senior Risk Analyst to join our talented Information Security & Compliance Operations team. Fragomen strongly affirms that the demonstration of data privacy and security is critical to meet our obligations to our clients and distinguishes our business offerings in this competitive market.  We seek a professional, passionate about risk management, data privacy and security.  One who understands how to discover and evaluate risk, whilst supporting business objectives.  A candidate who is knowledgeable of the global regulatory landscape and capable of communicating the Firm’s efforts in this area.  You will be joining a small team of risk and compliance professionals, who are making data privacy and security a distinguishing factor in our technological offerings.

Responsibilities will centre around two critical risk management processes:

• The further evolution of Fragomen’s IT policy set, integrating all policies with Fragomen’s evolving cybersecurity risk management program while at the same time, first researching and then implementing best policy management practices.
• Supporting the development and refinement of the Firm’s risk management framework which support our regulatory requirements and certification programs, identifying and quantifying risk in a coherent and manageable framework, and establish trend analysis that support broader risk-based business decisions. 

What a Senior Risk Analyst Does at Fragomen:

Operationalizing Risk Management:

• Operationalize the Firm’s central risk framework used to record and manage current and emerging strategic and technical risk around our privacy and security obligations.
• Perform process and data analysis focused on data privacy and security measures around applications and processes critical to the firm’s operational success.
• Identify data privacy and security risk inherent in process and applications for mitigation and management efforts to provide data privacy and security by design and default.
• Document business requirements for system enhancements required to support current and emerging regulatory and compliance mandates. 

Maintenance of the Firm’s Policy Framework:

• Responsible for all Fragomen IT Policy development and maintenance including updates and managing the approval cycle as well as any new policy-related initiatives.

Assistance in GRC Operations:

• Acquire fundamental knowledge of all Compliance Operations areas to gain comprehensive knowledge of operations and better understand emerging risks.
• Collaborate with partner GRC oriented teams such as the Office of Audit and Privacy, the Office of General Counsel, Information Security and Compliance to establish a clear risk management framework.
• Collaborate with GRC oriented teams and legal/client relationship teams to continuously improve and demonstrate the firm’s commitment to data privacy and security.

About you:

• Strong understanding of information security and data privacy frameworks to include NIST Cyber Security Framework (CSF), NIST 800-53, ISO27X series, SOC2 and PCI a requirement.
• Demonstrated knowledge of Data Privacy and Information Security regulatory landscape and trends in third party vendor requirements.
• Knowledge of IT auditing principles
• Total of 3 to 5 years of experience in the compliance field based on work history and/or education.
• Current CRISC, CISA, CISM preferred. CIA and/or CISSP is a plus.
• Working knowledge of any industry GRC tool such as Archer, MetricStream, Riskonnect.

Fragomen in Sheffield:

Our Sheffield office is based in the city centre with the added bonus of free on-site parking, as well as several public transport links close by. The office has approximately 400 people working collaboratively and creating a dynamic, positive environment with over 20 different languages being spoken. You can expect a great working environment and regular events such as Summer and Christmas parties, social and cultural events.

The Firm operates a hybrid working model, which incorporates a blend of in-person attendance as well as working from home – our aim being to fully leverage our remote working technology and provide a balance for our people in the way that they work.

Whether in the office or working remotely, we are proud of our team spirit and we like to reflect this in the way that we work and everything we do. Our Responsible Business Practices (“RBP”) prioritises Fragomen’s social responsibility through one cross-cutting theme and five focus areas of Wellbeing, Diversity, Equity and Inclusion, CSR including Pro Bono, Social and Sustainability. The RBP initiatives offer great opportunities for everyone at Fragomen to get involved and help steer a variety of initiatives and activities.

Fragomen is committed to promoting diversity, inclusion and equal opportunity for all employees and applicants, regardless of race, ethnicity, heritage, gender, age, religion, disability, sexual orientation, gender identity or intersex status.