Current Vacancies
IT Controls Analyst
We are recruiting for an IT Controls Analyst to provide assistance in the management and maintenance of the IT security and compliance programme, including industry standard accreditations.
- Evaluate IT Controls: Assess the effectiveness of existing IT controls and recommend improvements to enhance security and compliance.
- Monitor IT Controls: Monitor IT compliance controls to ensure they are functioning as intended.
- Compliance: Ensure that IT controls comply with relevant regulatory requirements and industry standards.
- Documentation: Maintain documentation of IT compliance controls, processes and procedures.
- Audit Support: Assist with internal and external audits by providing necessary documentation and explanations of IT controls.
- Training: Provide training and guidance to the IT team on IT control requirements and best practices.
- Scheduling of IT compliance workstream: Liaise with the IT team and third party vendors to schedule compliance projects and resources.
Key Responsibilities:
- Assist with maintaining the Information Security Management System (ISMS) within the business.
- Review and maintain IT policies and other compliance documentation.
- Assist with maintaining Cyber Essentials Plus accreditation.
- Monitoring of IT audit activities.
- Complete audit reports for IT internal audits.
- Provide IT contributions to third party due diligence requests.
- Audit IT suppliers for IT security and controls.
- Assist with the coordination and planning of IT compliance activities.
- Maintain IT controls boards and issues.
- Liaise with external partners that provide compliance activities such as Cyber Essentials.
Required Skills/Experience:
- Minimum of 2 years of experience in IT controls, compliance, audit, or a related field.
- Degree in Information Technology, Computer Science, or a related field is desirable. Or equivalent experience.
- Relevant certifications such as CISA or CRISC are desirable.
- ITIL V4 Foundation certification is desirable.
- Strong communicator, both oral and written.
- Good working knowledge of Microsoft 365 platform.
- Experience completing audit reports and other IT compliance documents.
- Knowledge of regulatory standards such as GDPR, Data Protection Act, etc.
Our Benefits:
- Hybrid working – 2 days in the office and 3 days working from home
- 25 days annual leave, rising to 27 days over 2 years’ service and 30 days after 5 years’ service. Plus bank holidays!
- Discretionary annual bonus
- Pension scheme – 5% employee, 6% employer
- Flexible working – we will always consider applications for those who require less than the advertised hours
- Flexi-time
- Healthcare Cash Plan – claim cashback on a variety of everyday healthcare costs
- Electric vehicle – salary sacrifice scheme
- 100’s of exclusive retailer discounts
- Professional wellbeing, health & fitness app - Wrkit
- Enhanced parental leave, including time off for IVF appointments
- Religious bank holidays – if you don’t celebrate Christmas and Easter, you can use these annual leave days on other occasions throughout the year.
- Life Assurance - 4 times your salary
- 25% Car Insurance Discount
- 20% Travel Insurance Discount
- Cycle to Work Scheme
- Employee Referral Scheme
- Community support day
- Christmas and Summer parties
Working at SBG
At Somerset Bridge Group we aim to build a sustainable and innovative business focused on underwriting, broking and claims handling of UK motor insurance, offering transparent products and an efficient and fair service to our policy holders.
We are very proud to have been awarded a Silver Accreditation from Investors in People! We recognise that all of our people contribute to our success. That's why we are always looking for talented people to join our team - people who share our vision, who are passionate about what they do, and who want to be part of something special.
Equal Opportunity Employer
Somerset Bridge Group is committed to creating a diverse environment and is proud to be an Equal Opportunity Employer. We prohibit discrimination or harassment of any kind based on race, color, religion, national origin, sexual orientation, gender, gender identity or expression, age, pregnancy, physical or mental disability, genetic factors or other characteristics protected by law. SBG makes hiring decisions based solely on qualifications, skills and business requirements.
