Controls Analyst (1LOD Risk Management)

Key ResponsibilitiesControls Inventory Management

• Support the day-to-day maintenance of the central controls inventory and associated control records.
• Ensure controls are recorded accurately and consistently in MetricStream or relevant GRC tooling, including control description, ownership, frequency, evidence requirements, status and linkage to risks or processes.
• Support control classification, documentation and review activities, helping to ensure controls are clearly articulated and aligned to agreed standards.
• Perform routine data quality checks across control records, identifying missing fields, inconsistent information, outdated records, unclear ownership or incomplete evidence requirements.
• Escalate control data issues, inconsistencies or gaps to senior colleagues in a timely and structured way.
• Support periodic reviews of the control inventory to help ensure records remain current, complete and fit for purpose.
• Help maintain audit-ready documentation and evidence to support controls governance, assurance activity and internal review**.Controls Rationalisation and Uplift Support**
• Support analysis of existing control populations to identify duplicates, obsolete controls, non-control activities, gaps or inconsistencies.
• Assist with control rationalisation activity by maintaining trackers, collating inputs, recording decisions and tracking progress against agreed uplift actions.
• Support the collection and organisation of control evidence, documentation and business feedback required for control review or redesign activity.
• Track progress of control remediation, redesign and uplift activities, including ownership, due dates, milestones and completion status.
• Help ensure retained controls are consistently documented, clearly owned and aligned to agreed control standards.
• Support comparison of controls across business areas to identify variation, overlap or potential opportunities for standardisation.
• Contribute to the ongoing improvement of control quality, inventory hygiene and lifecycle discipline**.RCSA Administration and Coordination**
• Coordinate RCSA schedules, assessment timelines, workshop logistics and stakeholder follow-ups.
• Support planning and preparation for RCSA workshops, including meeting materials, pre-read packs, trackers and assessment templates.
• Track completion of risk and control assessments, approvals, actions and remediation plans.
• Follow up with RCSA participants, Control Owners and Risk & Control colleagues on outstanding assessments, approvals or supporting information.
• Maintain RCSA documentation and records, ensuring assessments are clearly evidenced, version controlled and stored in line with agreed procedures.
• Support quality checks on RCSA submissions, including completeness of risk descriptions, control linkages, action plans and assessment rationale.
• Help ensure RCSA outputs are captured accurately and are available for reporting, governance and follow-up activity**.Reporting, Analytics and Management Information**
• Produce regular controls and RCSA reporting, including status updates, control inventory metrics, data quality indicators, RCSA completion tracking and remediation progress.
• Maintain dashboards, scorecards, trackers and management information used by governance forums and senior stakeholders.
• Support monitoring of controls framework performance metrics, including inventory completeness, review status, overdue actions and assessment progress.
• Analyse trends relating to controls, issues, incidents, audits and RCSA outcomes to help identify emerging themes or areas requiring attention.
• Prepare data packs and reporting inputs for governance forums, risk committees, working groups and management updates.
• Ensure reporting outputs are accurate, reconciled, timely and clearly presented.
• Support improvement of reporting definitions, data sources and MI production processes to increase consistency and reliability**.Governance and Stakeholder Support**
• Support preparation of governance meeting materials, including agendas, packs, dashboards, action logs and supporting data.
• Maintain clear action logs, decision records and follow-up trackers arising from controls and RCSA governance forums.
• Assist with committee reporting and meeting administration, ensuring materials are prepared in line with agreed timelines.
• Monitor delivery of remediation activities and agreed actions, escalating overdue or unclear items to senior colleagues.
• Liaise with Control Owners, process owners, RCSA participants and Risk & Control colleagues to gather updates, clarify information and resolve data queries.
• Support framework documentation updates, including procedures, templates, guidance notes and operating documents.
• Help ensure governance materials are clear, complete, accurate and suitable for internal review, audit or second-line challenge.

Continuous Improvement and Risk Culture

• Identify data quality and process improvement opportunities across the controls inventory, RCSA process and reporting routines.
• Support implementation of system enhancements, workflow improvements and automation opportunities within MetricStream or related tooling.
• Contribute to improvements in reporting, tracking, governance packs and data management processes.
• Support periodic reviews of controls governance processes, helping to identify areas where standards, templates or routines can be simplified or strengthened.
• Promote good controls discipline through attention to detail, timely follow-up, accurate record keeping and proactive escalation.
• Support stronger linkage between controls, risks, processes, incidents, issues, audit findings and RCSA outcomes.
• Contribute to a strong first-line risk culture by supporting transparency, accountability, evidence-based assessment and consistent control documentation.

Knowledge, Skills & ExperienceEssential