Risk and control Business analyst - #1704631

• Job Title: Technical Risk Analyst/ Business Analyst


• Duration: long-term contract


• Location: UK Based Hybrid (x2 days to Sheffield )


• Only Inside IR35


• 
  Visa: British/ILR/Dependent visa (No PSW/Skilled worker)


• Banking experience preferred


• 
  Rate: 450 Inside IR35

About the Role:

We are seeking a Technical Business Analyst / Analyst with a strong background in risk and controls, resilience, and production services compliance. The ideal candidate will have hands-on experience in performance and regression testing, vulnerability management, and serve as a system analyst ensuring technical solutions meet control, security, and stability requirements.

Key Responsibilities:

• Act as a liaison between business stakeholders and technical teams, translating risk and control requirements into actionable solutions.


• Ensure production systems and services are compliant with internal controls and industry regulations.


• Support the implementation and monitoring of resilience strategies across key applications.


• Lead and coordinate performance and regression testing activities for new and existing systems.


• Assist with vulnerability management by working with security teams to identify, track, and remediate risks.


• Analyse current systems and processes to identify improvements aligned with control and risk frameworks.


• Contribute to system design reviews, ensuring resilience and compliance considerations are addressed.


• Collaborate with infrastructure, application support, and DevOps teams to manage incidents and drive service stability.

Required Skills & Experience:

• Proven experience as a Technical Business Analyst or Systems Analyst in a production or enterprise technology environment.


• Solid understanding of risk and control frameworks, such as SOX, ISO, or similar.


• Experience with resilience planning, including backup, disaster recovery, and business continuity.


• Strong background in performance and regression testing – understanding of tools like JMeter, LoadRunner, etc. is a plus.


• Familiarity with vulnerability management tools and concepts (e.g., Qualys, Nessus, CVE tracking).