Skip to main content

Business Information Risk Analyst

Ideas | People | Trust

We’re BDO. An accountancy and business advisory firm, providing the advice and solutions entrepreneurial organisations need to navigate today’s changing world.

We work with the companies that are Britain’s economic engine – ambitious, entrepreneurially-spirited and high‑growth businesses that fuel the economy - and directly advise the owners and management teams that lead them.

We’ll broaden your horizons

The Quality and Risk Management Team (QRMT) at BDO comprises several sub-teams including the Legal Team, Enterprise Risk Management, Economic Crime, Quality Management, Ethics and Independence and Advisory and Compliance.  It provides Partners and staff with the guidance, tools and support to enable them to identify and manage quality and risk issues.  The QRMT is led by the Head of Quality and Risk Management Team, who is a partner who reports into the Head of Quality and Risk for the firm and sits on the BDO Leadership Team.

We’ll help you succeed

Leading organisations trust us because of the quality of our advice. That quality grows from a thorough understanding of their business, and that understanding comes from working closely with them and building long-lasting relationships.

You’ll be someone who is both comfortable working proactively and managing your own tasks, as well as confident collaborating with others and communicating regularly with senior managers, directors, and BDO’s partners to help businesses effectively. You’ll be encouraged to identify and draw attention to opportunities for enhancing our delivery and providing additional services to organisations we work with.

Role Purpose

TheBusiness Information Risk Analyst’s (BIRA) roleis responsible forsupporting the Chief Information Security Office (CISO) service to BDO’s business streams to effectively manage information security risk. This role will play a key part in ensuring the effectiveness of BDO’s information security risk management framework, procedures, and information security controls.

The BIRA role is a focal point for effective engagement between business streams and the CISO team. This role will be a trusted adviser to business stakeholders and provide broad knowledge of the firm’s security strategies, policies, standards, processes, and road maps to enable streams to understand and meet information security requirements.

The BIRA will take responsibility for assessing information security risk with the business and ensure that those risks are being managed by the risk owners. Where decisions are made to accept, reduce,shareor avoid, the BIRA will ensureappropriate visibilityand governance committees are informed.

This role reports to a Business Information Risk Officer (BIRO).

In this busy and rewarding role yourprincipal accountabilitieswill be:

  • Utilising BDO’s information security risk management tools,proceduresand control framework to ensurean accuraterisk & control posture is understood and managed for each business stream.
  • Maintain the Risk Register andmonitorit to ensure that actions areappropriateforthe risk andcompleted by the agreed target dates by engaging regularly with stakeholders.
  • Support the business streams toidentify, andmaintainregisters of information assets including infrastructure, systems, software,devicesand data.
  • Build andmaintaineffective relationships with the risk owners, riskmanagersand other stream stakeholders.
  • Develop collateral andappropriate materialsto support engagement with business stakeholders, to explain key information security concepts and build awareness of information security risk and BDO’s control framework.
  • Proactivelyidentifyand support risk owners and managers to manage and regularly review IS risks and issues for streams.
  • Support the business to assess criticality of assets and services.
  • Ensure that BDO policy and contractual obligations, and in turn compliance, is understood for each business stream.
  • Identifyand communicate metrics and reporting requirements to stakeholders thatdemonstratesecurity controls are effective.
  • Support creation of corrective actions andplans to manage improvement or change where necessary.
  • Creation and maintenance of a “security toolkit” with templates of key processes and controls, communicated in language that is relevant and understandable to all audiences.
  • Providetargeted security awareness, education, and risk briefings.
  • Support the delivery of supplier security and client security due diligence activities.
  • Assistwith maintenance of the knowledge base of common information security questions and responses to ensure responses to the business aretimelyandaccurate.
  • Manage workload viaAzureDevOps(ADO) ensuring that tasksallocatedto you are completed withing agreedtimeframesand progress/completion is reported to the owners of the outcomes.
  • Proactivelyidentifyand escalate any factors that mayimpactthe time, cost, or quality ofallocatedoutcome before the impact is experienced by ensuring communication is clear and effective at all stages of the deliverable to the outcome owners.

You’llbe someone with:

Knowledge & experience

  • knowledge and experience of information security risk management frameworks and procedures
  • Experience ofapplyingformal risk identification, assessment, and quantification methods
  • Experienceof stakeholder engagement and management to achieve defined outcomes
  • Highly self-motivated with keen attention to detail
  • The ability to build good relationships at all levels and influence stakeholders
  • Excellent verbal, written and interpersonal communication skills. Listens and communicates technical subjects to both technical and nontechnical audiences, flexes style to suit the needs of the audience
  • Ability to work with others effectively, with 3rd parties, internal teams, promoting knowledge sharing within and across teams
  • A good understanding of security frameworks including ISO27001/2, Cyber Essentials Plus, CIS Top 20, Data Protection Act 2018, OWASP Top 10
  • Have or be working towards relevant industry certification such as CISSP, CISM, CRISC or similar
  • Good understanding of governance and decision making in complex organisations
  • Knowledge and experience of continuous improvement processes and approaches
  • Experience of documenting,developingand improving information security processes and procedures

Personal characteristics

  • Strong teamplayer able to collaborate effectively with colleagues and management whileexhibitinginitiative and independence
  • Good analytical skills with a proactive approach to problem solving
  • Good presentational & information sharing skills
  • Demonstrated ability to prioritise and manage competing work assignments in a time sensitive environment on own initiative and in consultation with people management
  • Keen to learn and develop existing information security skills and take ownership of own learning and development with support from the wider team and the firm

You’ll be able to be yourself; we’ll recognise and value you for who you are and celebrate and reward your contributions to our business. We’re committed to agile working, and we offer everyone the opportunity to work in ways that suit them, their teams, and the task at hand.

At BDO, we’ll help you achieve your personal goals and career ambitions, and we have programmes, resources, and frameworks that provide clarity and structure around career development.

We’re in it together

Mutual support and respect is one of BDO’s core values and we’re proud of our distinctive, people-centred culture.  From informal success conversations to formal mentoring and coaching, we’ll support you at every stage in your career, whatever your personal and professional needs. Our agile working framework helps us stay connected, bringing teams together where and when it counts so they can share ideas and help one another.  At BDO, you’ll always have access to the people and resources you need to do your best work.

We know that collaboration is the key to creating value and satisfying experiences at work, so we’ve invested in state-of-the-art collaboration spaces in our offices.  BDO’s people represent a wealth of knowledge and expertise, and we’ll encourage you to build your network, work alongside others, and share your skills and experiences.  With a range of multidisciplinary events and dedicated resources, you’ll never stop learning at BDO.

We’re looking forward to the future

At BDO, we help entrepreneurial businesses to succeed, fuelling the UK economy. Our success is powered by our people, which is why we’re always finding new ways to invest in you. Across the UK thousands of unique minds continue to come together to help companies we work with to achieve their ambitions.

We’ve got a clear purpose, and we’re confident in our future, because we’re adapting and evolving to build on our strengths, ensuring we continue to find the right combination of global reach, integrity and expertise. We shape the future together with openness and clarity, because we believe in empowering people to think creatively about how we can do things better.

#LI-SS3

Apply now

Sign Up to Job Alerts

If you can’t find the role you are looking for, please sign up and we'll notify you when opportunities become available.

Interested In