Risk & Assurance Assistant - Audit & Assurance Services

Company Overview

Brodies LLP is a prominent UK law firm headquartered in Scotland, that provides expert advice to UK and international clients.

We have the capability and expertise to deliver mandates with global reach, uniting specialist perspectives from across our firm to offer bespoke legal solutions and advice, resulting in impactful outcomes for our clients.

With offices in London, Leeds, and throughout Scotland, we are dedicated to driving innovation in the legal sector, leveraging new technologies and forward-thinking strategies to deliver exceptional value and efficiency for our clients.

Our contract with our people underlines our commitment to fostering a supportive and inclusive work environment, prioritising the wellbeing and development of our colleagues to ensure they thrive both personally and professionally.

We are also deeply committed to making a positive impact in the communities in which we live and work. Through our pro bono work, charitable activities, and initiatives that promote diversity and inclusion, we strive to contribute meaningfully to society.

Job Title

Risk & Assurance Assistant - Audit & Assurance Services

Reporting To

Senior Manager - Audit & Assurance Services

Based in either Edinburgh or Glasgow with travel to any of our offices required from time to time.

We allow hybrid working with agreement with line managers, but most of your time will be office based and depending on business needs.

Job Purpose

As part of the Audit and Assurance Services team you will provide key support across a range of risk and assurance activities, including management of the firm’s risk registers and control reviews, incident and breach management, business continuity and resilience, mandatory training and awareness, policy management and wider business assurance and governance activities. The role will suit a highly organised, analytical individual who enjoys reviewing and interpreting information, identifying improvements to controls and processes, and driving continuous improvement across the firm

Core Tasks

• Support the Audit & Assurance Services team in the delivery of risk and assurance activities across the firm
• Support the maintenance and periodic review of the firm’s risk registers, including helping to gather and update risk and control information from stakeholders
• Support the day-to-day review, triage and logging of data incidents and breaches reported across the firm, escalating as appropriate and maintaining accurate records of outcomes
• Support the firm’s business continuity and resilience arrangements, including maintaining plans, supporting testing and exercises, and tracking and following up actions arising from this work
• Track and follow up actions arising from internal audit, risk and resilience reviews, liaising with action owners to confirm timely and effective remediation
• Analyse data and trends relating to incidents, breaches, risks and controls, and prepare reporting and management information for risk management review
• Support the administration of the firm’s mandatory training and awareness programme, including monitoring completion rates and following up with colleagues and teams as required
• Support policy management activities, including tracking and ensuring annual reviews are completed by relevant document owners, and managing version control and publication of policies and procedures to the firm’s intranet
• Liaise with stakeholders across the firm on risk, incident, resilience and business assurance matters, supporting firm-wide communications and awareness content
• Support the preparation, review and co-ordination of responses to third-party and client due diligence questionnaires
• Support standard ad hoc activities to support the Audit & Assurance Services strategy, under the direction of the Senior Manager Audit & Assurance Services
• Support wider business assurance and governance activities, including maintaining documentation, processes and records associated with the firm’s Business Assurance framework
• Willingness to suggest improvements to business operations, processes and controls where appropriate

Be aware of Brodies' information security policies, and protect information assets from unauthorised access, disclosure, modification, destruction or interference at all times

Person Specification

• Some relevant experience gained in a risk, compliance, audit, assurance, incident management or governance-related role
• Understanding of, or a genuine interest in developing expertise in, risk management, incident and breach handling, business continuity or resilience frameworks
• Knowledge of or willingness to develop expertise in relevant standards and frameworks (e.g. ISO 22301, ISO 27001, ISO 9001) is desirable
• Experience of continuous improvement methodologies is desirable
• This position can be demanding at times, so the successful candidate should be comfortable working under pressure and to deadlines, with appropriate guidance and support
• Logical and objective approach to problem solving, with excellent communication skills and confident in dealing with people at all levels
• High level of accuracy and attention to detail, particularly when maintaining records, documentation and reporting
• A strong team player who collaborates effectively with colleagues and contributes positively towards shared team goals.
• Organises and prioritises time effectively
• Uses initiative and able to work independently
• Self-motivated

Skills

• Excellent organisational skills and attention to detail.
• Strong analytical skills, with the ability to assess information, processes and controls and identify risks and improvements
• Proficient in the use of Microsoft applications:
• Comfortable using, or willing to learn, AI-enabled tools (e.g. Microsoft Copilot) to support risk, assurance and governance work
• Willingness to enhance IT literacy and general awareness and understanding of role specific requirements through training