At a Glance
- Tasks: Lead the risk and audit function, ensuring enterprise-wide compliance and security.
- Company: Join a forward-thinking company focused on security and innovation.
- Benefits: Competitive salary, flexible working hours, and opportunities for professional growth.
- Other info: Dynamic role with a chance to work in fintech and payment sectors.
- Why this job: Make a real impact by shaping risk management across the entire organisation.
- Qualifications: 8+ years in risk, audit, or cybersecurity with strong stakeholder management skills.
The predicted salary is between 59400 - 72600 £ per year.
Risk & Audit Lead
Department
Security & Platforms
Employment Type
Full Time
Location
- London
- Description
We're looking for a Risk & Audit Lead to build and own an independent risk and audit function across KAST.
This is an enterprise-wide remit covering risk across the whole organisation, not just technology.
- What You'll Be Doing
- Build and run an independent, enterprise-wide risk and audit function across KAST.
- Own the enterprise risk framework: identify, assess, and track risks across all business areas, not just technology.
- Define and drive risk management activities, including Risk and Control Self Assessment (RCSA) and Key Risk Indicators (KRIs).
- Drive internal audit activities enterprise-wide and across the full audit lifecycle, including management reporting and closure of audit findings.
- Provide neutral, independent validation of controls and compliance work already underway rather than duplicating it.
- Review and assess security and technology controls, systems, policies and processes, including data access, data sharing, system access workflows and other high-risk processes.
- Assess cybersecurity practices and identify potential risks and gaps; ensure appropriate penetration testing, vulnerability assessments, and remediation are in place.
- Own enterprise resilience practices such as business continuity and disaster recovery (BCP/DR) and business impact assessments.
- Conduct annual BCP and DR exercises
- Partner with Engineering, Security, Legal, Compliance, Finance, and other teams to address identified risks and improve controls, while remaining independent of them.
- Develop and maintain risk and audit frameworks, policies, and processes across the org.
- Provide regular risk and audit updates to the leadership team.
- What You'll Bring
- 8+ years of experience in risk, audit, cybersecurity, or controls, with an enterprise-wide, not purely technical, lens.
- Strong understanding of enterprise risk management alongside information security and technology risk.
- Experience auditing across business and technology environments and identifying control gaps.
- Has led or managed organisations through compliance certification projects (ISO and others) and/or technology compliance certifications such as SOC 2 and PCI DSS.
- Good understanding of access management, data controls, secrets/API keys, and security testing.
- Strong stakeholder management skills and the ability to work with senior technical, business leaders, external auditors and regulators while holding an independent line.
- Experience in fintech or payment companies is a big plus.
- #J-18808-Ljbffr
Risk & Audit Lead employer: kast.xyz
KAST is an exceptional employer that fosters a culture of independence and collaboration, making it an ideal place for a Risk & Audit Lead to thrive. Located in the vibrant city of London, employees benefit from a dynamic work environment that encourages professional growth through diverse risk management activities and cross-departmental partnerships. With a strong focus on employee development and a commitment to maintaining high standards of compliance and security, KAST offers a rewarding career path for those looking to make a meaningful impact.
StudySmarter Expert Advice🤫
We think this is how you could land Risk & Audit Lead
✨Join Compliance Communities
Get involved in compliance and risk communities — both online and offline. Look for forums, LinkedIn groups, or even local meetups where compliance pros hang out. You never know who might drop a job opportunity your way!
✨Attend Industry Conferences
Keep an eye out for compliance and risk management conferences and workshops in your area. These events are a goldmine for networking, and they often have job boards or recruiters on-site looking for new talent. Plus, it’s a chance to learn what's trending in the field.
✨Leverage Your University Career Services
If you’ve recently graduated or are still studying, head over to your university's career services. Many companies, including those in compliance, actively recruit fresh talent through these services, so make sure you tap into that resource.
✨Showcase Your Knowledge Online
Start writing articles or blog posts about compliance topics that interest you. Share them on platforms like LinkedIn to demonstrate your knowledge and passion. This not only builds your presence in the field but can also catch the attention of companies like kast.xyz looking for candidates who are engaged and informed.
We think you need these skills to ace Risk & Audit Lead
Some tips for your application 🫡
Show Your Understanding of Compliance:In the compliance-risk field, it's super important to showcase your understanding of regulations and risk management frameworks. Highlight any relevant coursework, certifications (like ICA or AML), or even projects that demonstrate your knowledge and commitment to this area. We want to see how you can navigate this complex landscape!
Quantify Your Achievements:When detailing your experience, try to quantify your achievements. For example, if you've previously worked on a project that improved compliance metrics or reduced risk exposure, give us the numbers! This data-driven approach really stands out to hiring managers in compliance-risk roles.
Tailor Your CV to Reflect Relevant Skills:Make sure your CV highlights skills that are particularly relevant to compliance, like attention to detail, analytical thinking, and report writing. Ensure these are easy to spot – consider using bullet points to break down your responsibilities and achievements for maximum impact!
Craft a Motivating Cover Letter:In your cover letter, let us know why you’re excited about the compliance-risk role at kast.xyz. Share what motivates you about compliance, and how you believe you can contribute to our mission. This is your chance to showcase not only your skills but also your passion for this important field!
How to prepare for a job interview at kast.xyz
✨Master the Regulations
Brush up on key compliance regulations relevant to the industry you're applying to. Familiarising yourself with specific laws and frameworks used in your field will give you an edge during technical questions. Show that you’re not just aware of them but can also apply them—think real-life scenarios!
✨Show Your Analytical Skills
Compliance roles really focus on analytical skills, so be prepared for case studies or situational questions during the interview. We've got to demonstrate how we approach risk assessments or compliance audits, possibly drawing on examples from past experiences or university projects. Bring some thoughtful case scenarios to discuss!
✨Know Your Tools
Get comfortable with commonly used compliance software and tools. Familiarity with platforms like RSA or MetricStream can really impress during your interview, as it shows you're ready to hit the ground running. If you’ve had any experience with them, make sure to highlight that!
✨Align with Company Culture
Since it's a full-time position, show your long-term commitment and interest in the company’s mission and values. Dive into how your ethics and professional philosophy align with kast.xyz’s stance on compliance. A shared vision can really resonate with interviewers looking for fit as much as skill!
