Risk and control Business analyst (Greater Sheffield Area)

• Job Title: Technical Risk Analyst/ Business Analyst
• Duration: long-term contract
• Location: UK Based Hybrid (x2 days to Sheffield )
• Only Inside IR35
• Visa: British/ILR/Dependent visa (No PSW/Skilled worker)
• Banking experience preferred
• Rate: 450 Inside IR35

About the Role:

We are seeking a Technical Business Analyst / Analyst with a strong background in risk and controls, resilience, and production services compliance. The ideal candidate will have hands-on experience in performance and regression testing, vulnerability management, and serve as a system analyst ensuring technical solutions meet control, security, and stability requirements.

Key Responsibilities:

• Act as a liaison between business stakeholders and technical teams, translating risk and control requirements into actionable solutions.
• Ensure production systems and services are compliant with internal controls and industry regulations.
• Support the implementation and monitoring of resilience strategies across key applications.
• Lead and coordinate performance and regression testing activities for new and existing systems.
• Assist with vulnerability management by working with security teams to identify, track, and remediate risks.
• Analyse current systems and processes to identify improvements aligned with control and risk frameworks.
• Contribute to system design reviews, ensuring resilience and compliance considerations are addressed.
• Collaborate with infrastructure, application support, and DevOps teams to manage incidents and drive service stability.

Required Skills & Experience:

• Proven experience as a Technical Business Analyst or Systems Analyst in a production or enterprise technology environment.
• Solid understanding of risk and control frameworks, such as SOX, ISO, or similar.
• Experience with resilience planning, including backup, disaster recovery, and business continuity.
• Strong background in performance and regression testing – understanding of tools like JMeter, LoadRunner, etc. is a plus.
• Familiarity with vulnerability management tools and concepts (e.g., Qualys, Nessus, CVE tracking).