Senior Analyst, Controls & Standards Governance
Added 12 Oct · still live
Likely
Sponsorship likelihood
This employer has issued visas recently
Not disclosed
Salary
Not disclosed by employer
£48,200
Going rate
Skilled Worker going rate
This role likely qualifies for a Skilled Worker visa
SOC 2482 (74% match) is an eligible occupation, with a going rate of £48,200, and LSEG is a licensed sponsor. That is our reading of the rules. Whether they issue a Certificate of Sponsorship is still their call.
Worth checking: this could also be SOC 3581 (Inspectors of standards and regulations), which is not on the eligible-occupation list. Ask LSEG what the duties actually are.
Your salary route
New graduate or PhD holder? Pick one of the lower rates.
What each route needs for this job
| Occupation code | New entrant 70% of going rate | STEM PhD 80% of going rate | Relevant PhD 90% of going rate | Standard rate 100% of going rate |
|---|---|---|---|---|
2482 Quality assurance and regulatory professionals Most likely code | £33,800 | £38,600 | £43,400 | £48,200 |
2135 Cyber security professionals Also possible | £34,000 | £38,800 | £43,700 | £48,500 |
3581 Inspectors of standards and regulations Also possible | £33,400 | £41,700 | £41,700 | £41,700 |
We use the lowest threshold across the plausible codes. Likelihood is Possible at most when the pay clears only a lower rate, or only under a less likely code. How the Home Office picks the code
About the role
About Lseg
LSEG is a leading global financial markets infrastructure and data provider. We enable businesses and economies around the world to fund innovation, manage risk and create jobs. Through a broad suite of trusted market infrastructure and data services, we provide the flexibility, stability and trust that enable our customers to pursue their ambitions with confidence and clarity.
OUR PEOPLE
People are at the heart of what we do. Our values of Integrity, Partnership, Excellence and Change shape how we think, how we work and how we help colleagues fulfil their potential. We embrace diverse backgrounds and perspectives, encourage collaboration and innovation, and create opportunities for people to broaden and deepen their skills through meaningful careers.
Role Summary
This is an opportunity to develop one of the foundations of LSEG's future Technology & Cyber Governance, Risk and Compliance model. The role will help build and operate the unified control library and standards capability that defines what good looks like for standard and control owners across Technology and Cyber Security.
This is not simply a standards-mapping or library-administration role. The Senior Analyst will own defined components of the control and standards lifecycle, translating regulatory obligations, recognised frameworks, audit lessons and technical requirements into clear standards requirements, control objectives, practical implementation guidance and evidence expectations. Working with Technology and Cyber specialists, the role will challenge gaps, unclear ownership and weak control language so that the framework is usable, traceable and decision-ready.
The role will also help modernise how the standards and control library is run, using data, automation and approved artificial intelligence capabilities to improve mapping, quality checks, traceability and reporting while retaining human review and accountability. It offers broad exposure to standard owners, control owners, engineers, Cyber Security specialists, auditors, regulators and risk professionals, and a strong development path into control architecture, standards leadership, technical monitoring or GRC product ownership.
What You'll Be Doing
LSEG is a leading global financial markets infrastructure and data provider. We enable businesses and economies around the world to fund innovation, manage risk and create jobs. Through a broad suite of trusted market infrastructure and data services, we provide the flexibility, stability and trust that enable our customers to pursue their ambitions with confidence and clarity.
OUR PEOPLE
People are at the heart of what we do. Our values of Integrity, Partnership, Excellence and Change shape how we think, how we work and how we help colleagues fulfil their potential. We embrace diverse backgrounds and perspectives, encourage collaboration and innovation, and create opportunities for people to broaden and deepen their skills through meaningful careers.
Role Summary
This is an opportunity to develop one of the foundations of LSEG's future Technology & Cyber Governance, Risk and Compliance model. The role will help build and operate the unified control library and standards capability that defines what good looks like for standard and control owners across Technology and Cyber Security.
This is not simply a standards-mapping or library-administration role. The Senior Analyst will own defined components of the control and standards lifecycle, translating regulatory obligations, recognised frameworks, audit lessons and technical requirements into clear standards requirements, control objectives, practical implementation guidance and evidence expectations. Working with Technology and Cyber specialists, the role will challenge gaps, unclear ownership and weak control language so that the framework is usable, traceable and decision-ready.
The role will also help modernise how the standards and control library is run, using data, automation and approved artificial intelligence capabilities to improve mapping, quality checks, traceability and reporting while retaining human review and accountability. It offers broad exposure to standard owners, control owners, engineers, Cyber Security specialists, auditors, regulators and risk professionals, and a strong development path into control architecture, standards leadership, technical monitoring or GRC product ownership.
What You'll Be Doing
Advertisement
- Maintain and improve assigned areas of the unified Technology & Cyber control library and standards, including taxonomy, objectives, descriptions, ownership, applicability, attributes and evidence expectations.
- Translate regulatory obligations, industry recognised frameworks and internal policies, into clear standards and control requirements; identify gaps, overlaps and duplication and support rationalisation and improvement roadmaps.
- Draft and refine standards and controls, implementation guidance, evidence requirements and reusable templates that help control owners understand what good control design, operation and evidence look like in practice.
- Lead the periodic and ad hoc reviews of standards and controls, present at governance forums the changes and prepare approval materials, maintain traceability of decisions and ensure approved changes are communicated to internal customers.
- Partner control owners, domain specialists, Business Information Security Officers and Technology Risk Officers to challenge control scope, ownership, build quality to track material gaps through remediation.
- Support Risk and Control Self Assessments (RCSA), audits, regulatory examinations, certifications and other external assessments by providing reliable control mappings, impact analysis, evidence expectations and remediation traceability; the role does not provide an independent assurance opinion.
- Monitor emerging Technology, Cyber, operational resilience and artificial intelligence requirements.
- Use analysis, reporting and approved automation or artificial intelligence capabilities to improve control mapping, duplicate detection, data quality, workflow efficiency and management insight, ensuring material outputs remain subject to appropriate human review.
- Build positive relationships across Technology, Cyber Security, Risk, Audit and the three lines of defence, presenting sophisticated framework and regulatory requirements clearly and constructively challenging where content or evidence is not sufficiently robust.
Advertisement
Essential
WHAT YOU'LL BRING
WHAT YOU'LL BRING
- Relevant experience in Technology or Cyber GRC, IT/Cyber Audit, or Risk Management within a complex organisation.
- A sound understanding of implementing Cyber and Technology controls including and not limited to, taxonomy and design, control objectives and description creation (5W1H), key and non-key controls, preventive and detective controls, applicability, testing and assurance, evidence requirements and the relationship between policies, standards and controls.
- Understanding of the hierarchy of policies, standards and guidelines to determine the level of detail which is suitable for each. Experience in writing, reviewing and updating Cyber Security standards and guidelines.
- Practical experience writing, reviewing or improving control or standards content and mapping requirements to internal obligations, regulatory expectations or industry recognised frameworks.
- Although this is not a technical role, you must demonstrate technical competence. Therefore, demonstrate experience of implementing and reviewing controls for Identity & Access Management, Perimeter Security, Vulnerability Management, Security Architecture, Security Operations Centre, Cloud Security, Third Party, Change Management, Backup Restoration & Recovery, Incident & Problem Management, Asset Lifecycle Management and Operational Resilience.
- Solid understanding of recognised frameworks or standards such as the NIST Cybersecurity Framework or Cyber Risk Institute Profile, COBIT, ISO/IEC 27001, SOC 2 or the Information Security Forum Standard of Good Practice.
- Strong analytical and systems-thinking skills, with the ability to identify gaps, duplication, inconsistencies and weak traceability across complex control and standards information.
- Experience in financial services, financial-market infrastructure or another highly regulated environment, including familiarity with relevant Technology, Cyber or operational resilience regulation.
Advertisement
Senior Associate
London Stock Exchange Group (LSEG) Information:
Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.
LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.
Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.
Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.
We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.
You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants
to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.
LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.
Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.
If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.
LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.
Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.
If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.
This description is the source posting as it read when we added it. We are not affiliated with LSEG, so check their own site for the current details.
Where this offer sits in the market
Quality assurance and regulatory professionals (SOC 2482) · UK · ONS ASHE 2025 · basic pay · ~137k in sampleSOC 2482
- Middle half £39,520–66,040
- Median £49,504
- Going rate £48,200
- Threshold £41,700
- New entrant £33,800–43,400
Similar sponsored roles
See all UK visa jobsNo close matches live right now.
Browse more sponsored jobs at LSEGAbout sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. LSEG holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2482 going rate of £48,200. New-entrant and shortage discounts can lower it.