KAST
Risk & Audit Lead
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Department: Security & Platforms
Location: London
Description
We're looking for a Risk & Audit Lead to build and own an independent risk and audit function across KAST. This is an enterprise-wide remit covering risk across the whole organisation, not just technology.
What You’ll Be Doing
- Build and run an independent, enterprise-wide risk and audit function across KAST.
- Own the enterprise risk framework: identify, assess, and track risks across all business areas, not just technology.
- Define and drive risk management activities, including Risk and Control Self Assessment (RCSA) and Key Risk Indicators (KRIs).
- Drive internal audit activities enterprise-wide and across the full audit lifecycle, including management reporting and closure of audit findings.
- Provide neutral, independent validation of controls and compliance work already underway rather than duplicating it.
- Review and assess security and technology controls, systems, policies and processes, including data access, data sharing, system access workflows and other high-risk processes.
- Assess cybersecurity practices and identify potential risks and gaps; ensure appropriate penetration testing, vulnerability assessments, and remediation are in place.
- Own enterprise resilience practices such as business continuity and disaster recovery (BCP/DR) and business impact assessments.
- Conduct annual BCP and DR exercises.
- Partner with Engineering, Security, Legal, Compliance, Finance, and other teams to address identified risks and improve controls, while remaining independent of them.
- Develop and maintain risk and audit frameworks, policies, and processes across the org.
- Provide regular risk and audit updates to the leadership team.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What You'll Bring
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- 8+ years of experience in risk, audit, cybersecurity, or controls, with an enterprise-wide, not purely technical, lens.
- Strong understanding of enterprise risk management alongside information security and technology risk.
- Experience auditing across business and technology environments and identifying control gaps.
- Has led or managed organisations through compliance certification projects (ISO and others) and/or technology compliance certifications such as SOC 2 and PCI DSS.
- Good understanding of access management, data controls, secrets/API keys, and security testing.
- Strong stakeholder management skills and the ability to work with senior technical, business leaders, external auditors and regulators while holding an independent line.
- Experience in fintech or payment companies is a big plus.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location