Senior Enterprise Risk Analyst

We are Creditspring

A new way of borrowing that focuses on its members and provides them with safe and efficient short-term financial products.

We're a fast-growing FCA-regulated consumer credit company. We have members, not customers and we take a lot of pride in that!

As one of the UK’s only subscription finance company in the market, we truly have a unique value proposition. Our mission is very clear; to improve the financial stability and resilience of our members. We do this through the products we provide, the partnerships we have, and our educational content. We want our members, and everyone in the UK to be able to better manage their finances and steer them away from high-cost, unregulated credit options.

About the role

To support day-to-day operation and continuous improvement of the Enterprise Risk Management Framework, acting as the lead administrator of the Protecht GRC system, which is used to capture, detail and manage risks across the business.

Responsibilities

• Act as the primary day-to-day point of contact for risk owners, supporting them through the RCSA cycle — scheduling, preparing materials, facilitating workshops and helping owners articulate risks, controls and actions clearly.
• Manage and support risk owner follow-up processes: update outstanding actions, controls testing and RCSA updates, escalating overdue or high-risk items appropriately.
• Monitor system-generated alerts from Protecht and work directly with risk owners to investigate, triage and resolve them in a timely manner.
• Act as lead user of the Protecht platform and its data: manage user permissions, workflows, risk and control libraries, taxonomies, and reporting/dashboard configuration.
• Be the organisation's go-to system expert for Protecht, providing training, troubleshooting and ongoing user support to risk, control and action owners across the business.
• Own system data quality — ensure risks, controls, actions and incidents are captured, updated and reviewed in line with agreed cycles.
• Horizon scan across the business to identify areas where Protecht is underused or used incorrectly, and take action to improve adoption and correct usage.
• Manage system enhancements, upgrades and releases, liaising with Protecht and internal stakeholders (e.g. IT) as needed.
• Build and maintain reports, dashboards and extracts from Protecht to support risk reporting and committee papers.
• Work with 2nd and 3rd line QA functions (Operational Risk, Credit Risk, Compliance) to support alignment with risk appetite, and to identify changes to current risks or new risks arising from their activities, escalating as appropriate.
• Document minutes of the Technology and Resilience Risk Committee meetings and collate the monthly risk pack in preparation for the meeting.
• Support the production of Key Risk Indicator (KRI) reporting and the quarterly risk pack for senior management and the Board.
• Support the maintenance of risk management policies, procedures and the Risk Management Framework documentation.
• Support incident management activity, including data quality in Protecht and thematic analysis for reporting.
• Support the business's response to internal/external audit and regulatory queries relating to risk management, and track remedial actions to completion.
• Support risk culture initiatives and training to raise risk awareness and engagement across the business.
• Undertake ad hoc tasks and projects as agreed with the Senior Operational Risk Manager