Power Platform Risk and Controls Analyst
Share
Job Location:
Monthly Salary:
Posted on:
5 hours ago
Vacancies:
1 Vacancy
Job Summary
Job Description:
Purpose of Role
The successful candidate will play a lead role in the management of risks and controls of the MS Power Platform in NatWest
The role involves ensuring that risks are understood and that plans for remediation are circulated to the relevant stakeholders
As well as risk management the successful candidate will manage the governance and compliance of the Power Platform with the framework of the federated hub model
The role holder will have and the corresponding technical skills along with the tenacity energy and passion to innovate and implement change.
What does this role holder do (Responsibilities)
Risk Management Identify assess and mitigate risks associated with the adoption and use of the Power Platform.
Ensure the Banks risk management frameworks tailored to the Power Platforms unique capabilities and challenges and is followed
Plan and manage activities in response to Penetration Application Vulnerability Scanning (AVS) and Infrastructure Vulnerability Scanning (IVS)
Manage the response to internal and external audits of applications
Governance Ensure governance policies for the Power Platform including usage guidelines access controls and data handling protocols are enforced
Monitor best practices for app development data integration and automation on the platform
Ensure platform governance structure that includes roles responsibilities and escalation paths is followed
Control Implementation: Support the design and implement controls to secure data manage permissions and monitor platform usage.
Support the development of automated solutions to monitor and enforce compliance across the Power Platform environment.
Compliance: Ensure that the use of the Power Platform complies with relevant regulations (e.g. GDPR CCPA SOX) and organizational policies.
Maintain documentation and evidence to support audits and regulatory reviews.
Monitoring and Reporting: Develop dashboards and reports to track risk compliance and performance metrics for the Power Platform.
Communicate findings recommendations and progress to senior management and insights to continuously improve risk and control strategies.
What are the skills knowledge and experience needed to do the role
Proficiency in Power Platform administration and management.
Strong knowledge of regulatory requirements and compliance frameworks (e.g. GDPR SOX NIST).
Familiarity with IT risk management methodologies and tools.
Information Classification - Restricted
SaaS based technology experience experience with supporting cloud-based technologies and working with cloud service providers to ensure continued service throughout product life-cycle upgrades
Knowledge of Microsoft 365 and Azure services.
Strong stakeholder management excellent communication skills relationship management and resolution skills along with the technical skills to ensure the platform is operated safely
Key Skills
- ISO 27001
- Microsoft Access
- Risk Management
- Financial Services
- PCI
- Risk Analysis
- Analysis Skills
- COBIT
- NIST Standards
- SOX
- Information Security
- Data Analysis Skills
