[EU] Junior Control Analyst

Core responsibilities

• Maintain the approved control inventory, including control descriptions, owners, frequency and evidence requirements; process additions through the agreed governance process.
• Map controls to processes, risks and applicable obligations. Identify control gaps, duplicate controls, outdated records and missing ownership for review.
• Support Risk and Control Self-Assessment (RCSA) cycles by collecting inputs, checking completeness and recording changes to risks, controls and action plans.

• Request and organise evidence from control owners across departments, maintain an accessible audit trail and follow up on overdue submissions.
• Perform sample-based second-line testing under an approved test plan, assessing control design and operating effectiveness as applicable.
• Document the test scope, sample, evidence, results and conclusion. Distinguish control failures from cases that cannot be tested because evidence is unavailable, and escalate material findings.

• Record control deficiencies and agreed actions with clear descriptions, owners, due dates and status; follow up on overdue or recurring issues.
• Review evidence of completed actions and, where required, retest before recommending closure. Escalate unresolved matters through the agreed process.

• Build and maintain dashboards that monitor key controls across departments against agreed thresholds, including control performance, overdue evidence, testing exceptions, open issues and remediation timeliness.
• Work with risk and control owners to document approved indicators, thresholds, data sources, review frequency and escalation triggers. Check that dashboard data is consistent, complete and traceable to the underlying records.
• Monitor threshold breaches and adverse trends, investigate anomalies with control owners, and escalate exceptions with clear context and action status through periodic risk reports and governance meetings.

• Keep risk, control, process, evidence and issue records current in the GRC tool; run data quality checks and prepare standard reporting extracts.
• Prepare relevant records and evidence for internal audit, external audit and regulatory reviews in coordination with the wider team.

Requirements

• Attention to the details and result oriented
• One to three years of relevant experience in operational risk, internal controls, internal audit, compliance or a regulated operating environment.
• Strong Excel skills, including the ability to consolidate and check data, use formulas and pivot tables, and build clear dashboards or management reports.
• Ability to understand process flows and risk and control relationships, apply a defined testing method, and write clear findings supported by evidence.
• Clear written and spoken English, German language nice to have