Control Risks

Consultant

• Develop and co-conduct Crisis Management exercises and simulations for clients.
• Conduct security assessments, construct recommendations based on findings, and manage implementation of those recommended controls.
• Design client-specific Resilience, Enterprise Risk Management, Crisis Management, Business Continuity, and/or Security Management concepts or plans, based on best practices and client specifications.
• Communicate directly with clients from start to finish of project, including scoping, delivery, and reporting.
• Assess client’s current state (of crisis management preparation, threat profile, etc) and define recommendations for improvement. May be done through conducting interviews, site security reviews, physical penetration testing etc.
• Support or facilitate workshops, prepare business proposals and presentations that show the benefit of our recommendations. Implement these recommendations by managing projects and programmes.
• Be an active member of the our team and engage in internal information management.
• Collaborate with your international colleagues and liaise with the clients to keep them informed of progress and to enable relevant decisions.
• Maintain time and expense records to ensure accurate invoicing in accordance with company procedure
• Delivery of tasks for clients on time, on budget, to the highest standards
• This role will involve travel to client sites within Germany and across Europe, the Middle East, and Africa.

Associate Consultant, Resilience Consulting

Solutions Engineer

• - Lead architecture activities to develop and manage technology solutions, including projects, products, systems, and shared services.
• - Provide technical leadership and oversee analysis and design to ensure solutions meet business needs and comply with governance and standards.
• - Design Solution: Business Context, Component Model, Deployment Model, Security Model, Service Model, Transition & Migration Planning
• - Architecture Blueprints & Standards: Apply enterprise blueprints and standards to guide the design of new applications and govern compliance within the current application landscape. Identify and highlight architectural risks, constraints, assumptions and decisions.
• - Integration and Data Architecture: Define and enforce enterprise integration patterns (APIs, Event-Driven, Microservices, SOA) to ensure scalable and secure interoperability between cloud PaaS, SaaS and third-party APIs.
• - Drive the definition and enforcement of Non-Functional Requirements by designing resilient, high-availability architectures that guarantee business continuity, elastic scalability, and optimal performance.
• - Conduct capability analysis to develop business and technology capability models.
• - Facilitate ideation and shape the solution vision by demonstrating the "art of the possible" across a broad technology landscape to refine the business brief.
• - Assess technical feasibility and architectural risks early in the lifecycle to inform the roadmap and delivery strategy.
• - Design robust IAM frameworks that strictly adhere to Zero Trust principles, utilizing RBAC, ACLs, and modern authentication protocols to govern internal and external identity lifecycles.
• - Embed end-to-end data security into solution designs, mandating encryption for Data at Rest and In Transit, while enforcing strict data segregation, anonymization, and residency controls to meet regulatory standards.
• - Research and analyse emerging digital technology trends to drive innovation and identify opportunities for business value.
• - Provide technical leadership for PoC and prototype initiatives, validating hypotheses before full-scale implementation.
• - Create and maintain up-to-date architecture documentation in the central repository for both new designs and existing solution assets.
• - Actively participate in Design Authority meetings and technical workshops to ensure solution compliance and architectural consistency.

Solution Architect

Security Engineer

• Lead daily operations and direct the implementation of guidelines and processes that ensures a cohesive, consistent, and uniformed global program.
• Manage end-to-end protective design scope (pre-lease, planning, design, construction, quality assurance) ensuring on-time delivery while driving execution.
• Partner with other project specialists responsible for similar processes to collaborate and consolidate project work.
• Manage builds of existing and new construction and retrofits, protective design consultant selection, and third-party vendor recommendations.
• Act as the liaison and point of contact for both internal and external cross-functional partners, third party vendors, and protective design consultants.
• Foster strong cross-functional partnerships and provide clear, concise communication to both technical and non-technical stakeholders.
• Meet regularly with stakeholders and project design teams to provide status updates and coordinate project specific requirements.
• Provide ongoing communication of planning, project status, issues and risks in a timely fashion to internal global security team members and cross functional partners.
• Support continual improvement efforts through evaluation of current practices; investigation of new products; development of presentation materials, forms, and guidance documents; coordination and execution of pilots for programs; and present recommendations and provide business justification to relevant partners.

Security Design Architect

• Primary responsibility is to keep the bank and its stakeholders safe by acting as the security subject matter expert and providing effective leadership and governance for the delivery of security across the area of responsibility.
• Lead by example and model behaviours that are consistent with the Control Risks values.
• Support the client’s operational excellence programme:
• Support the client’s broader Corporate Real Estate and workplace strategy by proactively identifying operational needs, potential risks, and service gaps, ensuring they are addressed through the appropriate processes and channels.
• Collaborate closely with cross‑functional teams to drive timely, high‑quality resolution of issues across all workplace environments.
• Uphold safety, security, compliance, and confidentiality standards to maintain a reliable, well‑governed, and trusted workplace experience.
• Contribute insights, observations, and recommendations that enhance service quality, streamline workflows, and elevate the overall employee, guest, and stakeholder experience.
• Work collaboratively across the Corporate Real Estate function:
• Work proactively and collaboratively across teams to anticipate needs and support colleagues, stakeholders, with a seamless, solution-oriented approach.
• Partner with workplace, facilities, operations, and experience teams to deliver cohesive, end to end service across all zones and work environments. This may include broader campus teams.
• Assist with events, tours, executive engagements, and special onsite activities to help create a polished, well-coordinated experience for employees and guests.
• Provide flexible support across the site as needed to maintain consistent service standards and ensure smooth daily operations.
• Support, advise and facilitate the implementation of the partnership Security Playbook. Devises local procedures for access control, CCTV surveillance and alarm monitoring in alignment with global and local standards incorporating best practices and innovative thinking in the delivery of security.
• Monitors the execution by others of security guarding operations, security system maintenance, project works, and lifecycle replacements in alignment with Security Playbook, Bank stakeholder requirements, global and local standards.
• Conducts local risk assessments, makes recommendations on physical security measures and implements them in accordance with global and local standards. Monitor and manage the scope definition, operational design, and appropriate metrics of all security services and ensure any recommendations or stakeholder requests are properly aligned with account leadership and documented and approved through change request procedures.
• Create and maintain networks within the Bank and externally to be aware of industry changes, impacts upon and threats to the Bank.
• Communicates with and advises the relevant bank and other account stakeholders about any security issues that arise.
• Ensure through self and/or designated security supervisory and operational teams to achieve the following,
• Adequate training to frontline staff engaged in security systems operation, security awareness, standard operating procedures, emergency response procedures, account security standards, local and national regulations.
• Ensure security screening, training records and regulatory certifications are maintained.
• Regular review of KPI’s, performance reports, incident reports and other metrics from Operations with respect to Guarding Operations and Security Systems Maintenance delivery.
• Support the hiring process of security staff personnel.
• Provide validation and sign off on major installation vendors works.
• Advice and guidance on security operational efficiency, cost-effective management and delivery of premises security systems and services.
• Provides leadership for incident & emergency response at the country, property, or site, supporting the escalation to crisis management teams where required. Manages security incidents, follow-up investigation and reporting to all stakeholders.
• Conducts performance reviews of operational manager/supervisor level security delivery. Assists in performance/behaviour related meetings regarding security staff.
• Conducts security inspections, security compliance reviews, control reviews and presents findings and action plans, as well as advice on dispensations and risk registration.
• Supports client-initiated audits, inspections, and assurance reviews.

Location Security Lead

Manager

• Our third-party due diligence (VANTAGE) team assesses our clients’ current, former or potential counterparties, looking for any issues that might pose a reputational or business risk to them, wherever they may be in the world.
• The Associate Research Manager is responsible for the quality of VANTAGE work.
• Oversees and guides Researchers to ensure they produce clear, analytical and exceptionally well-written reports which help our clients protect their integrity and reputation.
• Supports the Research Manager in training researchers and managing projects, leveraging internal and external resources in order to complete VANTAGE projects in a timely and effective manner.
• Manage a team of researchers and senior researchers.
• Define, for each team member, objectives and responsibilities in line with the practice goals.
• Conduct performance reviews.
• Ensure well-being and professional development of staff.
• Support the Research Manager in recruiting new researchers.
• Ensure VANTAGE work is properly scoped, allocated to researchers, tracked and ultimately delivered on time and within budget.
• Communicate directly with clients in order to clarify the scope of projects, address questions, and suggest potential additional avenues of research.
• Review and approve (content and editorial) VANTAGE work, ensuring projects are of high quality and meet Clients’ specifications.
• Liaise with and provide feedback to vendors and subcontractors, ensuring the quality of work they provide is high and adheres to our global delivery standards.
• Engage with colleagues in the Business Intelligence team whenever VANTAGE work requires their input and collaboration.
• Assist Research Manager in training new researchers in the VANTAGE methodology and approach.
• Provide continual training and cascade updates to the VANTAGE methodology and approach.
• Monitor quality of work and give feedback to researchers; motivate and guide researchers to ensure they are focused and directed effectively on operational and other aspects of the work.
• Interact regularly with other Team Leads and Associate Research Managers to provide support and feedback on VANTAGE work.
• Participate in discussions with other Team Leads and Associate Research Managers to provide insight on potential service/product improvement.

Associate Research Manager – Third-Party Due Diligence

• Primary responsibility is to keep the bank and its stakeholders safe by acting as the security subject matter expert and providing effective leadership and governance for the delivery of security across Asia Pacific.
• Lead by example and model behaviours that are consistent with the Control Risks values.
• Support the client’s operational excellence programme:
• Support the client’s broader Corporate Real Estate and workplace strategy by proactively identifying operational needs, potential risks, and service gaps, ensuring they are addressed through the appropriate processes and channels.
• Collaborate closely with cross‑functional teams to drive timely, high‑quality resolution of issues across all workplace environments.
• Uphold safety, security, compliance, and confidentiality standards to maintain a reliable, well‑governed, and trusted workplace experience.
• Contribute insights, observations, and recommendations that enhance service quality, streamline workflows, and elevate the overall employee, guest, and stakeholder experience.
• Work collaboratively across the Corporate Real Estate function:
• Work proactively and collaboratively across teams to anticipate needs and support colleagues, stakeholders, with a seamless, solution-oriented approach.
• Partner with workplace, facilities, operations, and experience teams to deliver cohesive, end to end service across work environments.
• Establish and build strong relationships with key stakeholders within the bank and suppliers. Acts as focal point to respond to all security-related matters which affect the bank by providing expert knowledge and guidance, in line with industry best practice. Create and maintain networks within the Bank and externally to be aware of industry changes, impacts upon, and threats to the Bank. Coordinate and work with relevant Government authorities/Ministries to implement programs/plans and to ensure the bank’s policies and guidelines align with the regulatory requirement.
• Provide security input advice and guidance to project managers in new build and upgrade projects in the region to ensure compliance with security standards and appropriate risk assessments. Regular review of the Lifecycle Capital Replacement (LCR) for key Security Systems and equipment.
• Work in cooperation and consultation with Regional Service Practice Directors, Supply Chain Solutions, Category Managers and others, to promote cost, quality and compliance excellence in the service areas provided by suppliers. Manage the cost-effective procurement of all security resources, system maintenance and repair services.
• Maintain and develop appropriate security and emergency response policies, procedures and plans for the bank. Support and contribute to account Business Continuity planning. Conduct investigations into security incidents and compose detailed factual and technical incident reports for the bank.
• Conduct security risk assessments where required and support the bank’s risk assessments, audits and reviews where required. Ensure appropriate security processes and procedures are in place for all sites in compliance with bank’s security standards.
• Monitor and manage the scope of security services and ensure any recommendations or stakeholder requests are properly aligned with account leadership and documented and approved through change request procedures. Conduct regular operational and KPI performance review meetings with key stakeholders in the bank and suppliers.
• Develop and train security teams with appropriate skills and experiences to ensure compliance with regulatory requirements and a sound succession plan is in place.
• Ensure all Protective Services activities are conducted in accordance with standards and regulatory requirements.

Account Security Lead

Full-stack Engineer

• Lead the design, implementation, and optimization of Zscaler solutions (ZIA, ZPA) across a complex enterprise environment.
• Act as a technical SME for secure network architecture, including zero trust principles and secure access transformation.
• Partner with infrastructure, security, and application teams to ensure seamless integration of Zscaler into existing systems and workflows.
• Provide hands-on support during rollout, including configuration, troubleshooting, and performance tuning.
• Advise engineering teams on secure coding practices, with a focus on risks introduced by AI-assisted development tools (e.g., code generation, copilots).
• Conduct and support AI-driven code reviews, identifying vulnerabilities, insecure patterns, and data exposure risks.
• Develop security guardrails, standards, and best practices for AI-enabled software development.
• Translate security and technical concepts into clear guidance for both technical and non-technical stakeholders.
• Support compliance and risk mitigation efforts related to application security and enterprise security controls.

Senior Staff Engineer

• - Provide comprehensive administrative support to ensure that all demands will be supported as required, therefore meeting all rules and regulations.
• - Assist in the coordination and execution of security-related tasks and projects as directed.
• - Maintain accurate records, documentation, and databases related to security and administrative functions.
• - Support the implementation and adherence to company security policies and procedures.
• - Facilitate communication and information flow between local teams and headquarters, including translating documents and communications as needed to the local language.
• - Support the Executive Protection during logistics for meetings, events, and travel arrangements.
• - Ensure that all office supplies and other necessary resources will be available as needed.
• - Support the onboarding process for new employees or contractors in Brazil, as needed.
• - Serve as a point of contact for internal and external inquiries, directing them appropriately.
• - Utilize computer applications (e.g., Microsoft Office Suite, Slack, databases) effectively to manage information and generate reports.
• - Perform other administrative and security-related duties as assigned.

Senior Security Coordinator

Architect

• The solution architect leads architecture activities to develop and manage technology solutions, including projects, products, systems, and shared services.
• They provide technical leadership and oversee analysis and design to ensure solutions meet business needs and comply with governance and standards.

Procurement

• Design and implement a global Procurement strategy aligned with company growth plans, operational priorities and financial goals.
• Together with the office of the CFO, architect and implement a highly agile, global and scalable Source-to-Pay (S2P) operating model that centralises rigorous governance while meticulously preserving the operational velocity required by autonomous, client-facing project teams.
• Partner with executive leadership to drive enterprise-wide commercial transformation, acting as a highly visible internal diplomat and change agent.
• Establish global policies, processes, governance frameworks, and performance metrics that elevate Procurement from a back-office function to a strategic business enabler.
• Develop global supplier strategies, including selection, negotiation, and performance management, including scorecards, dynamic service level agreements (SLAs), and periodic reviews.
• Drive cost optimisation and value creation while protecting service quality and risk standards.
• Oversee strategic sourcing activities across all major third-party spend categories (e.g., technology, facilities, travel).
• Establish and maintain strategic supplier relationships to ensure service quality, innovation, and cost optimization.
• Lead high-value, complex contract negotiations to drive favourable commercial and operational outcomes.
• Standardize Procurement processes across regions, while allowing for local regulatory and market adaptation.
• Ensure robust Procurement analytics, reporting, and spend visibility to support informed decision-making.
• Act as the strategic business owner for the global procurement technology architecture.
• Drive the evaluation, implementation, and optimisation of procurement technology solutions (e.g., e-sourcing, contract management, Procure To Pay (P2P)), and modern procurement orchestration platforms (e.g., Coupa, Zip, Ariba).
• Leverage agentic AI and predictive analytics to automate intake workflows, accelerate contract cycle times, and provide a seamless purchasing experience for all internal stakeholders.
• Promote best practice procurement methodologies such as category management, strategic sourcing, and total cost of ownership (TCO).
• Act as a strategic advisor to senior leadership on procurement and commercial matters.
• Drive cultural adoption of procurement discipline across a decentralised global organisation.
• Partner with Finance to ensure budgeting alignment, cost-saving initiatives, and accurate forecasting.
• Collaborate with Finance and Legal, Risk & Compliance teams on supplier frameworks.
• Collaborate closely with business units, functional heads and regional leaders to support operational needs and commercial outcomes, and to embed best-practice procurement into local operations.
• Communicate procurement strategy, performance, and business impact to Executive Committee (EXCO) and Board-level stakeholders, as required.
• Develop and enforce global procurement policies, standards, and internal controls.
• Strengthen contractual governance and third-party risk management.
• Ensure compliance with legal, regulatory, and ethical standards across all procurement activities.
• Mitigate supplier risk through due diligence, contract rigor, and contingency planning.
• Protect Control Risks' premier brand reputation by ensuring zero tolerance for ethical breaches within the multi-tier extended supply chain.
• Lead sustainability initiatives within the supply chain, including ESG-aligned sourcing and responsible supplier practices, and embed sustainability natively into the core of all sourcing decisions in alignment with ISO 20400 guidelines.
• Build and lead a high-performing global Procurement team over time.
• Develop Procurement capability and training across the organisation.

Global Head of Procurement

Threat Intelligence Specialist

• Monitor travel-related developments impacting employees, including executives.
• Provide first-line traveller assistance and support issue resolution.
• Assist with coordination of secure transportation and vetted third-party vendors.
• Support pre-trip advisories, briefings, and traveller outreach.
• Assist with travel-related incidents and support travellers in distress.
• Support review of upcoming events and prepare situational summaries, including but not limited to geofencing, tactical intelligence, and weather intelligence.
• Conduct targeted monitoring during event windows and escalate concerns.
• Create and manage mass-notification groups for events.
• Monitor real-time alerts, assess relevance, and escalate per workflows.
• Draft concise alerts, situation updates, and rapid assessments.
• Provide on-demand support to internal intelligence teams.

Intelligence Analyst

Analyst

• The Analyst Team Lead oversees day-to-day management of a 24/7 global analytical team for a Client’s Resilience Center.
• This includes analytical delivery responsibilities as well as managing a team of people, the 24/7 coverage schedule, and the overall quality of deliverables in the Client environment.
• This role will be part of a 24/7 'follow the sun' team.
• It will be a requirement to work on public holidays and weekends as determined by the team's coverage schedule.
• The Analyst Team Lead manages quality and ensures timely delivery of travel support, event monitoring, and operational intelligence.
• This role leads a team of global analysts, manages escalations, and ensures consistent execution of monitoring, triage, and response workflows.
• The Team Lead partners with internal stakeholders and vendors to support employees and events during routine operations and time-sensitive incidents.
• Lead daily operations for a global analyst team supporting travel, events, and operational intelligence.
• Serve as an escalation point for complex travel cases and elevated incidents.
• Coach and mentor analysts; provide feedback and ensure adherence to SOPs.
• Proactively monitor travel-related developments affecting employees.
• Provide traveller assistance and coordinate secure transportation and vetted third-party vendors.
• Deliver pre-trip advisories, briefings, and targeted traveller outreach.
• Support travellers in distress, including medical, documentation, or security issues.
• Review upcoming internal and external events and produce event-specific situational summaries.
• Conduct targeted monitoring during event windows and support on-the-ground teams remotely.
• Manage mass-notification groups and support incident communications.
• Triage real-time alerts, assess operational relevance, and escalate per defined workflows.
• Produce concise, time-bound intelligence outputs and support internal intelligence teams as needed.
• Manage coverage for a 24/7 global team in a shift environment, including approving PTO, ensuring timesheet compliance, and maintaining service continuity.
• Control for quality of delivery on Client tasks and ensure timely customer service-oriented team culture within Client ecosystem.
• Conduct regular check-ins, provide coaching and continuous performance feedback, manage performance improvement plans, and support career development.
• Serve as the main liaison between team members and Control Risks management team, ensuring timely updates and support for client deliverables.
• Participate in hiring processes, collaborate with Talent Acquisition, and ensure team alignment with client expectations.
• Lead onboarding tasks (e.g., scheduling, equipment, success plans) and manage offboarding logistics.
• Demonstrate strong leadership, emotional intelligence, communication, and organizational skills with a commitment to excellence.

Embedded Consultant – Analyst Team Lead

Operations

• Develop and implement globally consistent systems and processes for Project and Client Operations, minimising administrative burden while maximising the speed and accuracy of invoicing.
• Design and implement a delivery operating model that balances effective business support with operational efficiency.
• Optimisation of team size with a focus on cost control and efficient placement of resources.
• Ensure the business leaders have an efficient escalation process and each service line has a business partner to support their operations.
• Maximise Control Risks’ ability to transact efficiently with clients, including vendor onboarding, management of invoicing requirements, and implementation of MSAs and other client agreements.
• Focus on technology-enabled solutions that allow for the distribution of information about client transactions throughout Control Risks’ systems.
• Lead and develop a global team, setting clear individual and team KPIs focused on business impact, service quality and performance.
• Create a dynamic, service-focused culture which inspires problem solving, continuous improvement and innovation.
• Establish transparent controls and review mechanisms across key risk areas (e.g. project closure, unbilled or aged WIP, PO accuracy, D365 setup), implementing targeted reviews and upskilling where required.
• Regular consultation with the business and teams, including peer corporate services functions, to ensure processes are aligned and fit for purpose.
• Own the technology road map for Project & Client Operations with a focus on simplicity, minimal data entry and single-pane access, prioritising AI enablement where appropriate.
• Work in close partnership with the Strategy in the continuous improvement and business acceptance of the CTC portal.
• Act as the main point of contact for other functions when they are implementing technology and process change to ensure alignment with Client & Project operations.

Global Head – Project and Client Operations

Risk

• Support the delivery of our analysis of political, security, operational, integrity and social risks in the United States and Canada
• Conduct research on competitors and market strategy to inform our business positioning and operations
• Contribute to business strategy development through operational research and analysis, supporting both our commercial operations and strategic planning initiatives
• Research and writing of updates for our online services
• Contribute to bespoke consulting reports that guide our business operations and client engagement strategies

Intern, Global Risk Analysis

• The Protective Intelligence Analyst will support a major Control Risks client by delivering focused, actionable intelligence to protect executive teams and key personnel.
• The role involves identifying and assessing threats through OSINT, social media monitoring, investigative platforms, and security intelligence tools; conducting executive vulnerability assessments, POI investigations, and exposure reviews; and providing rapid analysis of emerging security situations.
• The analyst will manage and triage intelligence requests, contribute to the analysis of global incident and suspicious activity reporting, and produce clear briefings and reports on protective intelligence issues to support informed executive security decision‑making.
• Proactively identify, monitor, research, analyze and provide warnings regarding emerging threats, trends and global events that may impact the client’s executive teams.
• Identify and assess threats to the client’s executives and personnel through OSINT, social media monitoring, investigative platforms and security intelligence tools.
• Conduct executive vulnerability assessments, POI investigations, threat assessments and social media exposure reviews.
• Detect and provide rapid assessments of emerging security situations, as needed.
• Identify and develop resources for travel-related threat information on a global basis, including internet, databases, public records, media, law enforcement, government sources, contracted services and other related resources.
• Act as part of the central repository for the collection of information necessary for the analysis of the client's security incident reports and suspicious activity logs on a global basis.
• Triage intelligence requests and ensure timely delivery of accurate, relevant information.
• Provide reports or briefings on strategic or specific security issues as it relates to protective intelligence for the client’s executive teams.