Control Risks

• Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems. • Support incident response activities including analysis, containment, remediation, and documentation. • Execute established incident response playbooks and contribute to their continuous improvement. • Perform threat hunting activities to identify potential compromises and gaps in detection coverage. • Leverage threat intelligence to inform investigations and detection tuning. • Collaborate with Security Engineering to tune detection logic and improve security controls. • Produce clear, concise incident reports and support root cause analysis and remediation efforts. • Support on-call rotations and escalation processes as part of a 24/7 detection and response capability.

Role Description The Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART). This is a hands-on technical role focused on identifying, analyzing, and responding to cyber threats across the client’s environment, working closely with Security Engineering and broader security stakeholders. This role will be a part of a global 24/7 team and will cover one of two shifts: Sunday-Thursday 08:00-16:00 or Tuesday-Saturday 08:00-16:00. This role will likely commence employment in October 2026. - Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems. - Support incident response activities including analysis, containment, remediation, and documentation. - Execute established incident response playbooks and contribute to their continuous improvement. - Perform threat hunting activities to identify potential compromises and gaps in detection coverage. - Leverage threat intelligence to inform investigations and detection tuning. - Collaborate with Security Engineering to tune detection logic and improve security controls. - Produce clear, concise incident reports and support root cause analysis and remediation efforts. - Support on-call rotations and escalation processes as part of a 24/7 detection and response capability. Qualifications - 3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defense. - Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike). - Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST. - Familiarity with threat hunting, malware analysis, or forensic investigation techniques. - Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred. - Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly. - Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus. - Candidates will need to be based in Australia and hold permanent work rights.

Middle-weight Digital & AI Designer Remote Global Revenue Office, Marketing Cardiff, Wales, United Kingdom Edinburgh, Scotland, United Kingdom Aberystwyth, Wales, United Kingdom Description We’re looking for a remote middle‑weight Digital Designer with strong UX thinking and confident AI skills to join our creative team. This role is for a designer who takes genuine pride in craft, delivers consistently high‑quality work, uses AI to expedite their production and delivery, and understands the value of collaboration and shared outcomes. You’ll design thoughtful, Figma fluent, user‑centred digital experiences across a wide range of platforms. We place no hierarchy on channels: the same care, creativity, and ambition applied to a global podcast intro should be brought to a PowerPoint template or presentation system. Strong ideas, elegant execution, and great user experience matter wherever they live. This role is expected to: - Operate autonomously on mid‑scale work - Make sound design judgements - Meaningfully raise the quality and ambition of the team’s output …but is not expected to: - Own strategy in isolation - Lead teams - Define global design systems independently Requirements What You'll Do: UX & Digital Design - Design intuitive, user‑centred digital experiences from concept through to polished UI. - Translate briefs, user needs, and business goals into clear user flows, wireframes, prototypes, and interface designs. - Balance usability, accessibility, performance, and brand consistency across all digital outputs. - Present design rationale clearly and respond to feedback thoughtfully and efficiently. Storytelling with motion - Create purposeful motion, micro‑interactions, and transitions that enhance clarity, pacing, and emotional engagement. - Apply the same creative energy to everyday platforms (e.g. presentations, templates) as to high‑profile content moments such as campaigns or podcast intros. Modern digital production & optimisation - Demonstrate strong understanding of modern digital production, including file types, formats, compression, and animation techniques. - Optimise assets with sensitivity to file size, load time, accessibility, and platform constraints to deliver the best possible user experience. - Prepare accurate, production‑ready assets for web, email, presentation, and audio‑visual platforms. - Work confidently within digital asset specifications, brand guidelines, and accessibility standards. - Uses AI tools to expedite production and delivery Collaboration & teamwork - Collaborate closely with designers, developers, marketers, and stakeholders to deliver cohesive, high‑quality outcomes. - Contribute ideas generously, build on others’ thinking, and support a positive, craft‑focused team culture. Who You Are: Experience: - 3-6 years of professional experience working in digital design roles, with demonstrable exposure to UX/UI design across real, shipped work. - Hands‑on experience designing end‑to‑end digital experiences, including user flows, interface design, and animated or interactive elements. - Proven experience applying motion design in a digital or UX context (e.g. interface transitions, presentation systems, content intros/outros, or campaign assets). - Experience delivering work within established brand systems, adapting ideas across platforms such as web, presentation tools, audio‑visual content, and campaigns. - Experience working as part of cross‑functional teams, with evidence of contributing as a part of a team, rather than working siloed. Skills: - UX & Digital design - Must be Figma fluent - Strong, practical UX/UI capability, including wireframing, prototyping, and designing intuitive user flows for mid complexity projects. - Ability to balance usability, visual craft, performance, and accessibility in everyday design decisions. - Confident articulation of design rationale, trade-offs, and decisions. Motion - Experience creating motion for both high visibility moments (e.g. content intros, campaigns) and "everyday" platforms (e.g. presentation templates, transitions, UI motion). - Strong judgment in when motion adds meaning-and when restraint improves clarity. Digital production - Solid understanding of modern digital production practices, including: - Appropriate use of file types (e.g. SVG, Lottie, WebP, MP4/GIF where relevant) - Compression, optimisation, and file size management - Using AI to expedite production & delivery related work - Platform specific delivery constraints and performance considerations - Demonstrated sensitivity to how design and animation choices affect load times, accessibility, and overall UX. - Experience preparing clean, production ready assets with clear handover documentation. - Experience building UX libraries Accessibility - Working knowledge of accessible and inclusive design principles, with experience applying them in digital work (e.g. colour contrast, motion sensitivity, hierarchy, clarity, readable layouts). - Awareness of how motion, interaction, and visual design impact users with diverse needs, and the ability to adjust designs accordingly. Ways of working - High attention to detail and pride in craft, without sacrificing momentum or collaboration. - Willingness to innovate thoughtfully in unexpected/undervalued places, bringing ambition to all platforms equally. - Clear, collaborative communicator with a team first working style. Education - A degree, diploma, or equivalent professional training in Digital Design, Graphic Design, UX/UI, Motion Design, Visual Communication, or a related discipline is desirable but not essential. - Candidates without formal qualifications will be considered equally where experience and portfolio demonstrate the required level of thinking, craft, and delivery.

• Design intuitive, user‑centred digital experiences from concept through to polished UI. • Translate briefs, user needs, and business goals into clear user flows, wireframes, prototypes, and interface designs. • Balance usability, accessibility, performance, and brand consistency across all digital outputs. • Present design rationale clearly and respond to feedback thoughtfully and efficiently. • Create purposeful motion, micro‑interactions, and transitions that enhance clarity, pacing, and emotional engagement. • Demonstrate strong understanding of modern digital production, including file types, formats, compression, and animation techniques. • Collaborate closely with designers, developers, marketers, and stakeholders to deliver cohesive, high‑quality outcomes.

Role Description We’re looking for a remote middle‑weight Digital Designer with strong UX thinking and confident AI skills to join our creative team. This role is for a designer who takes genuine pride in craft, delivers consistently high‑quality work, uses AI to expedite their production and delivery, and understands the value of collaboration and shared outcomes. You’ll design thoughtful, Figma fluent, user‑centred digital experiences across a wide range of platforms. We place no hierarchy on channels: the same care, creativity, and ambition applied to a global podcast intro should be brought to a PowerPoint template or presentation system. Strong ideas, elegant execution, and great user experience matter wherever they live. This role is expected to: - Operate autonomously on mid‑scale work - Make sound design judgements - Meaningfully raise the quality and ambition of the team’s output …but is not expected to: - Own strategy in isolation - Lead teams - Define global design systems independently Qualifications - 3-6 years of professional experience working in digital design roles, with demonstrable exposure to UX/UI design across real, shipped work. - Hands‑on experience designing end‑to‑end digital experiences, including user flows, interface design, and animated or interactive elements. - Proven experience applying motion design in a digital or UX context (e.g. interface transitions, presentation systems, content intros/outros, or campaign assets). - Experience delivering work within established brand systems, adapting ideas across platforms such as web, presentation tools, audio‑visual content, and campaigns. - Experience working as part of cross‑functional teams, with evidence of contributing as a part of a team, rather than working siloed. Requirements - Must be Figma fluent - Strong, practical UX/UI capability, including wireframing, prototyping, and designing intuitive user flows for mid complexity projects. - Ability to balance usability, visual craft, performance, and accessibility in everyday design decisions. - Confident articulation of design rationale, trade-offs, and decisions. - Experience creating motion for both high visibility moments (e.g. content intros, campaigns) and "everyday" platforms (e.g. presentation templates, transitions, UI motion). - Strong judgment in when motion adds meaning-and when restraint improves clarity. - Solid understanding of modern digital production practices, including appropriate use of file types (e.g. SVG, Lottie, WebP, MP4/GIF where relevant), compression, optimisation, and file size management. - Using AI to expedite production & delivery related work. - Platform specific delivery constraints and performance considerations. - Demonstrated sensitivity to how design and animation choices affect load times, accessibility, and overall UX. - Experience preparing clean, production ready assets with clear handover documentation. - Experience building UX libraries. - Working knowledge of accessible and inclusive design principles, with experience applying them in digital work (e.g. colour contrast, motion sensitivity, hierarchy, clarity, readable layouts). - Awareness of how motion, interaction, and visual design impact users with diverse needs, and the ability to adjust designs accordingly. - High attention to detail and pride in craft, without sacrificing momentum or collaboration. - Willingness to innovate thoughtfully in unexpected/undervalued places, bringing ambition to all platforms equally. - Clear, collaborative communicator with a team first working style. Education - A degree, diploma, or equivalent professional training in Digital Design, Graphic Design, UX/UI, Motion Design, Visual Communication, or a related discipline is desirable but not essential. - Candidates without formal qualifications will be considered equally where experience and portfolio demonstrate the required level of thinking, craft, and delivery.

• Executing the BC strategy as developed by the Head of Corporate BC and Regional BC managers. • Working with regional business teams to conduct business impact and risk assessments, identify critical services, define recovery objectives, and map critical dependencies. • Working with business teams to document BC plan needs in Corporate Continuity tool to drive consistency and attestation. • Partnering with the Business, and Global Real Estate and Facilities team to coordinate recovery strategies as identified through the Business Continuity planning process. • Facilitating business continuity exercises and tests, to identify potential gaps in plans, as well as functionality of work transference processes supporting recovery. • Work with large amounts of data and create meaningful reports. • Support in launching and maintaining tools and POC for conducting trainings. • Liaison with support teams to implement the program. • Supporting workplace resilience initiatives by working with multiple stakeholders to include facilities, business continuity, information technology, security and crisis management, for the purpose of seamlessly integrating within the disaster response cycle, as required.

Title: Regional Risk Investigations Manager - Trust And Safety Location: San Francisco CA US Description Control Risks’ Embedded Consulting team is hiring a Regional Operations Manager for the Americas to join our team supporting a major tech client. This role will work with their investigations team that helps monitor and mitigate platform risks to the company as well as their user base. You will be tasked with managing a team responsible for mitigating risks associated to organized crime, human trafficking and other crimes using a combination of data analytics as well as investigative skills. Role responsibilities include, but are not limited to: - Identify, organize, drive, supervise daily tasks and projects for the Americas embedded program. Work with the client and their direct reports to develop and execute projects. - Be the ultimate subject matter expert in product development and quality and will ensure projects are completed in a timely manner to the high standards of the program. - Prioritize team responsibilities in line with the client’s mission and responsibilities. - Leads the scheduling team, providing guidance and mentorship to ensure optimal performance. - Identify new requirements and embrace developing/new responsibilities. - Adjust procedures, policies, and business practices as needed. - Identify programmatic and training needs of the team and appropriately communicate these to either the client manager or Control Risks as appropriate. This may include, but is not limited to, staffing requirements, vendor tool needs, training, conference/event attendance, etc. - Model best business practices and professional behavior; they provide feedback and guidance to Analysts on business practices and professional behavior. - Work on complex cases for the investigations team. Requirements - Regional Operations Manager should have 8-10 years of experience or demonstrated skills. - Proficiency in SQL required. - Experience with data analysis tools and techniques, utilizing data insights to inform risk management decisions. - Previous experience in trust & safety, fraud detection, or risk management within a user-centric platform. - Demonstrated ability as a forward-thinking and imaginative strategist, anticipating emerging risks and devising effective strategies, products, and methodologies to address them. - Understanding of criminal applications of technology preferred. - Experience in crafting and delivering comprehensive intelligence reports on geopolitical, cyber, and violent actor behaviours and their impact on product exposure. - Track record of analyzing and mitigating high-impact threats and threat actors. - Proven ability to apply analytical and statistical methods to address real-world challenges using extensive data. - Experience managing projects with organization-wide implications and collaborating with cross-functional stakeholders across multiple locations and time zones. - Excellent communication and presentation skills, including the ability to convey complex data and insights to diverse audiences effectively. - Proficiency in French, Mandarin, or Spanish a plus. Benefits - Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarized in the full job offer. - We operate a discretionary bonus scheme that incentivizes, and rewards individuals based on company and individual performance. - Control Risks supports hybrid working arrangements, wherever possible, that emphasize the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working. - Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarized in the full job offer. - Medical Benefits, Prescription Benefits, FSA, Dental Benefits, Vision Benefits, Life and AD&D, Voluntary Life and AD&D, Disability Benefits, Voluntary Benefits, 401 (K) Retirement, Nationwide Pet Insurance, Employee Assistance Program. - As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process. The base salary range for this position is $125,000-135,000 per year. Exact compensation offered may vary depending on job-related knowledge, skills, and experience. Control Risks is committed to a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age or veteran status. Control Risks participates in the E-Verify program to confirm employment authorization of all newly hired employees. The E-Verify process is completed during new hire onboarding and completion of the Form I-9, Employment Eligibility Verification, at the start of employment. E-Verify is not used as a tool to pre-screen candidates.

• The Cyber Detection and Response Team Lead will play a pivotal role in building and leading a world-class Detection and Response Team (DART) for a major client of Control Risks. • This is a hands-on technical leadership role responsible for standing up the team from the ground up; developing strategy, building capabilities, and leading a team of security professionals to proactively detect, investigate, and respond to cyber threats across the client's environment. • This position works in close partnership with the client's Security Engineering team to ensure detection and response capabilities are deeply integrated into the broader security architecture. • The Team Lead provides technical direction and operational oversight on all detection and response matters, ensuring the protection of the client's systems, networks, data, and cloud environments. • The role supports a strong first-line ownership model by partnering with technology and business stakeholders to embed security into planning, development, and operational activities. • Work closely with client stakeholders and the Security Engineering team, build, manage, and scale a Cyber Detection and Response Team (DART) from the ground up. • Define and implement the DART's operational model, including tiered escalation paths, on-call rotations, and coordination protocols with Security Engineering, IT, Legal, Risk, and other business stakeholders. • Lead the development of Standard Operating Procedures (SOPs) for detection and response activities, including tooling integration, reporting lines, and out-of-hours incident protocols. • Establish and continuously refine incident response playbooks aligned to the MITRE ATT&CK framework and the client's specific threat landscape. • Serve as Incident Commander for critical and high-severity cyber security incidents, directing technical response across forensics, network, endpoint, cloud, and identity workstreams. • Lead on managing the most severe cyber security incidents, including supporting responders with reporting, executive updates, root cause analysis, and remediation recommendations. • Oversee the triage of cyber events, ensuring rapid identification, investigation, containment, and remediation. • Lead proactive threat hunting operations to identify potential compromises, undetected adversary activity, and gaps in detection coverage. • Integrate threat intelligence into DART workflows and leverage intelligence to inform response and prevention strategies. • Conduct regular check-ins, provide coaching and feedback, manage performance reviews and improvement plans, and support career development with the members of your team. • Serve as the main liaison between team members and the ECS program management team, ensuring timely program and personnel updates and controlling quality on client deliverables. • With the support of the Talent Acquisition team, participate in hiring processes ensuring team resourcing aligns with client expectations and program needs. • Lead onboarding tasks (e.g., joiner tickets, scheduling, equipment, success plans), manage offboarding logistics and leaver tickets, and ensure operational continuity. • Manage team schedules, approve PTO, ensure timesheet compliance, and maintain a consistent high-quality service to the client. • Working closely with the ECS program management team, align on overall program strategy and priorities to create clear, actionable team deliverables.

• Identify, organize, drive, supervise daily tasks and projects for the Americas embedded program. Work with the client and their direct reports to develop and execute projects. • Be the ultimate subject matter expert in product development and quality and will ensure projects are completed in a timely manner to the high standards of the program. • Prioritize team responsibilities in line with the client’s mission and responsibilities. • Leads the scheduling team, providing guidance and mentorship to ensure optimal performance. • Identify new requirements and embrace developing/new responsibilities. • Adjust procedures, policies, and business practices as needed. • Identify programmatic and training needs of the team and appropriately communicate these to either the client manager or Control Risks as appropriate. This may include, but is not limited to, staffing requirements, vendor tool needs, training, conference/event attendance, etc. • Model best business practices and professional behavior; they provide feedback and guidance to Analysts on business practices and professional behavior. • Work on complex cases for the investigations team.

• Maintain a comprehensive understanding of offline risk factors such as human trafficking, organized crime, and other concerns within the client's operational landscape. • Use internal data, OSINT, and third-party intelligence to search for undiscovered instances of abuse and offline risk. • Pull actionable insights from large datasets to develop new strategies for mitigating/stopping criminal activities. • Communicate findings to management and product teams to enhance decision-making processes. • Collaborate closely with trust product and engineering teams to implement strategies and products to better mitigate emerging safety risks. • Lead and support intricate investigations involving large datasets and multiple stakeholders. • Engage in project ideation and definition, working on collaborative initiatives with global partners to address offline risk concerns. • Develop investigative frameworks and methodologies that can be integrated into existing trust practices. • Contribute to the development of new enforcement policies aimed at mitigating emerging threats. • Continuously monitor known risk trends, both during onboarding and post-onboarding phases, and propose enhancements to minimize safety risks. • Contribute to the refinement of automated monitoring and alert systems to detect abnormalities in customer behavior and improve risk-rule efficiency.