GRC & Technology Risk Analyst

State Street; City of Edinburgh; On-site; GBP 60,000 - 80,000; Full time

Job summary

State Street is seeking a Governance, Risk and Technology Analyst to support governance, risk management, third-party oversight, audit readiness, data privacy and technology initiatives across Global Risk and Compliance.

You will partner with business, technology, procurement, legal and vendor teams to maintain controls, coordinate assessments and remediation, and deliver accurate reporting for executives and governance forums.

Qualifications

• Bachelor's degree in business, finance, risk management, information systems, real estate, or a related field, or equivalent practical experience.
• Five or more years of experience in governance, risk, compliance, audit, third-party risk, technology operations, project coordination, or a related discipline.
• Experience supporting cross-functional initiatives, maintaining documentation, tracking deliverables, and preparing management reporting.
• Working knowledge of risk and control concepts, vend

Responsibilities

• Support governance and risk-management activities for global real estate programs, technology platforms, and operations.
• Maintain risk, control, policy, procedure, and governance documentation.
• Coordinate risk assessments, control reviews, operational incident follow-up, and policy compliance activities.
• Track audit findings, risk issues, management action plans, owners, milestones, and supporting evidence.
• Assist with regulatory, internal audit, SOX, and control-testing requests.
• Prepare dashboards, status reports, committee materials, and management updates for risk, compliance, and governance metrics.
• Coordinate audit, assurance, certification, assessment, and regulatory information requests.
• Collect, organize, validate, and retain audit-ready evidence and supporting documentation.
• Maintain issue and remediation trackers; follow up with owners to support timely completion of commitments.
• Prepare concise executive communications, governance packs, status reports, and meeting materials.
• Document decisions, action items, dependencies, and escalations and monitor them through closure.
• Support the end-to-end third-party risk management lifecycle for real estate technology, facilities, and professional-service providers.
• Coordinate due diligence, inherent-risk assessments, control reviews, issue management, periodic monitoring, and required approvals.
• Maintain vendor records, assessment evidence, remediation plans, and reporting in accordance with corporate requirements.
• Partner with Procurement, Legal, Information Security, Privacy, Finance, and Corporate Risk teams to resolve matters and meet governance timelines.
• Assist with outsourcing governance, business cases, regulatory notifications, and committee submissions.
• Serve as a central point of coordination between business stakeholders, vendors, and corporate risk functions.
• Support governance of strategic vendor relationships, including outsourced facilities and technology providers.
• Track contract renewals, amendments, change orders, service levels, obligations, and key dates.
• Compile and review vendor KPIs, performance reports, service credits, risks, issues, and remediation progress.
• Coordinate vendor governance meetings, agendas, materials, decisions, and action items.
• Identify trends and opportunities to improve vendor performance, controls, reporting, and operating processes.
• Support implementation of data privacy, records management, and information-classification requirements across global real estate activities.
• Coordinate Records of Processing Activities, privacy assessments, attestations, evidence requests, and compliance reviews.
• Partner with Privacy, Cyber Security, Identity and Access Management, and control functions to address requirements and issues.
• Assist with reviews of third-party access, data handling, retention, and information-protection controls.
• Maintain documentation and evidence for privacy audits, regulatory examinations, and management reporting.
• Support governance for global real estate technology platforms used for facilities, projects, leases, workplace reservations, sustainability data, reporting, and vendor operations.
• Coordinate technology intake, architecture, information-security, privacy, data-governance, and change-management requirements.
• Assist with user-access reviews, identity and access management controls, system inventories, and application documentation.
• Gather and document business requirements, process flows, risks, decisions, testing results, and implementation readiness.
• Partner with business, technology, and vendor teams on enhancements, integrations, upgrades, issue resolution, and control improvements.
• Promote process standardization, data quality, automation, and consistent operating practices across global teams.

Education

Bachelor's degree or equivalent

Job description

State Street is seeking a Governance, Risk and Technology Analyst to support governance, risk management, third-party oversight, audit readiness, data privacy and technology initiatives across Global Risk and Compliance.

You will partner with business, technology, procurement, legal and vendor teams to maintain controls, coordinate assessments and remediation, and deliver accurate reporting for executives and governance forums.