IT Risk Analyst

QBE Insurance Group Limited; Greater London; On-site; GBP 50,000 - 70,000; Full time

Job summary

An international insurance provider is seeking a skilled IT Risk Analyst to provide maternity cover. The role involves developing and conducting risk assessments, reporting risks, and maintaining control registers, collaborating with various teams to ensure compliance. Candidates should have a relevant degree and demonstrable IT Risk experience, particularly in regulated environments. The position offers a 12-month fixed-term contract in Greater London, allowing you to engage with business stakeholders across the organization while promoting best practices in IT risk management.

Qualifications

• Demonstrable experience in IT Risk, Technology, IT Audit or a related discipline.
• Proven ability to assess and provide assurance on IT risks and controls across multiple technology and cyber operational areas.
• Strong experience conducting risk and control assessments within a regulated or enterprise environment.

Responsibilities

• Develop and maintain a strong understanding of IT Risk principles to support proactive risk management.
• Provide guidance to IT teams in identifying, assessing and documenting risks and controls.
• Coordinate IT Risk and Control Self‑Assessments aligned with Group standards.

Skills

Communication

Conflict Management

Critical Thinking

Decision Making

Enterprise Risk Management (ERM)

Information Technology (IT) Risk Management

Intentional collaboration

Independent performance management

Prioritization

Report Writing

Stakeholder Management

Technology Risk Management

Education

Degree in Information Technology, Cybersecurity, Risk Management or equivalent experience

Job description

Primary Details

Time Type: Full time
Worker Type: Employee

Role Overview

This role provides maternity cover for an existing IT Risk Analyst. It involves developing and conducting consistent divisional and functional risk and control assessments, performing control testing, reporting risks, and maintaining risk and control registers. The position collaborates with various teams to drive proactive risk‑management strategies and ensure compliance with IT controls.

We seek a skilled, forward‑thinking IT Risk Analyst to shape the resilience of our digital infrastructure, support insightful analysis, and drive best practices across our IT risk and control environment.

Opportunity: 12‑month fixed‑term contract in a fast‑paced setting.

Your New Role

As part of a collaborative Technology Risk & Governance team, you will build and maintain close relationships with business stakeholders across Divisional and Global IT teams, Enterprise Risk Management, and Business Operations to ensure our systems and processes remain resilient, secure and compliant.

Key Responsibilities

• Develop and maintain a strong understanding of IT Risk principles, frameworks and practices to support proactive risk management.
• Provide guidance and practical advice to IT teams in identifying, assessing and documenting risks and controls.
• Coordinate and support the completion of IT Risk and Control Self‑Assessments, ensuring alignment with Group standards.
• Support the execution of IT Risk and Control Assurance activities, helping validate control effectiveness and identify improvement areas.
• Review and assess AI use cases to ensure they meet internal policy and standards.
• Contribute to Line 1 IT Risk reporting, delivering clear, accurate insights to support governance requirements.
• Coordinate with IT stakeholders to manage policy exceptions and risk acceptances, aligning with QBE’s risk appetite.
• Advise stakeholders on Issue and Incident Management processes and champion sound IT risk practices.

About You

• A degree in a related field such as Information Technology, Cybersecurity, Risk Management or equivalent experience.
• Demonstrable experience in IT Risk, Technology, IT Audit or a related discipline.
• Proven ability to assess and provide assurance on IT risks and controls across multiple technology and cyber operational areas.
• Strong experience conducting risk and control assessments, ideally within a regulated or enterprise environment.
• Familiarity with IT control frameworks and standards such as COBIT, NIST, ISO 27001 or similar.
• Understanding of AI‑related risks and emerging technologies.
• Strong stakeholder engagement skills and experience working with matrixed, geographically distributed teams.
• Excellent analytical and communication skills, with the ability to translate risk concepts into clear, actionable insights.

Skills

• Communication
• Conflict Management
• Critical Thinking
• Decision Making
• Enterprise Risk Management (ERM)
• Information Technology (IT) Risk Management
• Intentional collaboration
• IT Project Lifecycle
• Managing performance
• Prioritization
• Report Writing
• Risk Management
• Stakeholder Management
• Technology Risk Management

Equal Employment Opportunity

QBE is an equal opportunity employer and is required to comply with equal employment opportunity legislation in each jurisdiction it operates.