IT Risk and Governance Analyst

JR United Kingdom; Basildon; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading company is seeking an IT Risk and Governance Analyst to support their Technology Transformation Programme. The role involves implementing a new IT risk management framework, working with various teams to ensure effective governance, and enhancing compliance through detailed reporting and analysis. The ideal candidate will possess strong analytical skills and a solid understanding of technology risk, governance frameworks, and IT operations.

Qualifications

• Experience in enterprise technology services, including support or administration.
• Understanding of enterprise IT environments, including cloud and cybersecurity.
• Ability to analyze data and create reports using BI tools.

Responsibilities

• Assist in implementing risk identification control strategies.
• Support vendor risk assessments and controls assurance.
• Prepare and present reports on technology risk and governance performance.

Skills

Data Analysis

Risk Management

IT Governance

Cloud Computing

Cybersecurity

Automation

Education

Experience in ITIL

Knowledge of IT Governance frameworks

Tools

PowerBI

Tableau

PowerAutomate

Python

Job description

Social network you want to login/join with:

IT Risk and Governance Analyst, Basildon

Client: Pearson Whiffin Recruitment Group

Location: Basildon, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 4

Posted: 04.06.2025

Expiry Date: 19.07.2025

Job Description:

IT Risk and Governance Analyst – London – 3 month contract

We are seeking an analytical mind, with an eye for detail, procedures and technical acumen, to help the business implement and run a new IT risk management framework. This role supports a Technology Transformation Programme and maintains oversight over current operational technology and applications.

• Assist in implementing risk identification control strategies, working with multiple teams to create learning materials, templates, and facilitate workshops.
• Support horizon scanning exercises to identify new and emerging risks, working with Legal and Compliance teams to monitor regulatory changes.
• Manage changes to a risk taxonomy and reference library to support technology risk identification and assessment.

2. Risk and event analysis

• Review, triage, and analyze internal and external technology issues and risk events, providing updates for a knowledge base.
• Assist in change reviews, Risk Control Self-Assessment exercises, control testing, and thematic deep dives.
• Support vendor risk assessments, controls assurance, and compliance attestations for clients and third parties.

3. Risk controls and management

• Assist in developing the technology governance framework and controls reference library, and support policy development.
• Support management of the IT controls library, including reviewing change requests and analyzing control performance.
• Support GRC platform operations, including writing runbooks and engaging feedback for service improvements.

4. Risk governance and compliance

• Manage the service interface for Technology Service Governance, including information provision and demand management.
• Ensure accurate record keeping of governance decisions and track policy and strategy exceptions.
• Support audits, certifications, and resolution of audit findings.

5. Reporting & documentation

• Prepare and present reports on technology risk and governance performance.
• Maintain documentation for governance procedures, project updates, and client interactions.
• Develop new risk visualizations to improve communication.
• Collaborate with Technology Service teams to promote learning and awareness campaigns.
• Research and develop new risk modeling techniques to enhance services.
• Support learning and development within the team.

Education, Qualifications, Knowledge, Skills and Experience:

• Experience in enterprise technology services, including support or administration, ITIL, and asset management.
• Understanding of enterprise IT environments, including cloud, cybersecurity, and applications.
• Experience deploying and operating IT controls and procedures.
• Knowledge of IT Governance, Risk, and Compliance frameworks.
• Ability to analyze data and create reports using PowerBI, Tableau, or similar tools.
• Proficiency in scripting or automation with PowerAutomate, Python, or similar.