IT Risk and Governance Analyst

JR United Kingdom; Basingstoke; On-site; GBP 45,000 - 60,000; Full time

Job summary

A leading recruitment agency is seeking an IT Risk and Governance Analyst for a 3-month contract in Basingstoke. The role involves developing and implementing a risk management framework, performing risk analysis, and supporting compliance with IT governance standards. Candidates should possess strong analytical skills and experience in risk management.

Qualifications

• Experience with enterprise technology services and ITIL.
• Understanding cloud, cybersecurity, and applications.
• Experience in IT controls and compliance frameworks.

Responsibilities

• Assist in implementing risk strategies and facilitate workshops.
• Review and analyze technology risk events.
• Prepare reports on governance performance and maintain documentation.

Skills

Data Analysis

Risk Management

Compliance

IT Governance

Automation

Tools

PowerBI

Tableau

PowerAutomate

Python

Job description

Social network you want to login/join with:

IT Risk and Governance Analyst, Basingstoke

Client: Pearson Whiffin Recruitment Group

Location: Basingstoke

Job Category: Other

EU work permit required: Yes

Job Views:

4

Posted:

04.06.2025

Expiry Date:

19.07.2025

Job Description:

IT Risk and Governance Analyst – Basingstoke – 3 month contract

We are seeking an analytical mind, with an eye for detail, procedures and technical acumen, to help the business implement and run a new IT risk management framework. This role supports a Technology Transformation Programme and maintains oversight over current operational technology and applications.

• Assist in implementing risk identification control strategies; working with multiple teams to create learning materials, templates, and facilitate workshops.
• Support horizon scanning exercises to identify new and emerging risks, working with Legal and Compliance teams to monitor regulatory changes.
• Manage changes to a risk taxonomy and reference library to support technology risk identification and assessment.

Risk and event analysis

• Review, triage, and analyze internal and external technology issues and risk events; provide updates for a knowledge base to support continuous learning.
• Assist in change reviews, Risk Control Self-Assessment exercises, control testing, and deep dives.
• Support vendor risk assessments, controls assurance, and compliance attestations.

Risk controls and management

• Assist in developing the technology governance framework and controls reference library; support policy, standards, and procedures development.
• Manage the IT controls library, review change requests, and analyze control performance.
• Support GRC platform operations, including writing runbooks and engaging feedback for service improvements.

Risk governance and compliance

• Manage the service interface for Technology Service Governance, including FAQs and metrics analysis.
• Ensure accurate record-keeping of governance decisions and track policy exceptions and risk acceptances.
• Support audits, certifications, and address audit findings.

Reporting & documentation

• Prepare reports on technology risk and governance performance.
• Maintain documentation for procedures, project updates, and audits.
• Develop new risk visualizations for better communication.
• Promote learning and awareness campaigns within the business.
• Research new technologies and risk models to enhance services and personal knowledge.
• Support team development and knowledge sharing.

Qualifications, Knowledge, Skills, and Experience:

• Experience with enterprise technology services, support, or administration, including ITIL and asset management.
• Understanding of enterprise IT environments, including cloud, cybersecurity, and applications.
• Experience deploying and operating IT controls and procedures.
• Knowledge of IT Governance, Risk, and Compliance frameworks.
• Ability to analyze data and create reports using PowerBI, Tableau, or similar tools.
• Skills in scripting or automation with PowerAutomate, Python, or similar.