IT Risk and Governance Analyst

JR United Kingdom; Bedford; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading company in the technology sector is seeking an IT Risk and Governance Analyst for a 3-month contract in London. The role involves managing risk frameworks and overseeing technology governance while collaborating with various teams to enhance operational compliance. Ideal candidates will possess strong analytical skills and proficiency in data analysis tools. This position offers an exciting opportunity to contribute to a technology transformation programme.

Qualifications

• Experience in enterprise technology services/support and asset management.
• Knowledge of cloud and cybersecurity applications.
• Familiarity with IT governance frameworks.

Responsibilities

• Oversee operational technology and applications.
• Collaborate on risk strategies and control development.
• Develop the technology governance framework and manage IT controls.

Skills

Analytical skills

Attention to detail

Knowledge of IT environments

Data analysis

Automation skills (PowerAutomate, Python)

Tools

PowerBI

Tableau

Job description

IT Risk and Governance Analyst – London – 3 month contract

We are seeking an analytical individual with attention to detail, procedures, and technical skills to help implement and manage a new IT risk management framework. This role supports a Technology Transformation Programme and oversees current operational technology and applications.

Responsibilities include:

1. Risk identification and control strategies: Collaborate with teams to develop learning materials, templates, and facilitate workshops.
2. Horizon scanning: Monitor regulatory changes with Legal and Compliance teams to identify emerging risks.
3. Risk taxonomy management: Update and maintain risk reference libraries for technology risk assessment.

Risk and event analysis

1. Review and analyze technology issues and risk events, maintaining a knowledge base for organizational learning.
2. Assist in change reviews, Risk Control Self-Assessments, control testing, and deep dives.
3. Support vendor risk assessments and compliance attestations alongside the Third Party Risk & Assurance Specialist.

Risk controls and management

1. Develop and maintain the technology governance framework, policies, standards, and procedures.
2. Manage the IT controls library, review change requests, and analyze control performance.
3. Support GRC platform operations, including writing runbooks and implementing improvements.

Risk governance and compliance

1. Manage the Technology Service Governance interface, including FAQs, demand management, and metrics analysis.
2. Maintain records of governance decisions and track policy exceptions and risk acceptances.
3. Assist with audits, certifications, and resolving audit findings.

Reporting & documentation

1. Prepare reports on risk and governance performance.
2. Maintain documentation for procedures, updates, and client interactions.
3. Develop risk visualizations to improve communication.
4. Promote learning through awareness campaigns and training.
5. Research new technologies and risk models to enhance services.
6. Support team development and knowledge sharing.

Qualifications and Skills

• Experience in enterprise technology services/support, ITIL, and asset management.
• Knowledge of enterprise IT environments, cloud, cybersecurity, and applications.
• Experience with IT controls, procedures, and governance frameworks.
• Proficiency in data analysis and reporting tools like PowerBI or Tableau.
• Ability to automate tasks using PowerAutomate, Python, or similar.