IT Risk and Governance Analyst

JR United Kingdom; Bradford; On-site; GBP 35,000 - 55,000; Full time

Job summary

A leading company is seeking an IT Risk and Governance Analyst for a 3-month contract in Bradford. The role involves implementing a new IT risk management framework, analyzing technology risks, and supporting governance frameworks. Ideal candidates should have a background in enterprise technology services and experience with tools like PowerBI and Python.

Qualifications

• Experience in enterprise technology services including ITIL and asset management.
• Understanding of cloud, cybersecurity, and enterprise IT environments.
• Experience in deploying and operating IT controls.

Responsibilities

• Assist in implementing risk identification strategies and workshops.
• Review and analyze technology issues and risk events.
• Prepare reports on technology risk and governance performance.

Skills

Analytical thinking

Attention to detail

Project management

Risk management

Tools

PowerBI

Tableau

PowerAutomate

Python

Job description

Social network you want to login/join with:

IT Risk and Governance Analyst, Bradford

Client: Pearson Whiffin Recruitment Group

Location: Bradford, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 4

Posted: 04.06.2025

Expiry Date: 19.07.2025

Job Description:

IT Risk and Governance Analyst – Bradford – 3 month contract

We are seeking an analytical mind, with an eye for detail, procedures and technical acumen, to help the business implement and run a new IT risk management framework. This role supports a Technology Transformation Programme and maintains oversight over current operational technology and applications.

• Assist in implementing risk identification control strategies, working with multiple teams to create learning materials, templates, and facilitate workshops.
• Support horizon scanning exercises to identify new and emerging risks, collaborating with Legal and Compliance teams to monitor regulatory changes.
• Manage changes to a risk taxonomy and reference library to support technology risk identification and assessment.

2. Risk and event analysis

• Review, triage, and analyze internal and external technology issues and risk events; update knowledge bases to support organizational learning.
• Assist in change reviews, Risk Control Self-Assessment exercises, control testing, and thematic deep dives.
• Support vendor risk assessments, controls assurance, and compliance attestations for clients and third parties.

3. Risk controls and management

• Assist in developing the technology governance framework and controls reference library.
• Support management of the IT controls library, including reviewing change requests and analyzing control performance.
• Support GRC platform operations, including writing runbooks and engaging feedback for service improvements.

4. Risk governance and compliance

• Manage the service interface for Technology Service Governance, providing information, managing demand, and capturing metrics.
• Ensure accurate record-keeping of governance decisions and support audit processes.

5. Reporting & documentation

• Prepare reports on technology risk and governance performance.
• Maintain documentation for procedures, project updates, and client interactions.
• Develop new risk visualizations to improve communication.
• Promote learning and awareness campaigns within the business.
• Research and develop technology risk models to enhance services.
• Support team learning and development initiatives.

Education, Qualifications, Knowledge, Skills, and Experience:

• Experience in enterprise technology services, including support or administration, ITIL, and asset management.
• Understanding of enterprise IT environments, including cloud, cybersecurity, and applications.
• Experience deploying and operating IT controls and procedures.
• Knowledge of IT Governance, Risk, and Compliance frameworks.
• Experience creating reports with PowerBI, Tableau, or similar tools.
• Ability to automate tasks using PowerAutomate, Python, or similar.