IT Risk and Governance Analyst

JR United Kingdom; Nottingham; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading company is seeking an IT Risk and Governance Analyst to support the implementation of a new IT risk management framework in Nottingham. This 3-month contract role involves assisting with risk control strategies, conducting risk analysis, and maintaining compliance documentation, geared towards enhancing technology governance and oversight.

Qualifications

• Experience in ITIL and asset management.
• Ability to analyze data and create reports.
• Knowledge of IT governance frameworks.

Responsibilities

• Implement risk identification control strategies.
• Support horizon scanning for emerging risks.
• Prepare reports on technology risk and governance performance.

Skills

Risk analysis

Data analysis

Automation scripting

IT governance

Cybersecurity knowledge

Education

Experience in enterprise technology services

Understanding of IT governance, risk, and compliance frameworks

Tools

PowerBI

Tableau

PowerAutomate

Python

Job description

Social network you want to login/join with:

IT Risk and Governance Analyst, Nottingham

Client: Pearson Whiffin Recruitment Group

Location: Nottingham, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 4

Posted: 04.06.2025

Expiry Date: 19.07.2025

Job Description:

IT Risk and Governance Analyst – Nottingham – 3 month contract

We are seeking an analytical mind, with an eye for detail, procedures, and technical acumen, to help the business implement and run a new IT risk management framework. This is a role supporting a Technology Transformation Programme and maintaining oversight of current operational technology and applications.

• Assist in implementing risk identification control strategies, working with multiple teams to create learning materials, templates, and facilitate workshops.
• Support horizon scanning exercises to identify emerging risks, working with Legal and Compliance teams to monitor regulatory changes.
• Manage changes to risk taxonomy and reference library to support technology risk assessment.

2. Risk and event analysis

• Review and analyze internal and external technology issues and risk events, providing updates for organizational learning.
• Assist in change reviews, Risk Control Self-Assessment exercises, control testing, and thematic deep dives.
• Support vendor risk assessments, controls assurance, and compliance attestations with the Third Party Risk & Assurance Specialist.

3. Risk controls and management

• Assist in developing the technology governance framework and controls reference library.
• Support management of the IT controls library, reviewing change requests and analyzing control performance.
• Support GRC platform operations, including writing runbooks and improving service design.

4. Risk governance and compliance

• Manage service interface for Technology Service Governance, including FAQs, demand management, and metrics analysis.
• Ensure accurate record keeping of governance decisions and support audits and certifications.

5. Reporting & documentation

• Prepare reports on technology risk and governance performance.
• Maintain documentation for procedures, project updates, and client interactions.
• Develop technology risk visualizations to enhance communication.
• Collaborate with Technology Service teams for learning and awareness campaigns.
• Research and develop new risk modeling techniques.
• Support team learning and development.

Education, Qualifications, Knowledge, Skills and Experience:

• Experience in Enterprise technology services, including support or administration, ITIL, and asset management.
• Understanding of enterprise IT environments, cloud, cybersecurity, and applications.
• Experience deploying and operating IT controls and procedures.
• Knowledge of IT Governance, Risk, and Compliance frameworks.
• Ability to analyze data and create reports using PowerBI, Tableau, or similar tools.
• Skills in scripting automation tasks with PowerAutomate, Python, or similar.