IT Risk and Governance Analyst

JR United Kingdom; Oxford; On-site; GBP 40,000 - 60,000; Full time

Job summary

A leading company in the tech sector is seeking an IT Risk and Governance Analyst for a 3-month contract based in Oxford. The ideal candidate will be responsible for implementing a new IT risk management framework, engaging in risk analysis, developing reporting tools, and supporting compliance efforts. This position requires a strong analytical mind and relevant experience in IT governance and operations.

Qualifications

• Experience in enterprise technology services, including ITIL and asset management.
• Understanding of enterprise IT environments, including cloud and cybersecurity.
• Experience deploying and operating IT controls and procedures.

Responsibilities

• Assist the implementation of risk identification control strategies.
• Review and analyze internal and external technology issues.
• Prepare reports on technology risk and governance performance.

Skills

Risk management

IT Governance

Compliance

Analytical skills

Attention to detail

Automation

Education

Experience in enterprise technology services

Knowledge of IT Governance, Risk, and Compliance frameworks

Experience creating reports with PowerBI, Tableau, or similar tools

Tools

PowerBI

Tableau

PowerAutomate

Python

Job description

Social network you want to login/join with:

IT Risk and Governance Analyst, oxford district

Client: Pearson Whiffin Recruitment Group

Location: oxford district, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 4

Posted: 04.06.2025

Expiry Date: 19.07.2025

Job Description:

IT Risk and Governance Analyst – Oxford – 3 month contract

We are seeking an analytical mind, with an eye for detail, procedures, and technical acumen, to help the business implement and run a new IT risk management framework. This role supports a Technology Transformation Programme and oversees current operational technology and applications.

• Assist the implementation of risk identification control strategies, working with teams to create learning materials, templates, and facilitate workshops.
• Support horizon scanning exercises across the business to identify new and emerging risks, working with Legal and Compliance teams to monitor regulatory changes.
• Manage changes to a risk taxonomy and reference library to support technology risk identification and assessment.

2. Risk and event analysis

• Review, triage, and analyze internal and external technology issues and risk events, updating a knowledge base for organizational learning.
• Assist in change reviews, Risk Control Self-Assessment exercises, control testing, and deep dives into technology issues and risks.
• Support vendor risk assessments, controls assurance, and compliance attestations with the Third Party Risk & Assurance Specialist.

3. Risk controls and management

• Assist in developing the technology governance framework and controls library, maintaining policies, standards, and procedures.
• Support the management of the IT controls library, reviewing change requests and analyzing control performance.
• Support GRC platform operations, including writing runbooks, feedback, and process improvements.

4. Risk governance and compliance

• Manage the service interface for Technology Service Governance, providing information, managing demand, and analyzing metrics.
• Ensure accurate record keeping of governance decisions, policy exceptions, and risk acceptances.
• Support audits, certifications, and resolution of audit findings.

5. Reporting & documentation

• Prepare reports on technology risk and governance performance.
• Maintain documentation for procedures, updates, and client interactions.
• Develop technology risk visualizations to enhance communication.
• Work with teams to promote learning, awareness campaigns, and training.
• Research new risk modeling techniques to improve services and personal knowledge.
• Support team learning and development.

Education, Qualifications, Knowledge, Skills and Experience:

• Experience in enterprise technology services, support, or administration, including ITIL and asset management.
• Understanding of enterprise IT environments, including cloud, cybersecurity, and applications.
• Experience deploying and operating IT controls and procedures.
• Knowledge of IT Governance, Risk, and Compliance frameworks.
• Experience creating reports with PowerBI, Tableau, or similar tools.
• Ability to automate tasks with PowerAutomate, Python, or similar.