IT Risk and Governance Analyst

JR United Kingdom; Preston; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading company in the UK is seeking an IT Risk and Governance Analyst for a 3-month contract in Preston. This multifaceted role supports the implementation of an IT risk management framework, requiring analytical skills, attention to detail, and prior experience in enterprise technology services. You will collaborate with teams to enhance governance processes and ensure compliance, making an impact on critical business operations.

Qualifications

• Experience in enterprise technology services, support, or administration.
• Understanding of enterprise IT environments, including cloud and corporate applications.
• Experience creating reports with PowerBI, Tableau or similar tools.

Responsibilities

• Assist the implementation of risk identification control strategies.
• Review, triage, and analyze internal and external technology issues.
• Prepare reports on technology risk and governance performance.

Skills

ITIL

Asset Management

Cybersecurity

Risk Management

PowerBI

Python

Job description

IT Risk and Governance Analyst – Preston, Lancashire – 3 month contract

We are seeking an analytical mind, with an eye for detail, procedures, and technical acumen, to help the business implement and run a new IT risk management framework. This is a multi-faceted role supporting both a Technology Transformation Programme as well as maintaining oversight over current operational technology and applications.

1. Assist the implementation of risk identification control strategies: Work with multiple teams to create learning material, templates, and facilitate workshops.
2. Support horizon scanning exercises: Identify new and emerging risks, working with Legal and Compliance teams to monitor regulatory changes.
3. Manage changes to risk taxonomy: Support updates to the reference library for technology risk identification and assessment.

2. Risk and Event Analysis

1. Review, triage, and analyze internal and external technology issues and risk events, providing updates for a knowledge base.
2. Assist with change reviews, Risk Control Self-Assessment exercises, control testing, and thematic deep dives.
3. Support vendor risk assessments, controls assurance, and compliance attestations with the Third Party Risk & Assurance Specialist.

3. Risk Controls and Management

1. Assist in developing the technology governance framework and controls reference library.
2. Support the management of the IT controls library, including reviewing change requests and analyzing control performance.
3. Support GRC platform operations, including writing runbooks and engaging feedback for service improvements.

4. Risk Governance and Compliance

1. Manage the service interface for Technology Service Governance, including FAQs and metrics analysis.
2. Keep records of governance decisions and track policy and strategy exceptions.
3. Support audits, certifications, and resolution of audit findings.

5. Reporting & Documentation

1. Prepare reports on technology risk and governance performance.
2. Maintain documentation for procedures, project updates, and client interactions.
3. Research and develop new technology risk visualizations.
4. Collaborate with Technology Service teams to promote learning and awareness campaigns.
5. Research new technology and risk modeling techniques to improve services.
6. Support the development of team members within the Technology Services Governance team.

Qualifications, Skills, and Experience

• Experience in enterprise technology services, support, or administration, including ITIL and asset management.
• Understanding of enterprise IT environments, including cloud, cybersecurity, and corporate applications.
• Experience deploying and operating IT controls and procedures.
• Knowledge of IT Governance, Risk, and Compliance frameworks.
• Experience creating reports with PowerBI, Tableau, or similar tools.
• Ability to automate tasks using PowerAutomate, Python, or similar scripting languages.