IT Risk and Governance Analyst

JR United Kingdom; Shrewsbury; On-site; GBP 45,000 - 60,000; Full time

Job summary

A leading company in the IT sector seeks an analytical IT Risk and Governance Analyst for a 3-month contract in Shrewsbury. This role is crucial for implementing risk management frameworks and ensuring compliance, requiring strong expertise in IT governance and risk assessment. Candidates should have experience with automation scripting and data analytics tools like PowerBI.

Qualifications

• Experience in enterprise technology services, support, or administration.
• Understanding of enterprise IT environments, including cybersecurity.
• Knowledge of IT Governance, Risk, and Compliance frameworks.

Responsibilities

• Assist in implementing risk identification control strategies.
• Review and analyze technology issues and risk events.
• Prepare reports on technology risk and governance performance.

Skills

ITIL

Cybersecurity

Data Analysis

Risk Assessment

Automation Scripting

Tools

PowerBI

Python

PowerAutomate

Tableau

Job description

Social network you want to login/join with:

IT Risk and Governance Analyst, Shrewsbury

Client: Pearson Whiffin Recruitment Group

Location: Shrewsbury, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 4

Posted: 04.06.2025

Expiry Date: 19.07.2025

Job Description:

IT Risk and Governance Analyst – Shrewsbury – 3 month contract

We are seeking an analytical mind, with an eye for detail, procedures and technical acumen, to help the business implement and run a new IT risk management framework. This role supports both a Technology Transformation Programme and the oversight of current operational technology and applications.

• Assist in implementing risk identification control strategies, working with multiple teams to create learning materials, templates, and facilitate workshops.
• Support horizon scanning exercises to identify new and emerging risks, collaborating with Legal and Compliance teams to monitor regulatory changes.
• Manage changes to risk taxonomy and reference library to support technology risk identification and assessment.

Risk and Event Analysis

• Review, triage, and analyze internal and external technology issues and risk events, updating a knowledge base for organizational learning.
• Assist in change reviews, Risk Control Self-Assessment exercises, control testing, and thematic deep dives.
• Support vendor risk assessments, controls assurance, and compliance attestations.

Risk Controls and Management

• Assist in developing the technology governance framework and controls library, maintaining policies, standards, and procedures.
• Support management of the IT controls library, reviewing change requests and analyzing control performance.
• Support GRC platform operations, including writing runbooks and improving service design.

Risk Governance and Compliance

• Manage the service interface for Technology Service Governance, including FAQs, demand management, and metrics analysis.
• Ensure accurate record keeping of governance decisions and track policy exceptions and risk acceptances.
• Support audits, certifications, and resolution of audit findings.

Reporting & Documentation

• Prepare reports on technology risk and governance performance.
• Maintain documentation for procedures, project updates, and client interactions.
• Develop technology risk visualizations to enhance communication.
• Promote learning and awareness campaigns within the business.
• Research and develop new risk modeling techniques.
• Support team learning and development efforts.

Qualifications, Knowledge, Skills, and Experience:

• Experience in enterprise technology services, support, or administration, including ITIL and asset management.
• Understanding of enterprise IT environments, including cloud, cybersecurity, and applications.
• Experience deploying and operating IT controls and procedures.
• Knowledge of IT Governance, Risk, and Compliance frameworks.
• Ability to analyze data and create reports using PowerBI, Tableau, or similar tools.
• Proficiency in scripting automation tasks with PowerAutomate, Python, or similar.