IT Risk and Governance Analyst

JR United Kingdom; Worcester; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading company in technology services is seeking an IT Risk and Governance Analyst for a 3-month contract in Worcester. This role focuses on implementing a new IT risk management framework while supporting the Technology Transformation Programme. The ideal candidate will have experience in enterprise technology services, ITIL, and GRC frameworks. Responsibilities include risk analysis, maintaining governance documentation, and supporting compliance processes.

Qualifications

• Experience with enterprise technology services and ITIL.
• Understanding of enterprise IT environments including cloud systems.
• Experience with IT controls and GRC frameworks.

Responsibilities

• Assist in implementing risk management frameworks and operational oversight.
• Review and analyze technology risk events.
• Prepare reports on technology risk and governance performance.

Skills

ITIL

Asset Management

Automation

PowerBI

Tableau

Python

Cybersecurity

Job description

Social network you want to login/join with:

IT Risk and Governance Analyst, Worcester

Client: Pearson Whiffin Recruitment Group

Location: Worcester, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 4

Posted: 04.06.2025

Expiry Date: 19.07.2025

Job Description:

IT Risk and Governance Analyst – Worcester – 3 month contract

We are seeking an analytical mind, with an eye for detail, procedures, and technical acumen, to help the business implement and run a new IT risk management framework. This role supports a Technology Transformation Programme and maintains oversight over current operational technology and applications.

• Assist in implementing risk identification control strategies, working with multiple teams to create learning materials, templates, and facilitate workshops.
• Support horizon scanning exercises to identify new and emerging risks, working with Legal and Compliance teams to monitor regulatory changes.
• Manage changes to a risk taxonomy and reference library to support technology risk identification and assessment.

2. Risk and Event Analysis

• Review, triage, and analyze internal and external technology issues and risk events, providing updates for a knowledge base.
• Assist in change reviews, Risk Control Self-Assessment exercises, control testing, and thematic deep dives.
• Support vendor risk assessments, controls assurance, and compliance attestations for third parties.

3. Risk Controls and Management

• Assist in developing the technology governance framework and controls library, supporting policy and procedure development.
• Manage the IT controls library, reviewing change requests and analyzing control performance.
• Support GRC platform operations, including writing runbooks and improving service design.

4. Risk Governance and Compliance

• Manage the service interface for Technology Service Governance, including FAQs and metrics analysis.
• Ensure accurate record-keeping of governance decisions and support audit processes.

5. Reporting & Documentation

• Prepare reports on technology risk and governance performance.
• Maintain documentation for procedures, updates, and client interactions.
• Develop new risk visualizations and promote awareness campaigns.
• Research new technology and risk modeling techniques.
• Support team learning and development.

Education, Qualifications, Knowledge, Skills, and Experience:

• Experience with enterprise technology services, ITIL, and asset management.
• Understanding of enterprise IT environments, including cloud and cybersecurity systems.
• Experience deploying and operating IT controls and procedures.
• Knowledge of IT Governance, Risk, and Compliance frameworks.
• Experience creating PowerBI, Tableau reports, or similar.
• Ability to automate tasks using PowerAutomate, Python, or similar.