IT Risk and Policy Analyst

WATES; Leatherhead; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading construction firm in Leatherhead seeks an IT Risk, Policy & Training Analyst. This role focuses on managing IT risks, ensuring compliance with GDPR, and promoting strong IT governance. Ideal candidates should have some IT experience and a keen interest in risk and compliance. The position offers a competitive salary, flexible working, and industry-leading benefits.

Benefits

Competitive salary & bonus

Flexible working

Car Allowance / Company Car

Travel covered to any of our sites

Extensive corporate benefits

Learning and development opportunities

Family leave benefits

Qualifications

• Experience in an IT function or audit/governance role.
• Knowledge of IT risk management and compliance.
• Understanding of GDPR requirements is a plus.

Responsibilities

• Manage IT Risk Register inputs and outcomes.
• Liaise with teams to meet SLAs.
• Identify and address policy/procedure gaps.

Skills

Communication Skills

Analytical Skills

Organizational Skills

Interpersonal Skills

Education

ITIL Certification

IT Risk Management Certification

Tools

Microsoft Office

Job description

The Vacancy

The IT Risk, Policy & Training Analyst is responsible for managing IT risks, monitoring audit actions, maintaining IT policies and procedures, and supporting GDPR compliance. The role ensures effective governance and compliance across IT processes, providing a framework for the identification, mitigation, and management of risks.

This position is mostly focused on governance aspects, ensuring alignment with company standards and regulatory requirements, while fostering collaboration across teams to embed robust IT practices:

• Ensuring that all IT risk and IT audit actions are highlighted, monitored, and escalated where appropriate.
• Maintaining the suite of IT policies and procedures.
• Providing support to the Privacy Team in ensuring GDPR compliance.

Candidates will ideally have had some exposure to the above, and have a keen interest in developing a career in IT governance, risk and compliance (GRC).

Main accountabilities

• Assisting in managing IT Risk Register inputs and outcomes, liaising with IT SLT & Group Assurance and external auditors as appropriate.
• Liaising with other teams to ensure SLAs in scope are met.
• Identifying policy/procedure gaps and working with SMEs to create the material.
• Managing review process for existing IT policies and procedures, updating, or archiving as required.
• Building strong relationships in IT & across the business to facilitate the adoption of agreed IT policies and procedures.
• Assisting with tracking the annual DR testing programme.
• Assisting the Privacy Team in ensuring DPIAs are completed where required.

Knowledge

• Some experience of working in an IT function or in an audit/governance role.
• Knowledge of IT risk management and IT governance, risk, and compliance (GRC) would be an advantage but not essential.
• Understanding of GDPR requirements would be an advantage but not essential.
• Experienced Microsoft Office user (Word, Excel and PowerPoint).

Qualifications

• ITIL trained would be an advantage but not essential.
• IT risk management certification would be an advantage, otherwise a desire to work towards achieving formal qualification.

Skills

• Excellent oral and written communication skills, with high attention to detail.
• Ability to produce high quality, detailed outputs.
• Good analytical skills.
• Highly organised and able to implement and manage robust governance processes.
• Strong relationship building and interpersonal skills across a wide range of stakeholders.

WHAT WE OFFER

• Competitive salary & bonus.
• Flexible working.
• Car Allowance / Company Car (subject to Role/Grade).
• Travel covered to any of our sites (subject to HMRC advisory rates).
• Extensive corporate benefits including Private Medical, Pension 8% employers’ contribution, Health and Wellness programme, 26 days holidays + bank holidays and much more…
• Excellent range of learning and development activity to support your career progression.
• Industry leading family leave benefits to include 26 weeks fully paid maternity, 8 weeks fully paid paternity.

Given the nature of this position, you will need to undergo a Basic Disclosure and Barring Service Check (DBS) at offer stage. Applicants with criminal convictions will be assessed individually, and we assure you that we do not discriminate based on an applicant’s criminal record or the details of any disclosed offenses. Additionally, certain roles may be subject to additional pre‑employment checks.

Work for Wates

Wates is one of the UK’s leading family‑owned development, building and property maintenance companies. Founded over 125 years ago, we have a proud legacy in the built environment.

We are driven by our purpose, ‘reimagining places for people to thrive’ and our three promises:

• Thriving places – working with customers, partners and communities to create places that are more sustainable, inclusive, and full of opportunity.
• Thriving planet – protecting nature and taking action on climate change by collaborating and innovating with our partners.
• Thriving people – creating opportunities and relationships so that everyone who works for and with us feels included, invested in and treated with care.

We are proud to be recognised as Gold Investors in People and as a Disability Confident employer. We also ensure that our recruitment processes do not treat anyone less favourably due to an offending background.