IT Risk & Compliance Analyst

Delaney & Bourton; United Kingdom; Hybrid; GBP 50,000 - 55,000; Full time

Benefits offered by this job

10% pension

Private health

Hybrid working policy

Job summary

A leading UK household name is seeking an IT Risk & Compliance Analyst to embed IT governance frameworks across the Group. This role involves establishing IT risk and compliance processes, supporting audits, and collaborating with various teams to enhance governance. Candidates should have experience in IT compliance or audit, knowledge of frameworks like GDPR and PCI DSS, and strong analytical skills. The position offers a salary of £50,000-£55,000 with additional benefits, including a hybrid working policy.

Qualifications

• Experience in IT compliance, IT audit, or technical risk within a large or complex organisation.
• Knowledge of key frameworks such as NIST, PCI DSS, GDPR, and ITGC/ITAC.
• Strong analytical and reporting skills; able to interpret complex data.
• Excellent stakeholder and communication skills; able to influence across teams.

Responsibilities

• Establish and embed IT Risk, IT Compliance and ITGC frameworks across Group IT.
• Review control effectiveness and support remediation activity.
• Support internal and external IT audits, ensuring controls are maintained.
• Maintain risk registers and lead vendor cyber-risk reviews.
• Produce and maintain compliance dashboards and reports.
• Collaborate closely with Legal, Audit, HR and Information Security teams.

Skills

IT compliance

IT audit

Technical risk management

Analytical skills

Stakeholder communication

Education

CISA or similar qualification

Tools

NIST

PCI DSS

GDPR

ITGC/ITAC

Job description

IT Risk & Compliance Analyst | Hybrid, North Leicestershire (or another Midlands office) | £50,000-£55,000 + Bonus

We're working with a FTSE listed UK household name to recruit an IT Risk & Compliance Analyst to help shape and embed their IT Governance, Risk & Compliance frameworks across the Group.

You’ll be joining a business that’s investing heavily in its IT and security landscape, with a genuine commitment to strong governance and continuous improvement. This is your chance to make a tangible impact by helping build a best-in-class compliance culture.

What you’ll be doing:

• Helping to establish and embed IT Risk, IT Compliance and IT General Control (ITGC) frameworks across Group IT.
• Acting as part of the second line of defence, reviewing control effectiveness and supporting remediation activity.
• Supporting internal and external IT audits, ensuring controls and documentation are maintained.
• Operating risk management processes, including maintaining risk registers and leading vendor cyber-risk reviews.
• Producing and maintaining compliance dashboards, reports and data for senior stakeholders.
• Collaborating closely with Legal, Audit, HR and Information Security teams to strengthen governance.

What we’re looking for:

• Experience in IT compliance, IT audit, or technical risk within a large or complex organisation.
• Knowledge of key frameworks such as NIST, PCI DSS, GDPR, and ITGC/ITAC.
• Strong analytical and reporting skills. Able to interpret complex data and communicate insights clearly.
• Excellent stakeholder and communication skills; confident influencing across business and IT teams.
• CISA or similar qualification is advantageous but not essential.

£50,000 + bonus + 10% pension + private health. The company have a hybrid working policy, where you can work from the HQ in North Leicestershire 2-3 days p/week (There is also the option to work from one of their many other offices around the Midlands if preferred).