IT Risk & Compliance Analyst — Hybrid, Midlands

Delaney & Bourton; England; Hybrid; GBP 50,000 - 55,000; Full time

Benefits offered by this job

10% pension

Private health

Hybrid working policy

Job summary

A leading UK household name is seeking an IT Risk & Compliance Analyst to embed IT governance frameworks across the Group. This role involves establishing IT risk and compliance processes, supporting audits, and collaborating with various teams to enhance governance. Candidates should have experience in IT compliance or audit, knowledge of frameworks like GDPR and PCI DSS, and strong analytical skills. The position offers a salary of £50,000-£55,000 with additional benefits, including a hybrid working policy.

Qualifications

• Experience in IT compliance, IT audit, or technical risk within a large or complex organisation.
• Knowledge of key frameworks such as NIST, PCI DSS, GDPR, and ITGC/ITAC.
• Strong analytical and reporting skills; able to interpret complex data.
• Excellent stakeholder and communication skills; able to influence across teams.

Responsibilities

• Establish and embed IT Risk, IT Compliance and ITGC frameworks across Group IT.
• Review control effectiveness and support remediation activity.
• Support internal and external IT audits, ensuring controls are maintained.
• Maintain risk registers and lead vendor cyber-risk reviews.
• Produce and maintain compliance dashboards and reports.
• Collaborate closely with Legal, Audit, HR and Information Security teams.

Skills

IT compliance

IT audit

Technical risk management

Analytical skills

Stakeholder communication

Education

CISA or similar qualification

Tools

NIST

PCI DSS

GDPR

ITGC/ITAC

Job description

A leading UK household name is seeking an IT Risk & Compliance Analyst to embed IT governance frameworks across the Group. This role involves establishing IT risk and compliance processes, supporting audits, and collaborating with various teams to enhance governance. Candidates should have experience in IT compliance or audit, knowledge of frameworks like GDPR and PCI DSS, and strong analytical skills. The position offers a salary of £50,000-£55,000 with additional benefits, including a hybrid working policy.