Risk & Policy Analyst

Damia Group Ltd; England; Hybrid; GBP 35,000; Full time

Job summary

A recruitment agency is seeking an IT Risk & Policy Analyst in Leatherhead. The successful candidate will manage IT risks, support GDPR compliance, and maintain IT policies. Key skills include experience in IT functions, analytical abilities, and strong communication skills. The role offers a base salary of £35,000 per annum plus benefits, with a flexible on-site schedule of 2-3 days per week.

Qualifications

• Some experience in an IT or audit/governance role.
• Knowledge of IT risk management and compliance is an advantage.
• Understanding of GDPR requirements is advantageous.
• Experienced Microsoft Office user.

Responsibilities

• Manage IT risks and audit actions.
• Maintain IT policies and procedures.
• Support GDPR compliance efforts.
• Liaise with various teams to ensure service levels are met.
• Build strong relationships in IT to facilitate policy adoption.

Skills

Communication skills

Analytical skills

Organizational skills

Relationship building

Attention to detail

Education

ITIL training

IT risk management certification

Tools

Microsoft Office

Job description

IT Risk & Policy Analyst - Leatherhead (2-3 days per week) - 35,000 per annum base + benefits

The IT Risk & Policy Analyst is responsible for managing IT risks, monitoring audit actions, maintaining IT policies and procedures, and supporting GDPR compliance. The role ensures effective governance and compliance across IT processes, providing a framework for the identification, mitigation, and management of risks.

This position bridges technical and governance aspects, ensuring alignment with company standards and regulatory requirements, while fostering collaboration across teams to embed robust IT practices:

• Ensuring that all IT risk and IT audit actions are highlighted, monitored, and escalated where appropriate.
• Maintaining the suite of IT policies and procedures.
• Providing support to the Privacy Team in ensuring GDPR compliance.

Main accountabilities

• Assisting in managing IT Risk Register inputs and outcomes, liaising with IT SLT & Group Assurance and external auditors as appropriate.
• Liaising with other teams to ensure SLAs in scope are met.
• Identifying policy/procedure gaps and working with SMEs to create the material.
• Managing review process for existing IT policies and procedures, updating, or archiving as required
• Building strong relationships in IT & across the business to facilitate the adoption of agreed IT policies and procedures.
• Assisting with tracking the annual DR testing programme.
• Assisting the Privacy Team in ensuring DPIAs are completed where required.

Required skills and experience

• Some experience of working in an IT function or in an audit/governance role
• Knowledge of IT risk management and IT governance, risk, and compliance (GRC) would be an advantage but not essential.
• Understanding of cybersecurity risks and controls would be an advantage but not essential.
• Understanding of GDPR requirements would be an advantage but not essential.
• Experienced Microsoft Office user (Word, Excel and PowerPoint)

Qualifications

• ITIL trained would be an advantage but not essential.
• IT risk management or cybersecurity certification would be an advantage, otherwise a desire to work towards achieving formal qualification.

Skills

• Excellent oral and written communication skills, with high attention to detail
• Ability to produce high quality, detailed outputs.
• Good analytical skills
• Highly organised and able to implement and manage robust governance processes.
• Strong relationship building and interpersonal skills across a wide range of stakeholders.

Damia Group Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept our Data Protection Policy which can be found on our website.

Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and ability to perform the duties of the job.

Damia Group is acting as an Employment Business in relation to this vacancy and in accordance to Conduct Regulations 2003.