Risk & Policy Analyst

Damia Group Ltd; Leatherhead; On-site; GBP 35,000; Full time

Job summary

A technology solutions firm in Leatherhead is looking for an IT Risk & Policy Analyst to manage IT risks and ensure compliance across IT processes. The role involves maintaining IT policies, supporting GDPR compliance, and liaising with various teams to ensure effective governance. Ideal candidates will have experience in IT or governance roles and strong communication and analytical skills. The position offers a salary of £35,000 per annum plus benefits.

Qualifications

• Experience in an IT function or in an audit/governance role.
• Knowledge of IT risk management and compliance is a plus.
• Understanding of cybersecurity risks and controls is an advantage.
• Understanding of GDPR requirements is a plus.

Responsibilities

• Manage IT risks and monitor audit actions.
• Maintain IT policies and procedures.
• Support GDPR compliance.
• Liaise with teams to meet SLAs.
• Identify policy gaps and work to create material.

Skills

Excellent oral and written communication skills

Attention to detail

Analytical skills

Organizational skills

Interpersonal skills

Education

IT risk management or cybersecurity certification

Tools

Microsoft Office (Word, Excel, PowerPoint)

Job description

IT Risk & Policy Analyst - Leatherhead (2-3 days per week) - £35,000 per annum base + benefits

The IT Risk & Policy Analyst is responsible for managing IT risks, monitoring audit actions, maintaining IT policies and procedures, and supporting GDPR compliance. The role ensures effective governance and compliance across IT processes, providing a framework for the identification, mitigation, and management of risks.

Main accountabilities

• Ensuring that all IT risk and IT audit actions are highlighted, monitored, and escalated where appropriate.
• Maintaining the suite of IT policies and procedures.
• Providing support to the Privacy Team in ensuring GDPR compliance.
• Assisting in managing IT Risk Register inputs and outcomes, liaising with IT SLT & Group Assurance and external auditors as appropriate.
• Liaising with other teams to ensure SLAs in scope are met.
• Identifying policy / procedure gaps and working with SMEs to create the material.
• Managing review process for existing IT policies and procedures, updating, or archiving as required.
• Building strong relationships in IT & across the business to facilitate the adoption of agreed IT policies and procedures.
• Assisting with tracking the annual DR testing programme.
• Assisting the Privacy Team in ensuring DPIAs are completed where required.

Required skills and experience

• Some experience of working in an IT function or in an audit / governance role.
• Knowledge of IT risk management and IT governance, risk, and compliance (GRC) would be an advantage but not essential.
• Understanding of cybersecurity risks and controls would be an advantage but not essential.
• Understanding of GDPR requirements would be an advantage but not essential.
• Experienced Microsoft Office user (Word, Excel and PowerPoint).

Qualifications

• ITIL trained would be an advantage but not essential.
• IT risk management or cybersecurity certification would be an advantage, otherwise a desire to work towards achieving formal qualification.

Skills

• Excellent oral and written communication skills, with high attention to detail.
• Ability to produce high quality, detailed outputs.
• Good analytical skills.
• Highly organised and able to implement and manage robust governance processes.
• Strong relationship building and interpersonal skills across a wide range of stakeholders.

Damia Group Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept our Data Protection Policy which can be found on our website.

Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and ability to perform the duties of the job.

Damia Group is acting as an Employment Business in relation to this vacancy and in accordance to Conduct Regulations 2003