Senior Analyst – Technology Risk & Governance (Digital)

Bdo; City of Westminster; On-site; GBP 60,000 - 90,000; Full time

Job summary

BDO is seeking a Senior Analyst in Technology Risk and Governance (TRG) within the Digital practice in London. You will help clients understand and manage risks from technology, transformation and digital change, delivering IT risk assessments, internal audits and controls assurance.

The role requires experience in IT risk/controls, plus strong communication and collaboration with senior stakeholders. Relevant certifications are advantageous and agile working is supported.

Qualifications

• Experience in technology risk, IT internal audit, IT assurance, risk and controls, or a closely related discipline.
• Experience in IT general controls and SOX/ICFR; cloud risk; DevOps and SDLC controls; ERP risk and controls.
• Financial services experience desirable with FCA/PRA frameworks and outsourcing/third‑party risk.
• Practical understanding of technology risks, able to analyse evidence and communicate impact clearly.
• Strong written and verbal communication, organisation and attention to detail.

Responsibilities

• Help clients understand and manage risks arising from technology, transformation and digital change.
• Support technology risk assessments, IT internal audits, controls assurance and advisory engagements.
• Strengthen governance, resilience and confidence in clients' critical systems.
• Collaborate with the Digital TRG team to deliver value‑led risk advice.

Skills

Tech risk

IT internal audit

IT assurance

Risk & controls

Regulated environment

Communication skills

Certifications (progress welcome)

Education

CISA

ACA

ACCA

CIA

CRISC

CISSP

Job description

BDO is seeking a Senior Analyst in Technology Risk and Governance (TRG) within the Digital practice in London. You will help clients understand and manage risks from technology, transformation and digital change, delivering IT risk assessments, internal audits and controls assurance.

The role requires experience in IT risk/controls, plus strong communication and collaboration with senior stakeholders. Relevant certifications are advantageous and agile working is supported.