Senior IT Risk & Governance Analyst

JR United Kingdom; Guildford; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services organization is seeking a Senior IT Risk & Governance Analyst in Guildford to join their IT team. This hybrid role involves supporting cyber security and governance by engaging with stakeholders and driving risk culture. Ideal candidates have experience in IT risk, strong communication skills, and familiarity with control frameworks.

Qualifications

• Proven experience in IT risk, cyber, or governance.
• Deep understanding of control frameworks like COBIT, ISO27001x, CRISC, ITIL.
• Experience in a regulated environment with high attention to detail.

Responsibilities

• Manage KRIs and ethical phishing campaigns.
• Drive cyber awareness and improve governance frameworks.
• Work with internal/external audit teams.

Skills

Stakeholder engagement

Communication

Training

Risk reporting

Proactive mindset

Tools

Excel

Job description

Social network you want to login/join with:

Senior IT Risk & Governance Analyst, Guildford

Client:

InterQuest Group

Location:

Guildford, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

Job Views:

3

Posted:

28.06.2025

Expiry Date:

12.08.2025

Job Description:

An exciting opportunity has opened up with a well-established financial services organisation.

They’re seeking a Senior IT Risk & Governance Analyst to join their IT team and play a critical role in supporting cyber, information security, IT governance, and risk management across the business.

The Role

This is a hybrid position (3 days onsite).

You’ll work closely with senior stakeholders, internal/external audit teams, and the second line of defense (2LoD), helping shape risk culture, improve governance frameworks, and drive cyber awareness. Your responsibilities include managing KRIs, ethical phishing campaigns, reporting, training, and ensuring alignment with group-level standards. This role offers significant influence and variety.

What we're looking for

• Proven experience in IT risk, cyber, or governance
• Strong communication, stakeholder engagement, and training skills
• Deep understanding of control frameworks like COBIT, ISO27001x, CRISC, ITIL
• Experience working in a regulated environment with high attention to detail
• Proficiency in Excel and risk reporting
• A proactive mindset and adaptability to change