Senior Technology Risk Analyst

Morson Edge; England; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading risk management firm in the UK is seeking a Senior Technology Controls Analyst. In this role, you will enhance their technology risk and control environment by assessing existing controls, improving compliance, and collaborating with business teams. Key responsibilities include evaluating technology controls, tracking remediation efforts, and promoting a strong control culture across the organization. Relevant experience in IT audit or technology risk management, along with a related degree and certification, is essential for this position.

Qualifications

• Bachelor’s degree in a related field is required.
• Experience in IT audit, technology risk management, or compliance is essential.
• At least one relevant certification (CISA, CRISC, CISM) is needed.

Responsibilities

• Identify and assess technology risks and issues.
• Evaluate design and effectiveness of technology controls.
• Collaborate on remediation plans for control gaps.
• Contribute to day-to-day control operations.
• Leverage data analytics to support compliance.

Skills

IT audit experience

Technology risk management

Compliance knowledge

Data analytics

Cloud technologies knowledge

Education

Bachelor's degree in Information Systems, Computer Science, Business Administration

Tools

GRC systems

Job description

About the Role

I’m supporting a well-established client search for a Senior Technology Controls Analyst to help strengthen their technology risk and control environment. In this role, you’ll support the design, implementation, and ongoing improvement of technology controls that reduce risk and ensure compliance with internal policies, industry standards, and regulatory requirements.

You’ll assess the effectiveness of existing controls, identify opportunities for enhancement, and work closely with both technology and business teams to drive a robust control culture. You’ll also support day-to-day control activities and coordinate with audit and assurance functions to keep risk management processes operating smoothly.

PLEASE NOTE- THIS ROLE CANNOT OFFER VISA SPONSORSHIP

About the Team

You’ll join a central Risk function where technology risk management plays a critical role in safeguarding the organisation. The Technology Risk & Controls team provides oversight, guidance, and governance across technology risks, issues, mitigations, and action plans. The team partners closely with business units and risk specialists to ensure risks are well understood and effectively managed.

Key Responsibilities

• Support the identification and assessment of technology risks and issues.
• Evaluate the design and operating effectiveness of technology controls and document results in line with established methodologies.
• Highlight control gaps and collaborate with control owners on remediation plans.
• Track remediation progress and ensure timely completion of corrective actions.
• Contribute to day-to-day control operations, helping to maintain and continuously improve the control environment.
• Assist in maintaining and updating the organisation’s GRC system and ensuring risk management procedures are followed.
• Work with risk teams across the business to understand how changes impact technology controls.
• Partner with stakeholders across all lines of defence to support assurance activities and drive operational efficiencies.
• Provide guidance to technology and business teams on control expectations and best practices.
• Promote a strong control culture through awareness, training, and communication.
• Prepare clear, concise reports and updates for management and internal committees.
• Leverage data analytics and automation to support continuous compliance and data-driven risk management.
• Develop dashboards to monitor KRIs, KPIs, and control performance.

What We’re Looking For

• Bachelor’s degree in Information Systems, Computer Science, Business Administration, or a related field.
• Experience in IT audit, technology risk management, or compliance.
• At least one relevant certification (e.g., CISA, CRISC, CISM).
• Strong understanding of IT general controls and application controls.
• Familiarity with frameworks and standards such as COBIT, NIST, ISO 27001, and SOX.
• Knowledge of cloud technologies, cybersecurity principles, and data privacy practices.