Senior IT Risk and Governance Analyst

Reference: 947nar1m3iyl1uij439a

An opportunity has arisen for a Senior IT Risk and Governance Analyst to support the development, implementation and continuous improvement of technology risk and governance practices. This role will help strengthen the organisation’s control environment, promote effective risk management and provide clear insight to senior stakeholders across technology and the wider business.

Working closely with technology, security, audit, compliance and business teams, you will identify, assess and monitor IT risks, ensuring that appropriate controls and mitigation plans are in place. You will maintain risk registers, track remediation activity and provide regular reporting on key risks, issues, control effectiveness and emerging threats. The role will also involve supporting governance forums and preparing concise, accurate information for senior management.

Your responsibilities will include developing and maintaining IT policies, standards, procedures and control frameworks; coordinating risk and control self-assessments; supporting internal and external audits; and monitoring compliance with relevant regulatory, legal and industry requirements. You will contribute to the review of third-party technology risks, assist with information security and operational resilience activities, and help embed a consistent risk-aware culture across technology teams.

The successful candidate will have substantial experience in IT risk, governance, controls, audit or information security, ideally within a complex or regulated environment. You will be confident interpreting technical and business information, assessing risk and translating complex issues into clear, practical recommendations. Experience with recognised frameworks such as COBIT, ITIL, ISO 27001, NIST or similar would be advantageous.

Strong analytical, organisational and stakeholder management skills are essential, together with excellent written and verbal communication. You will be comfortable challenging constructively, managing competing priorities and working independently while contributing effectively to a collaborative team. Relevant professional qualifications, such as CISA, CRISC, CISM, CISSP or equivalent experience, would be desirable.

£52,500.00
Per annum
Added 02/11/2026
Reference: 947nar1m3iyl1uij439a

Other similar jobs

Senior Information Security Consultant

Added 30/09/2026

We are seeking a Senior Information Security Consultant to provide expert advice and practical support across a broad range of cyber security, risk and assurance activities. This role will work closely with stakeholders at all levels to understand business requirements, identify security risks and develop proportionate solutions that protect information, systems and services. The successful candidate will be confident operating in complex environments and able to translate technical issues into clear, actionable recommendations. Key responsibilities will include leading security assessments, risk analyses and reviews of technical and organisational controls; advising on security architecture, cloud services, applications and infrastructure; and supporting...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business and technology risks, assess current security maturity and design practical, proportionate improvements aligned to regulatory, industry and organisational requirements. This role will involve delivering high-quality advisory engagements across a varied client portfolio, with opportunities to contribute to large-scale transformation programmes and support the development of innovative cybersecurity solutions. Responsibilities will include leading or contributing to cybersecurity strategy reviews, governance assessments, risk and control evaluations, regulatory compliance reviews...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking an experienced Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business priorities, assess current security maturity and develop practical, risk-based improvements that align with regulatory obligations, industry standards and organisational objectives. This is an opportunity to contribute to complex transformation programmes while helping organisations build sustainable and effective security practices. Your responsibilities will include leading or contributing to cybersecurity and GRC engagements, including security strategy development, operating model design, governance reviews, risk assessments, control evaluations, compliance assessments...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with cybersecurity strategy, governance, risk and compliance. You will help organisations understand their cyber risk, strengthen their security posture and develop practical, sustainable approaches to managing technology and information security. Working as part of a collaborative consulting team, you will engage with senior stakeholders, translate business objectives into security priorities and provide clear, commercially focused advice. Your responsibilities will include leading and contributing to cybersecurity assessments, maturity reviews, risk and control evaluations, governance framework design and regulatory compliance initiatives. You will help develop policies, standards, procedures,...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with the development and delivery of cybersecurity strategy, governance, risk and compliance programmes. You will work with senior stakeholders to understand business objectives, assess cyber maturity and translate regulatory, technological and operational requirements into practical, sustainable improvements. This role offers the opportunity to contribute to varied engagements across multiple industries, advising organisations as they strengthen their resilience in an increasingly complex threat landscape. Your responsibilities will include leading and delivering cybersecurity assessments, maturity reviews, risk assessments and compliance engagements; developing security strategies, policies, standards and governance...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Assistant Manager - Information Security Risk and Governance

Added 13/10/2026

We are seeking an Assistant Manager – Information Security Risk and Governance to support the development, implementation and continuous improvement of information security risk management and governance practices. This role will help ensure that security risks are identified, assessed, monitored and reported effectively, while supporting compliance with relevant laws, regulations, policies and industry standards. The successful candidate will work with stakeholders across the organisation to promote a strong culture of information security and informed risk-based decision-making. Key responsibilities will include coordinating information security risk assessments, maintaining risk registers and tracking remediation plans through to completion. You will support the review...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Cybersecurity Governance, Risk and Compliance

Added 06/10/2026

We are seeking an experienced Cybersecurity Governance, Risk and Compliance professional to strengthen the organisation’s information security framework and support the effective management of cyber risk. This role will help ensure that security policies, controls and processes align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to cybersecurity. Key responsibilities will include maintaining and improving cybersecurity governance frameworks, policies, standards and procedures; coordinating enterprise-wide risk assessments; tracking remediation activities; and preparing clear reports for senior leadership and relevant governance committees. You...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

Senior Risk Manager Technology Risk and Transformation

Added 23/10/2026

We are seeking a Senior Risk Manager – Technology Risk and Transformation to provide experienced leadership across technology risk, change and transformation initiatives. This is an opportunity to shape a proactive risk management approach, helping ensure technology services, systems and strategic programmes are resilient, well controlled and aligned with regulatory and business expectations. You will lead the identification, assessment and management of technology and information risks, working closely with senior stakeholders across technology, change, cyber security, operational resilience, compliance and business functions. You will provide constructive challenge and practical advice on risk appetite, control design, risk acceptance, remediation planning and...

Learn more

Cyber Governance & Risk Analyst

Added 23/10/2026

We are seeking a Cyber Governance & Risk Analyst to support the development, operation and continuous improvement of cyber security governance and risk management across the organisation. This role will help ensure that information security risks are identified, assessed and managed effectively, while supporting compliance with relevant policies, standards and regulatory requirements. You will maintain cyber security risk registers, coordinate risk assessments and monitor the progress of remediation activities. Working with colleagues across technology, operational teams and business functions, you will provide practical advice on risk treatment, control effectiveness and security obligations. You will also support the preparation of risk...

Learn more

IT Security Governance, Risk & Controls Analyst

Added 22/09/2026

We are seeking an IT Security Governance, Risk & Controls Analyst to support the development, operation and continuous improvement of information security governance and risk management processes. In this role, you will help ensure that technology environments, business processes and third-party services are aligned with internal policies, regulatory expectations and recognised security frameworks. You will work closely with technology, risk, compliance, audit and business stakeholders to identify security risks, assess control effectiveness and support practical remediation plans. Key responsibilities will include maintaining security policies, standards, procedures and control frameworks; coordinating periodic risk and control assessments; documenting risks, findings, action plans...

Learn more

Senior Manager, Cybersecurity Governance, Risk & Compliance (GRC)

Added 18/09/2026

We are seeking a Senior Manager, Cybersecurity Governance, Risk & Compliance (GRC) to lead the development and continuous improvement of a mature cybersecurity governance and risk management framework. This role will provide strategic direction, independent challenge and practical guidance to ensure security controls, policies and processes align with business objectives, regulatory obligations and recognised industry standards. The successful candidate will work closely with technology, risk, legal, audit and operational teams to strengthen cyber resilience across the organisation. Key responsibilities include owning and maintaining cybersecurity policies, standards, procedures and control frameworks; overseeing enterprise cyber risk assessments, risk registers, remediation plans and...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.