IT Risk Analyst

Risk Analyst

• Location: Wales & West Utilities
• Job Type: Full-time
• Salary: £41,446

IT Risk Analyst – playing  a crucial role in the coordination, development, and operation of an effective Risk management framework. This position involves working closely with domain and subject matter experts to ensure that technology risk is effectively monitored and managed.

Day-to-day of the role:

• Facilitate and support stakeholder advisory & risk reviews.
• Maintain and update risk registers.
• Collaborate with domain and subject matter experts to identify, analyse, and assess key risk scenarios; support stakeholders with risk analysis and reporting.
• Review and recommend suitable, cost-effective controls or countermeasures to address key IT risks.
• Collate and challenge data for Key Risk Indicators and provide risk reporting and status updates for committees.
• Support the Risk Event process, including tracking and reporting.
• Assist key programmes and agile teams with potential risks arising from planned IT-enabled changes.
• Maintain risk management procedures and guides, educate on risk modules, and provide ongoing support.
• Engage in Continual Improvement activities within the team.

Required Skills & Qualifications:

• Essential:
  • Strong knowledge and understanding of IT systems, processes, and controls.
  • Clear communication skills, capable of discussing technical subjects with both technical and non-technical audiences.
  • Ability to articulate and pitch advice on IT risk directly to key stakeholders.
  • Proficient in sourcing, collating, and interrogating data to support risk analysis.
  • Critical thinking, attention to detail, and ability to see the bigger picture.
  • Logical problem-solving approach and capability to handle issues independently.
  • Degree in IT, Computer Science, Engineering, Information Security, or equivalent.
  • A minimum of 2 years' experience performing risk analysis within a technical environment.
• Desirable:
  • Experience in a large, complex Utilities organisation.
  • Familiarity with regulatory environments, such as the Utilities services sector.
  • Knowledge of frameworks like COBIT, ITIL, ISO, etc.
  • Experience working with internal and external auditors and performing risk analysis using the FAIR risk analysis approach.
  • Relevant qualifications such as CRISC, CISM, CISA, CISSP.

Benefits:

• Competitive salary and grade benefits.
• Opportunities for professional development and certifications.
• Engaging and supportive work environment.