The Role

The Risk & Governance Analyst is responsible for supporting the effective operation of the Technology & Change risk and governance framework. The role ensures that risk, control, policy, audit, outsourcing and regulatory activities are coordinated, monitored and reported in a timely and consistent manner.

Working closely with Technology leadership, risk owners and key stakeholders, the role helps maintain a strong control environment through the management of risk assessments, risk registers, policy reviews, supplier governance and audit activities, while supporting compliance with internal standards and regulatory requirements.

Key Responsibilities

• Support the effective operation of the Enterprise Risk Management Framework within Technology
• Maintain the Technology Risk Register, ensuring risks, controls and actions are accurately documented and regularly reviewed
• Facilitate regular risk and control reviews with Technology Management and risk owners, ensuring the effectiveness of controls
• Support and conduct risk assessments, including assessments for Technology, change initiatives, new services, outsourcing arrangements and material suppliers
• Facilitate and support Technology internal and external Audits
• Coordinate, review, update and report on policies, procedures and registers within the department
• Support Technology & Change outsourcing and procurement processes, including onboarding, annual reviews and risk assessments
• Support adherence to regulatory requirements (GAP analysis)
• Provide timely and accurate reporting of activities, priorities and escalation where required

FULL ROLE PROFILE