IT Risk Analyst

We are looking for an experienced Senior IT Risk Analyst to join a global technology and financial services environment. This role will play a key part in strengthening IT risk governance, operational resilience, and cybersecurity risk management across critical business and technology platforms.

The successful candidate will work closely with technology teams, business stakeholders, and risk functions to identify, assess, monitor, and mitigate IT and cyber risks while ensuring compliance with internal frameworks and regulatory requirements.

Key Responsibilities

• Identify, assess, and monitor IT and cybersecurity risks across applications, infrastructure, projects, and production environments.
• Evaluate risks arising from existing systems, transformation initiatives, and operational activities.
• Analyze risk indicators, monitoring dashboards, and control effectiveness to identify emerging threats and vulnerabilities.
• Support the implementation and adoption of enterprise IT Risk Management frameworks.
• Maintain risk registers, track mitigation plans, and ensure timely remediation of identified risks.
• Partner with project teams to ensure risk considerations are embedded throughout the project lifecycle.
• Contribute to risk assessment exercises, including RCSA activities, control plans, incident reviews, and risk profiling.
• Develop and maintain risk reporting, dashboards, and key risk indicators (KRIs).

Operational Risk & Incident Management

• Assess operational risk impacts associated with technology and production incidents.
• Evaluate financial, regulatory, legal, compliance, and reputational impacts.
• Ensure accurate documentation and reporting of incidents within risk management tools.
• Support post-incident reviews and root cause analysis activities.

Governance & Reporting

• Produce regular IT Risk reporting for management and governance committees.
• Monitor key risk indicators and provide actionable insights to stakeholders.
• Support internal control, audit, compliance, and regulatory activities.
• Contribute to continuous improvement initiatives across risk management processes.

Requirements

Technical Skills

• 10+ years of experience in IT Risk Management, IT Audit, Information Security, Cyber Risk, or related disciplines.
• Strong knowledge of IT Risk Management frameworks and methodologies.
• Experience within banking, financial services, or highly regulated environments.
• Solid understanding of cybersecurity, fraud prevention, and operational risk management.
• Knowledge of data governance, data protection, and regulatory compliance requirements.
• Familiarity with Software Development Life Cycle (SDLC) processes and technology delivery methodologies.
• Strong analytical and data analysis capabilities.
• Experience with ServiceNow GRC or similar governance, risk, and compliance platforms.
• Project management experience is considered a strong advantage.

Certifications

• CRISC
• CISA
• CISSP
• ISO 31000
• ISO 27001
• Other relevant Risk Management or Information Security certifications

Education

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or equivalent.

Languages

• Fluent English (written and spoken).

Personal Attributes

• Strong stakeholder management and communication skills.
• High level of integrity and confidentiality.
• Excellent analytical and problem-solving abilities.
• Ability to work effectively in complex and international environments.
• Proactive mindset with strong ownership and accountability.
• Adaptable and comfortable managing multiple priorities.

What You’ll Gain

• Opportunity to work in a large-scale international environment.
• Exposure to strategic IT Risk, Cybersecurity, and Operational Resilience initiatives.
• Collaboration with senior stakeholders across technology, security, and business functions.
• Challenging projects within a highly regulated and fast-evolving industry.