Technology GRC Analyst

In this role, you will help strengthen technology risk governance by identifying, assessing, and reporting technology risks and control weaknesses. You will verify control design and operation, perform gap analyses against policies and standards, and coordinate remediation with risk owners. You’ll support regulatory and assurance activities, contribute to GRC processes, and prepare clear management reporting. This position sits at the intersection of Technology, Risk, Compliance, and Audit, offering opportunities to drive continuous improvement and strong governance across the firm.

• Hybrid working
• Generous holiday policies
• Health and wellbeing benefits
• Volunteer time
• Professional development and tuition reimbursement
• Parental leave and family services

• Identify, assess, document and report technology risks, issues and control weaknesses
• Evaluate control design and operating effectiveness, review evidence, identify exceptions, and document conclusions
• Perform gap analyses against policies, standards, regulatory requirements, and control expectations
• Collaborate with control owners and technology teams to remediate exceptions and track progress
• Support regulatory, audit and assurance activities by coordinating evidence and responses
• Contribute to governance, risk and compliance procedures, control testing approaches, reporting, tooling and oversight for End User Developed Applications
• Prepare clear reporting on technology risks, control effectiveness, assurance outcomes, and remediation status for management
• Support governance forums by coordinating inputs, preparing materials, and tracking decisions
• Promote governance, risk awareness, control discipline and continuous improvement across Technology
• Carry out other duties as assigned

• Experience in technology governance, risk and compliance, IT risk, IT audit, control assurance or related field
• Knowledge of technology risks, IT controls, control assurance techniques and risk assessment methodologies
• Experience supporting assurance, regulatory, audit, risk assessment or control reviews
• Ability to review evidence, identify exceptions and document balanced conclusions
• Strong analytical skills and attention to detail with sound risk judgment
• Clear written and verbal communication to explain risk and control matters to diverse stakeholders
• Collaborative approach to build trusted relationships across Technology, Risk, Compliance, Information Security and Audit
• Ability to work independently, manage priorities, and maintain organized documentation
• Ability to synthesize information from multiple sources into concise management reporting

• Analytical mindset
• Attention to detail
• Strong communication skills
• IT risk and control assessment methodologies
• Control assurance techniques
• Risk reporting for management