Tech Risk Analyst

ENGINEERINGUK; London; On-site; GBP 100,000 - 125,000; Full time

Job description

You will need to login before you can apply for a job.

Sector: Insurance
Role: Analyst
Contract Type: Permanent
Hours: Full Time

Summary
The main purpose of this role is to ensure the Digital & Technology Risk processes are implemented. You will ensure that both individual and aggregated Technology Risks are thoroughly identified, assessed, clearly understood, and effectively handled, with robust strategies in place for mitigating both strategic and tactical risks.

You will work closely across D&T and Business partners to identify and assess Technology Risks, encompassing Operational, Transformational, Regulatory, and Emerging Risks.

What you'll do
As the Technology Risk Analyst you will be responsible for carrying out the risk management activities, to ensure that it operates within D&T's Risk Framework, M&S's Enterprise Risk framework, regulatory requirements and best practice standards, maintaining the integrity and resilience of M&S's Technology systems. You will:

• Identify and assess technology-related risks that could potentially impact M&S's Technology operations, reputation, or financial stability, in the context of the Retail industry's evolving landscape.
• Conduct detailed risk assessments for ongoing and new technology initiatives, including projects related to digital transformation, software development, and IT infrastructure upgrades. Evaluate the effectiveness of existing controls and identify areas where Risk mitigation measures need to be enhanced.
• Develop and recommend Risk mitigation measures. Collaborate with technology and business units to ensure that Risk mitigation measures are practical, cost-effective, and aligned with business objectives.
• Prepare comprehensive Risk reports and documentation that detail findings from risk assessments, analyses, and compliance monitoring activities.
• Actively engage with various Product and Platform partners across D&T, to promote a strong risk-aware culture within the organisation. Act as a key point of contact for Technology Risk inquiries and provide SME support.

Who you are

• Experience of IT Governance Frameworks and the application of Technology Risk standard methodologies and Risk Standards (ISO 31000, ITIL, COBIT, IS27001 COSO, NIST, SOX etc).
• A track record as a control practitioner in managing digital/technology controls (experience in managing Cloud and Data technology controls is highly desirable).
• Experience in Technology audit, Risk management, or IT compliance within a large and sophisticated organisation, preferably in the retail sector or a related industry.
• Proficiency in implementing and supporting Technology Risk and Control Assessments, including experience with audit software and tools, and the ability to provide assurance on the effectiveness of remediation efforts.
• High-level analytical approach to sophisticated technical and business problems.

Everyone's welcome
We are ambitious about the future of retail. We're disrupting, innovating and leading the industry into a more conscientious, inspiring digital era. We're transforming how we work together and offering our most exciting opportunities yet. Marks & Spencer strives to be an inclusive organisation, trusted and admired by our colleagues, customers and suppliers. Join us and make change happen.

We are committed to building diverse and representative teams, where everyone can bring their whole selves to work and be at their best. We support each other and work together to win together.

If you feel you'd benefit from any support or reasonable adjustments during any stage of the recruitment process, please don't hesitate to let us know when completing your application. This information will be picked up by our team, so we can try and put steps in place to help you be at your best through this process.

Company

Learn more about this company

Visit this company’s hub to learn about their values, culture, and latest jobs.