IT Risk and Policy Analyst

The Vacancy The IT Risk, Policy and Training Analyst is responsible for managing IT risks, monitoring audit actions, maintaining IT policies and procedures, and supporting GDPR compliance. The role ensures effective governance and compliance across IT processes, providing a framework for the identification, mitigation, and management of risks. This position bridges technical and governance aspects, ensuring alignment with company standards and regulatory requirements, while fostering collaboration across teams to embed robust IT practices: Ensuring that all IT risk and IT audit actions are highlighted, monitored, and escalated where appropriate. Maintaining the suite of IT policies and procedures. Providing support to the Privacy Team in ensuring GDPR compliance. Main accountabilities: Assisting in managing IT Risk Register inputs and outcomes, liaising with IT SLT and Group Assurance and external auditors as appropriate. Liaising with other teams to ensure SLAs in scope are met. Identifying policy/procedure gaps and working with SMEs to create the material. Managing review process for existing IT policies and procedures, updating, or archiving as required Building strong relationships in IT and across the business to facilitate the adoption of agreed IT policies and procedures. Assisting with tracking the annual DR testing programme. Assisting the Privacy Team in ensuring DPIAs are completed where required. Knowledge Some experience of working in an IT function or in ..... full job details .....