About the job

• Role DescriptionThe IT Governance Specialist / Technology Risk Analyst / IT Compliance Specialist supports the oversight, assessment, and control of technology activities across the organisation. This role helps align IT practices with business objectives, internal policies, and applicable obligations. It evaluates technology risks, reviews control effectiveness, and maintains clear documentation to support informed decisions and accountable ownership.The position works closely with IT, Cybersecurity, Enterprise Risk, Legal, Procurement, Internal Audit, and business stakeholders. Responsibilities include maintaining governance procedures, conducting risk assessments, reviewing access and change controls, collecting compliance evidence, and tracking remediation activities. The role assesses risks associated with systems, infrastructure, cloud services, and technology suppliers, communicates findings, and escalates unresolved issues through established channels.For IT Governance Specialist positions, the emphasis is on policies, decision-making responsibilities, governance forums, and performance reporting. Technology Risk Analyst positions focus on identifying risk scenarios, evaluating controls, assessing potential business impacts, and monitoring risk exposure. IT Compliance Specialist positions concentrate on mapping requirements to controls, coordinating assessments, and maintaining evidence of compliance activities. Across these functions, the role promotes consistent practices and verifies that agreed improvements address identified gaps.QualificationsBachelor’s degree in Information Technology, Computer Science, Information Systems, Risk Management, Business, or a related field, or equivalent practical experience.
• Experience in IT governance, technology risk, IT compliance, information security assurance, or technology audit.
• Understanding of IT processes, including access management, change management, incident handling, and service continuity.
• For IT Governance Specialist positions, experience developing policies, maintaining governance documentation, and supporting oversight committees.
• Ability to define responsibilities, track governance decisions, and prepare meaningful management reports.
• For Technology Risk Analyst positions, experience conducting risk assessments and documenting threats, vulnerabilities, controls, and potential business impacts.
• Ability to evaluate inherent and residual risk using a consistent methodology and clearly recorded assumptions.
• Experience assessing control design and operating effectiveness through interviews, documentation reviews, and evidence testing.
• For IT Compliance Specialist positions, experience mapping applicable requirements to controls and coordinating compliance assessments.
• Ability to maintain evidence records, identify compliance gaps, and track corrective actions through to closure.
• Familiarity with recognised IT governance, security, and control frameworks relevant to the organisation.
• Understanding of cloud services, technology supplier risks, data protection, and shared control responsibilities.
• Proficiency in Excel, reporting tools, and governance, risk, and compliance platforms.
• Strong analytical, documentation, communication, and stakeholder-management skills, with attention to detail and professional judgement.
• Relevant certification in IT governance, technology risk, information security, or IT audit is an advantage.