Technology Risk & Controls Analyst

About the role

The Technology Risk & Controls Analyst supports the effective operation of Technology Risk & Controls management across the Technology Division by maintaining risk, issue and action registers. The role coordinates incident management, tracks remediation actions, conducts root cause and trend analysis, and ensures risk information is accurately recorded and communicated.

Key responsibilities

• Build and maintain relationships with Technology stakeholders, process owners and control owners.
• Maintain up-to-date risk, issue, incident, loss event and action registers, including Major Incidents in Resolver.
• Coordinate incident management so that root causes, remediation actions, responsibilities and due dates are tracked to closure.
• Monitor risk treatment plans and remediation actions, escalating overdue or unresolved matters.
• Conduct root cause and trend analysis to identify recurring incidents, emerging risks and control weaknesses.
• Maintain governance records, meeting minutes and action registers for risk meetings, forums and working groups.
• Document risks using the Cause, Risk Event and Impact methodology in approved governance systems.
• Support risk reporting, audits, reviews and assurance with accurate risk information and evidence.
• Promote awareness of Technology Risk & Controls processes, standards and procedures across the division.

Required profile

• Tertiary qualification in Information Technology, Information Systems, Business Management, Risk Management, Accounting or a related discipline is preferred.
• Minimum 2 years' experience in a financial institution, with exposure to technology risk, operational risk, incident management, governance, compliance or data analysis.
• Sound knowledge of technology risk, operational risk, information security, banking operations and regulatory compliance.
• Experience maintaining risk, issue, incident and action registers and tracking remediation to closure.
• Strong analytical skills, attention to detail, data management, communication and organisational skills.

Required skills

• Experience with GRC systems, preferably Resolver or similar.
• Proficiency in Microsoft Office applications.
• ITIL, ISO 31000, Risk Management, Governance or technology-related certification is highly regarded.

Only shortlisted applicants will be contacted for interviews.