Technology and Data Risk Analyst

Life can sometimes be unpredictable, and it pays to plan ahead. Our aim at Legal & General Retail is to help our customers plan for the unexpected, achieve financial security for their tomorrow, and protect everything that’s important to them. To better understand our customers and meet their needs, we’ve brought our protection, retirement income, savings, lending and advice, fintech and mortgage businesses under one umbrella. Created at the start of 2022 through the merging of our long-standing and trusted retail retirement and insurance businesses, we’re a fast-growing division with big, customer-centered ambitions. 

We are currently recruiting a Technology and Data Risk Analyst to join our team.

In this role, you will analyse and report on the management of Information, Technology and Data risks within L&G Retail.

You will also collaborate effectively with 1 LoD teams, process and control owners by providing guidance and support in the oversight of the design, implementation and effectiveness of the Group’s technology risk and control framework,  challenging where necessary to influence effective internal controls, timely and proportionate responses to significant control issues and risk events, and optimised data quality in support of IT Risk management activities.

The scope of the role includes IT, Information Security, Data, IT Outsourcing risk focus, as well as emerging technologies (e.g. AI) and programme assurance.

What you'll be doing

• Risk and Control Framework: Supporting the IT&IS Risk team in Retail 2LoD to ensure effective implementation and embedding of the technology policies, standards and controls in a consistent manner across Retail to minimise risk exposure, supported by accurate and timely measurements and reports.
• Assurance Reviews: Supporting the delivery of data led “deep dives” and “spotlight reviews” to assess the design and operation of key technology risks and controls. Where required, coordinating activities with Retail 1LoD and 1.5 LoD functions, to ensure that critical controls are regularly evaluated, and their status fairly reported to executive management.
• Technology Risk Subject Matter Expertise: Supporting the IT&IS Risk team in Retail 2LoD in providing advice and guidance to Retail IT areas about Technology risk governance and framework application, advise on policy, interpretation of risk appetite.  Supporting Technology Risk Management awareness initiatives to promote a culture of security across Retail.
• Risk and Control Data Analysis: Analysing operational data within the Group’s risk management systems (including OneSumX, ServiceNow, Prevalent) to build holistic views of the technology risk and control environment, and related measures and metrics to assess that risk exposures are in acceptable tolerances.
• Change Assurance: Supporting the assurance of high risk Technology change programmes across Retail by working with the IT&IS Risk team in Retail 2LoD in the review of planning of key project delivery to ensures risks are known and managed.
• Risk Event Analysis: Performing analysis of risk events and control weaknesses with an IT or IS root cause with an impact on the Retail division, assessing and reporting upon proposed remediation, and liaise  with the Head of IT and IS Risk determining broader lessons learnt to drive improvements in the wider technology risk and control environment.
• Report Preparation: Collating and aggregating Retail IT and IS risk data to produce report for the IT Change and Management Forum and the Technology Risk Committee. Liaising with 1 LoD and 1.5 LoD to prepare and review inputs for committee papers to enable discussion and decisions

What we're looking for

• Degree level or equivalent relevant experience in a similar role is desirable
• A technology risk management, data analysis or similar qualification would be beneficial but is not essential (i.e. CRISC, CISA, CISSP)
• Good understanding of technology risk and control practices
• Knowledge of Technology or Security control frameworks desirable, i.e. ISO27001, COBIT, NIST RMF / CSF / 800-53
• Approaches to data analysis and use of data analytics is beneficial
• Experience in Risk Management in 1st, 2nd and 3rd line
• Operation of technology risk and control frameworks desirable
• Use of data to provide meaningful assessments and reports  
• Good understanding of IT Information risks, including confidentiality, integrity, availability, authenticity desirable
• Ownership of own work items and collaboration to support others in timely task delivery
• Strong influencing and presentation skills

When you commit to Legal & General, we’ll commit to you too. That means we’ll recognise and reward your hard work, your performance and your contribution.

If you join us, you’ll get access to some great benefits, including private medical insurance, at least 25 days holiday (excluding bank holidays), a generous pension scheme, life assurance, and Income Protection. You can participate in our electric car scheme, which offers employees the option to hire a brand new electric car through tax efficient salary sacrifice. We’re also proud to offer competitive family leave. 

You’ll have the opportunity to participate in our annual, performance-related bonus plan and valuable share schemes. And then there are the many discounts we offer that you can take advantage of – both for our own products and at a range of high street stores and online offerings.

The brand with the brolly is choosing today to change tomorrow.

Since 1836, we’ve grown to become one of the world's largest asset managers, homebuilders, pension providers and insurance brands. 

We’re all here to improve the lives of our customers, build a better society for the long term, and create value for our shareholders - helping to shape a better future for society and the planet.

We need people who share our ambitions, agility and entrepreneurial spirit to help us do it.

At L&G, you’ll find a balance that helps you be your best. Empowered by hybrid working, we’re supported by technology and workplaces that enable us to work effectively wherever we are. We come together in offices to collaborate and connect, and use time at home for individual, focused activities. And, when we achieve great things, we celebrate our success and reward strong performance.

Today, there’s over 10,000 of us, working towards our mission, with plenty of opportunities to grow your career as we grow L&G. Will you join us?

Great minds don’t have to think alike, so we welcome voices from all backgrounds. Bringing together people with different life experiences helps us build empathy with our customers and drive innovation.

We don’t just talk about it, we actively promote diversity and equitable opportunities for all. That means our employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability or protected veteran status. In fact, we embrace every dimension of diversity to reflect the customers and communities we serve.

We think it’s important to create an inclusive environment where we can all belong, contribute and drive progress, where you can develop and grow, and be empowered. We want you to use your voice to help us build a better tomorrow.

We all work differently, and have different needs, which is why. we’re always open to discussing flexible working arrangements. Likewise, we’re committed to finding reasonable accommodations for candidates with specific needs during our recruiting process.

So whoever you are, wherever you are, whatever your story, we'd love to hear from you.