Risk Analyst

Role & responsibilities

The position combines hands-on risk execution with strong stakeholder engagement, focusing on architecture risk assessments, security assurance, incident support, remediation tracking, and awareness enablement. The role is well-suited for a professional who can balance security rigour with delivery pragmatism in large, complex technology environments.

• Perform cyber and IT risk assessments for applications and platforms, reviewing architectures, data flows, deployment models, and thirdparty integrations.
• Engage early with architects, engineers, and product teams to embed securebydesign and riskbased decisions into solution design.
• Support security incidents, risk exceptions, and remediation efforts, including business justification reviews and action tracking.
• Act as the primary risk contact for assigned technology or business areas, providing clear guidance and regular risk status updates.
• Maintain risk metrics, dashboards, and tracking artefacts, and contribute to continuous improvement of risk processes and ways of working.

Preferred candidate profile

• Strong analytical and risk evaluation skills.
• Ability to influence technical and business stakeholders without direct authority.
• Strong communication skills, with the ability to confidently engage diverse stakeholders and convey risk in clear, businessrelevant terms.
• High ownership, accountability, and execution discipline
• Pragmatic mindset with the ability to balance risk, security, and delivery speed with business expectations in mind.
• Minimum 3-5 years of experience in IT Risk Management, Cybersecurity, Information Security, or related domains.
• Experience analyzing risks related to data platforms, data visualization tools, AI agents, and emerging AI technologies, with awareness of MCP servers and associated security, privacy, and governance risks.