Technology Risk & Controls Analyst

BSP Financial Group - Technology (reference BSPPG10526).

Applications close: 2026-11-17.

The Technology Risk & Controls Analyst supports the effective operation of Technology Risk & Controls management across the Technology Division by maintaining risk, issue and action registers. The role supports the coordination of incident management activities, tracking remediation actions, conducting root cause and trend analysis, as well as ensuring risk information is accurately recorded and communicated.

• Build and maintain effective relationships with Technology stakeholders, process owners and control owners to support Technology Risk & Controls activities.
• Maintain accurate and up-to-date risk, issue, incident, loss event and action registers, including Major Incidents in Resolver.
• Coordinate incident management activities, ensuring root causes, remediation actions, responsibilities and due dates are documented and tracked through to closure.
• Monitor risk treatment plans and remediation actions, following up on outstanding items and escalating overdue or unresolved matters.
• Conduct root cause and trend analysis to identify recurring incidents, emerging risks and potential control weaknesses.
• Maintain governance records, meeting minutes, action registers and supporting documentation for risk meetings, forums and working groups.
• Ensure risks are clearly documented using the Cause, Risk Event and Impact methodology and maintained within approved governance systems.
• Support risk reporting, audits, reviews and assurance activities by providing accurate risk information, records and supporting evidence.
• Promote awareness and understanding of Technology Risk & Controls processes, standards and procedures across the Technology Division.

• Tertiary qualification in Information Technology, Information Systems, Business Management, Risk Management, Accounting or a related discipline is preferred.
• Minimum 2 years’ experience within a financial institution, with exposure to technology risk, operational risk, incident management, governance, compliance or data analysis.
• Sound knowledge of Technology Risk Management, Operational Risk Management, Information Security, banking operations and regulatory compliance requirements.
• Experience maintaining risk, issue, incident and action registers, including tracking remediation activities through to closure.
• Experience using Governance, Risk and Compliance (GRC) systems, preferably Resolver or a similar platform.
  Strong analytical skills, including the ability to perform root cause and trend analysis and identify recurring issues, control weaknesses and emerging risk themes.
• Strong attention to detail, data management, communication, interpersonal and organisational skills, with proficiency in Microsoft Office applications. ITIL, ISO 31000, Risk Management, Governance or Technology-related professional certification will be highly regarded.

If you think you have the appropriate skills and experience to perform this role, send your application and detailed CV to:

Senior Manager Talent Acquisition, via this form.

Please contact us should you require additional information.

Only shortlisted applicants will be contacted for interviews.