Technical Consultant

Life on the team Computacenter seeking confident and experienced Compliance Analyst who is accountable for relevant laws, regulations, and industry standards by researching, interpreting, and applying compliance requirements to the GIS operations, policies, and procedures. Work closely with various stakeholders to align risk management practices with the organization's strategic objectives. What you'll do - Enterprise Risk Management Expert - Proficiency in understanding of Risk Frameworks such as ISO 31000, NIST, and COBIT. - Risk Assessment: Ability to identify, assess, and prioritize risks using various methodologies and tools. - In-depth knowledge of IT systems, networks, and infrastructure. - Strong understanding of cybersecurity principles, threats, and mitigation strategies. - Ability to analyse complex data sets to identify trends, patterns, and potential risks. - Strong problem-solving skills to develop effective risk mitigation strategies. - Proficiency in preparing clear and concise risk reports for senior management and stakeholders. - Excellent interpersonal skills to collaborate with various departments and communicate risk-related information effectively. - Understanding of relevant regulatory requirements and industry standards (e.G., GDPR, HIPAA). - Ability to develop and implement risk management policies and procedures. - Ability to align risk management practices with the organization's strategic objectives. - Proactive in identifying potential risks and implementing preventive measures. - Ability to adapt to changing business environments and emerging risks. - Continuous Improvement: Commitment to continuous improvement and staying updated with the latest risk management trends and technologies - Keen attention to detail to ensure accurate risk assessments and reporting - Regulatory Knowledge: In-depth understanding of relevant regulations and compliance requirements - Be quality and process improvement driven - practices where appropriate - Continuous Improvement: Monitor and review the effectiveness of risk management practices. Identify opportunities for improvement and implement changes to enhance the risk management framework. What you'll need - Establish, Maintain, Operate and Continually Improve the Enterprise Risk Management Framework (~ 70%) - Define, own and maintain the enterprise risk management framework, process and policy to align with CC Group Risk framework & cyber security risk. - Policy Development: Create and maintain IT risk management policies, procedures, and guidelines. Ensure compliance with industry standards and regulatory requirements. - Develop capability strategies identifying and enhance processes where automation has the potential to improve efficiency - Risk Identification and Assessment: Identify and assess risks related to IT operations, projects, and systems. Conduct regular risk assessments and develop risk profiles. - Risk Mitigation: Develop and implement risk mitigation strategies and controls to minimize the impact of identified risks. Ensure that risk mitigation plans are effectively executed. - Monitor and continuously enhance the Risk management process in line with the Target Operating Model (TOM) - define and educate key stakeholders and support them in identifying, detailing and managing risks across the department. - Creatively apply knowledge of risk management strategies, frameworks and processes to support internal operations and the wider impact / knock-on effects to our customers. - Balance the risk narrative to highlight effective controls as well as control gaps - Build risk culture and sensitivity to opportunity risks as well as operational risks - Align work with internal associated risk management policies and processes, and with external regulatory requirements and market - Support of the IT business continuity process and disaster recovery processes, and the associated risks - Monthly reporting is delivered against KRIs for the Risk Management Group, aligned to the balanced scorecard. - Change approval governance processes are followed. Team Leadership (~ 10%) - Provide direct support to the Head of Performance Management, and lead the Enterprise Risk team, offering guidance & coaching. - Training and Awareness: Develop and deliver training programs to enhance risk awareness and promote a risk-aware culture within the organization. - Establish clear team goals that align with our mission, ensuring the team is well-equipped with the skills and resources to achieve our objectives. - Be an ambassador for the enterprise risk in the extended leadership team, encouraging teamwork, problem solving and sharing ideas. - Support team members in skills development, being a trusted advisor both internally within the GRC function and to other departments. - Maintain professional development activities to ensure skills and credibility remains current and up to date. Desirable - CRISC (Certified in Risk and Information Systems Control), - CERA (Chartered Enterprise Risk Analyst) - CISM (Certified Information Security Manager), - CISSP (Certified Information Systems Security Professional), - PMP (Project Management Professional). About us With over 20,000 employees across the globe, we work at the heart of digitisation, advising organisations on IT strategy, implementing the most appropriate technology, and helping our customers to source, transform and manage their technology infrastructure in over 70 countries. We deliver digital technology to some of the world’s greatest organisations, driving digital transformation, and enabling people and their businesses. Learning and development Our people are our strength which is why we offer leadership training, coaching, mentoring, professional development, and international opportunities. Whichever direction you choose to go in – whether it’s a well-trodden path or a completely new part of the business – we’ll support you. Our managers champion their people, powering their personal development and helping them to reach their full potential. You belong We passionately believe in the power of diversity and inclusion. We celebrate our differences because we know a diverse workforce with different experiences and perspectives helps us win together. And to do that, you need to feel comfortable to bring your whole self to work – and you can only do that when you feel supported, valued, and have a sense of belonging which is what we strive to achieve. Your application is considered on its merits regardless of your age, disability, ethnicity, faith, gender identity or sexual orientation. All that matters to us is that you share our vision and our values, and that you bring the experience and skills we need. We are proud to be a Disability Confident Employer, we welcome applications from people with a disability – and guarantee to interview applicants who have a disability and meet the essential requirements for the job.