Technology Risk Analyst

We are Centrica! We're so much more than an energy company. We're a family of brands revolutionising a cleaner, greener future. Working here is - we're powered by purpose. Together we can make an impact that will truly change tomorrow. Whether you're developing cutting-edge green tech, helping customers on the front line or simplifying operations behind the scenes.Your work here isn't just a job - it's a mission. We all play a vital role in energising a greener, fairer future .An opportunity to play your partWe have an exciting opportunity for a Technology Risk Analyst in BG Services Business to help us to roll out an IT General Controls framework as we move towards an established control environment.The team operates as the first line of defence and is currently managing the implementation of an IT General Controls Framework. You will facilitate interactions between the Digital Technology Services team, BG Services and the BG operational controls teamYou will work collaboratively to ensure that the IT General Controls framework is introduced with consideration to our current risks and threats to create an established control environment to proactively manage our risk landscape.We have tailored our well-being & benefits package around our employees as follows:Competitive salary and bonus potentialEmployee Energy Allowance at 15% of the government price capPension schemeCompany Funded Healthcare Plan25 days holiday allowance, plus public holidays, and the option to buy up to 5 additional daysExcellent range of flexible benefits, including technology vouchers, electric car lease scheme & travel insuranceLocation : You can work in Windsor/home; we have people working all over the UK but also a range of office locations.AccountabilitiesAssist in implementing the Technology risk and Controls framework and ensures timely assessment and treatment of security risksEnsure Technology risks are either treated or accepted in accordance with the risk appetiteWorks with the IT teams to identify and assess Technology risks including Cyber and InfoSec risksEnsure periodic Technology risk assessments of key services, third parties and regulatory commitments are performed, and remediation plans are monitoredEnsure services are assessed and classified based on their Confidentiality, Integrity, and AvailabilityWork with the IT/OT teams to understand their key Technology risks and agree the actions to mitigate or monitored and improve their controlsProduce the quarterly IT Risk submission for the business units and working with Group level risk functions on Technology riskInform senior leadership of risks and recommendations in non-technical terms, considering cost/benefit, to ensure security of Information SystemsSupport Legal and Compliance teams e.g. Data Protection and Privacy, as regards to Technology risksUnderstand the external security environment and emerging trends to support Technology risk managementWhat we need from youStrong knowledge of Technology risk and Control assessment methods/ Technology AuditStrong knowledge of Information Security technologies, such as identity and access management, encryption, and multi-factor authenticationUnderstanding of power utilities, retail energy, and oil & gas industry trends and emerging threats would be useful but not essentialAbility to draw upon external network to understand emerging Cyber Security threats and eventsKnowledge of internal and/or external regulatory policies, standards, procedures, and controls (e.g., COBIT, COSO, NIST, ISO27xx)Ability to drive technical consensus and facilitate agreements with challenging stakeholdersAbility to understand business visions and strategyStrong communication (oral and written) and conflict management skillsEducation/ Certification: CISA, CRISC or other similar qualification (desirable)Our commitment to diversityWe are proud to be recognised as a disability-confident employer. Our customers come from a variety of different backgrounds, and so do we. We hire great people from all walks of life, not just because it's the right thing to do, but because it makes our company stronger. We will continue championing inclusivity while investing in our local communities to create a better, more sustainable world for everyone. We are incredibly proud to have been recognised by The Times for being one of the Top 50 Employers for Women.Our people are the beating heart of our business. We are incredibly proud of our commitment to being FlexFirst. From childcare to furry friends, we listened to our people and understood that they work best when they are comfortable and have a flexible working model that suits their individual needs.