Data Risk Analyst

General

Job Title:

Data Risk Analyst

Division:
Data Management / Information Technology

Reports To:

As per Beazley’s organisation chart

Key Relationships:
Risk, Audit, Compliance, Information Security, Financial controls teams, General Management, IT/Data leadership and SME’s, Operational resilience, Procurement and Third-Party Management, COO general management, COO Business Risk and Controls team

Job Summary:

The role will effectively support management and oversight of compliance across the Data portfolio, ensuring robust risk, control management and assurance, internal and external audits, regulatory actions and work streams. The role will play a part in developing and producing comprehensive monthly, quarterly, and ad‑hoc risk and controls review and reporting, providing assurance to senior management and keeping them informed.

• Support oversight of data risk identification, assessments, acceptances, and mitigation strategies across data management and technology functions, ensuring appropriate controls are designed and operating effectively.
• Support management of all data risks, controls, incidents, issues, and remediation activities that fall under the IT and Data remit, ensuring alignment with Group Risk Management frameworks.
• Partner with Data Governance, Architecture, Engineering, Security, and Business teams to co‑manage and enhance the existing data control environment.
• Support the enhancement and management of data risk frameworks, data risk registers, and risk reporting processes.
• Assist in embedding data governance and risk management practices across critical data domains and business processes.
• Support development and monitoring of KPIs and KRIs for data risks, control effectiveness, data quality, regulatory compliance, and governance maturity.
• Support control assessments, control testing activities, and remediation plans across the data environment.
• Challenge business and technology stakeholders on data risk and control matters, including incidents, issues, remediation actions, and regulatory obligations.
• Contribute to the design, implementation, and continuous improvement of data risk policies, standards, controls, and governance processes.
• Support mapping of policies, standards, and controls to regulatory requirements and industry frameworks (e.g. GDPR, DORA, BCBS
  239, ISO, NIST, COBIT).

• Support management of internal and external audit processes, ensuring timely and accurate responses to audit requests, and driving remediation of findings with timely closures of related actions.
• Provide guidance and support to stakeholders regarding compliance and governance requirements.
• Support maintenance of a Data compliance register, mapped with applicable regulatory requirements and associated controls.
• Monitor changes in relevant laws and regulations and advising on impact and remediation, in conjunction with Compliance.
• Ensure policies, standards and guidance are updated following any review activities such as (but not limited to) external audits, regulatory changes and any internal change/requirements. And support the governance and communication of these updates to relevant stakeholders and committee/boards.
• In collaboration with Compliance, support relevant teams in fulfilling regulatory deliverables and provide input on any required communication to a regulator (eg. CBI).

• Develop and carry out an annual assurance programme for controls and policies under the IT and Data functions.

• Extensive experience (5+ years) in data compliance, risk management, controls, and governance within a regulated environment.
• Experience with in a financial industry desired.
• BA/BS degree, and/or relevant industry experience.

• Experience in Data governance, risk, and compliance.
• Strong stakeholder management at all levels.
• Providing guidance on Data governance, risk, and compliance matters.
• Ability to identify and evaluate Data risks and controls and provide practical and effective recommendations.
• Ability to communicate complex Data risk and compliance issues to non-technical…