Technology Risk and Control Analyst

Role Overview

Join Legal & General as a Technology Risk and Control Analyst to support the effective management of Information, Technology, and Data risks across the company. This role will involve analysing and reporting on risk management activities, partnering with First Line of Defence teams, and providing expert guidance on the design and implementation of the company's technology risk and control framework.

Support the Retail 2

LoD IT & IS Risk team in embedding technology policies and controls, deliver data-driven deep dives and targeted assurance reviews, and provide subject matter expertise on technology risk governance and framework application.

We're looking for a candidate with a strong understanding of technology risk management and control practices, experience using data analysis and analytics, and practical experience in risk management across first, second, or third line of defence functions.

• Degree‑level education or equivalent relevant professional experience
• Professional certifications in technology risk or information security (e.g., CRISC, CISA, CISSP)
• Strong understanding of technology risk management and control practices
• Familiarity with recognised technology and security control frameworks (e.g., ISO
  27001, COBIT, NIST)
• Experience using data analysis and analytics to produce meaningful insights and reporting
• Practical experience in risk management across first, second, or third line of defence functions
• Solid understanding of IT information risk principles, including confidentiality, integrity, availability, and authenticity

• Annual, performance‑related bonus plan
• Valuable share schemes
• Generous pension contribution
• Life assurance
• Healthcare Plan
• At least 25 days holiday, plus public holidays
• Competitive family leave
• Electric car scheme
• Discounts on L&G products and high street stores