Hybrid IT Risk Analyst

at Davy

• Job title: IT Risk Analyst
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: Cyber Security
• Location requirements: Hybrid, Dublin, Ireland

About the role

• IT Risk Analyst conducting threat analysis and managing Technology risk at Davy Group. Collaborating with teams to enhance IT security and ensuring compliance with regulatory standards.

Responsibilities

• Conduct threat analysis to identify threats and cyber security risks
• Ensure protection of technology, applications, systems, infrastructure, and processes
• Work as part of a team to develop and operate a Risk framework for Technology
• Monitor and manage Technology risk
• Facilitate identification, analysis, and monitoring of Technology risks
• Comply with Conduct Standards to protect Davy, clients, and people
• Conduct comprehensive risk assessments to identify vulnerabilities
• Responsible for IT Risk Management processes including risk tracking and issue management
• Establish and report key Risk & Control metrics
• Identify threats and conduct risk assessments
• Monitor IT activities and projects for vulnerabilities
• Research new threats, trends, and opportunities to improve processes
• Collaborate with IT and business units on risk mitigation strategies
• Maintain and update risk registers
• Support stakeholders with risk analysis and reporting
• Review and recommend controls for Technology risks
• Collate and challenge data for Key Risk Indicators
• Support Risk Event tracking and reporting
• Support IT-enabled change programs with potential risks
• Support Continual Improvement activities

Requirements

• **About the role**
• An exciting opportunity has opened up in our IT division. As an IT Risk analyst, the role is responsible to conduct threat analysis to identify threats and cyber security risks to a company's information systems to ensure that technology, applications, systems, infrastructure, and processes are protected.
• Reporting to the Head to the IS Risk Manager, the Technology Risk Analyst will work as part of a team responsible for the coordination, development, and operation of an enhanced Risk framework for Technology (including security). Working closely with domain and subject matter experts, the candidate will ensure that Technology risk is effectively monitored and managed. Playing a key role in the team, the Analyst will facilitate and support the identification, analysis, and monitoring of Technology risks.
• In the role, the successful candidate will:
• Comply with the Conduct Standards to protect Davy, our clients, and our people
• Set and agree SMART objectives for your role and cascade through your team as appropriate
• Conduct comprehensive risk assessments to identify vulnerabilities in our IT infrastructure and applications
• Responsible for efficacy of the IT Risk Management processes including risk tracking, issue management and control assurance
• Establish, maintain & report key Risk & Control metrics on a regular basis
• Identify threats and conduct risk assessments to address IT and cyber security risks
• Monitor IT activities, projects, conduct risk audits, and identify areas of vulnerability
• Research and evaluate data from various sources to identify new threats, trends, issues, and opportunities to improve processes
• Conduct comprehensive risk assessments to identify vulnerabilities in our IT infrastructure and applications
• Collaborate with IT and business units to implement risk mitigation strategies and monitor their effectiveness
• Maintain risk registers and updates
• Work with domain and subject matter experts to identify, analyse and assess key risk scenarios and support stakeholders with risk analysis and reporting
• Review and recommend suitable and appropriate, cost-effective controls or counter measures to address key Technology risks
• Collate and challenge data for Key Risk Indicators
• Collate risk reporting and status updates for committees.
• Support the Risk Event process and provide Risk Event tracking and reporting
• Support key programmes with potential risks arising from planned IT-enabled change
• Support Continual Improvement activities within the team
• **Client Orientated**
• Support IS work which enhances high standards in respect of client service, adherence to regulatory and risk frameworks, client charter and other applicable measures.
• **Risk and Compliance**
• As we operate in a highly regulated industry, everyone in Davy must understand the risks for their area of business as well as the legal and regulatory requirements we must comply with.
• Create a risk aware and compliant culture within area of accountability ensuring people understand their responsibilities and the standards expected of them.
• Compliance with Davy Risk Management Framework, accompanying policies, and procedures.
• Adherence to Davy policies/frameworks on Reporting and Escalation of risk events, policy breaches and emerging Issues.
• Comply with all fitness and probity assessments as required from time to time by virtue of any statutory directorship and undertake to meet the standards required on an ongoing basis.
• Act in accordance with the Central Bank of Ireland requirements adhering to conduct standards and additional conduct standards if applicable as outlined in the Individual Accountability Framework (IAF).
• Remain abreast of changing regulatory requirements and regulations, ensuring any changes applicable to your department are adhered to and implemented/escalated as appropriate.

Benefits

• **What we offer **
• At Davy, our people are our biggest investment. In today’s fast-moving world, we know it’s important to feel secure and empowered. That’s why Davy benefits support you through all of life’s stages, offering health and wellness, flexible working options, flexible benefits allowance, learning and development opportunities, through to assisted retirement planning.
• **Health and Wellbeing **
• Psychological safety, emotional wellbeing and support are a priority at Davy. We offer a comprehensive Employee Assistance Programme (EAP) and mental health first aid. Our Sports & Social teams promote physical wellbeing and social connection.
• **Reward and Recognition **
• We offer a competitive remuneration package to include salary, bonus, pension and a host of additional benefits to protect you and your family when it matters most.
• **Growth and Development **
• Our award-winning L&D function supports you and your growth at Davy. We offer a comprehensive range of professional and personal development opportunities. Our culture supports learning, and we encourage you to explore more at Davy.
• **Positive Workplace **
• Our workplace is inclusive, diverse, and offers everyone a sense of belonging. We are flexible and continue to support a hybrid working model. You will get to be your best at Davy.
• **Values and Culture **
• Exceptional client outcomes delivered by a world class team, underpinned by our core Davy values – One Team, Client Success, and Proud Legacy.