Join us, be part of more. We’re so much more than an energy company. We’re a family of brands revolutionising how we power the planet. We're energisers. One team of 21,000 colleagues that's energising a greener, fairer future by creating an energy system that doesn’t rely on fossil fuels, whilst living our powerful commitment to igniting positive change in our communities. Here, you can find more purpose, more passion, and more potential. That’s why working here is #MoreThanACareer. We do energy differently - we do it all. We make it, store it, move it, sell it, and mend it. An opportunity to play your part – The successful candidate will join the British Gas Energy (BGE) Technology Team, focusing on managing Technology Risk as the first line of defence. This role involves facilitating interactions between the Digital Technology Services team and BGE Technology, working collaboratively to identify and manage Technology risks to protect Centrica’s customers, data, services, and systems. The candidate will assist the Head of Risk and Compliance in performing analytical work on Risk Posture and appetite, providing insights into current threats and the risk landscape. Additionally, the role includes analysing existing risk mitigation strategies and technology controls, communicating their efficacy to the Manager, and suggesting improvements.Location: UK, Windsor Hybrid (Talk to us about flexible working) The day to day:<ul><li>Assist in implementing the Technology Risk and Controls framework, ensuring timely assessment and treatment of security risks.</li><li>Ensure Technology risks are either mitigated or accepted in accordance with the risk appetite.</li><li>Collaborate with IT teams to identify and assess Technology risks, including Cyber and InfoSec risks.</li><li>Conduct periodic Technology risk assessments of key services, third parties, and regulatory commitments, and monitor remediation plans.</li><li>Assess and classify services based on their Confidentiality, Integrity, and Availability.</li><li>Use the output from Technology risk assessments to identify control gaps and weaknesses, providing strategic direction to improve control efficacy.</li><li>Work with IT/OT teams to understand key Technology risks and agree on actions to mitigate or monitor and enhance controls.</li><li>Produce quarterly IT Risk submissions for business units and collaborate with Group-level risk functions on Technology risk.</li><li>Inform senior leadership of risks and recommendations in non-technical terms, considering cost/benefit, to ensure the security of Information Systems.</li></ul>About You<ul><li>Preferred active certification from ISACA in one of the following domains:<ul><li>Certified Information Systems Auditor (CISA)</li><li>Certified Information Security Manager (CISM)</li></ul></li></ul><ul><li>Strong knowledge of Technology risk and control assessment methods.</li><li>Proficient in Information Security technologies, such as identity and access management, encryption, and multi-factor authentication.</li><li>Understanding of power utilities, retail energy, and oil &amp; gas industry trends and emerging threats is useful but not essential.</li><li>Ability to leverage external networks to understand emerging Cyber Security threats and events.</li><li>Knowledge of internal and/or external regulatory policies, standards, procedures, and controls (e.g., COBIT, COSO, NIST, ISO27xx).</li><li>Capability to understand business visions and strategy, anticipate associated risks from an Information Technology perspective, and facilitate business objectives while managing Technology risk exposure; acting as a trusted Technology risk advisor to the business.</li></ul>Why should you apply?       We’re not a perfect place – but we’re a people place. Our priority is supporting all of the different realities our people face. Life is about so much more than work. We get it. That’s why we’ve designed our total rewards to give you the flexibility to choose what you need, when you need it, making sure that you and your family are supported not only financially, but physically and emotionally too. Visit the link below to discover why we’re a great place to work and what being part of more means for you.      <a href="http://www.morethanacareer.energy/centrica">https://www.morethanacareer.energy/centrica</a>  If you're full of energy, fired up about sustainability, and ready to craft not only a better tomorrow, but a better you, then come and find your purpose in a team where your voice matters, your growth is non-negotiable, and your ambitions are our priority. Help us, help you. We would love for you to share any information about yourself throughout our recruitment process so that we can better understand you and help shape your journey.

Centrica Energy is a renewable energy trading company operating out of eight offices across all time zones to move energy from source to use. Our mission is to drive the green transition while offering sustainable and predictable energy costs for suppliers and offtakers. In short, we call ourselves energy movers by nature. Engaged and empowered people are the key to our success and we&rsquo;re proud of our people, their engagement, and the culture we have created. We are devoted to fostering an amazing workplace culture where everybody can thrive and do great work, while having a strong sense of camaraderie. Our Danish and UK entity are &lsquo;Great Place to Work&rsquo; certified, and our Danish entity was in April 2024 awarded &lsquo;Best Workplaces in Denmark for Gender Equality&rsquo; and awarded the 3rd &ldquo;Best Workplaces in Denmark&rdquo; among the 25 awarded companies and organisation between 50-499 employees. Follow us to stay updated on all the latest news, activities and vacancies at Centrica Energy.

Technology Risk Management Analyst

Join us, be part of more.&nbsp;We’re so much more than an energy company. We’re a family of brands revolutionising how we power the planet. We're energisers. One team of 21,000 colleagues that's energising a greener, fairer future by creating an energy system that doesn’t rely on fossil fuels, whilst living our powerful commitment to igniting positive change in our communities. Here, you can find more purpose, more passion, and more potential. That’s why working here is #MoreThanACareer. We do energy differently - we do it all. We make it, store it, move it, sell it, and mend it. An opportunity to play your part – The successful candidate will join the British Gas Energy (BGE) Technology Team, focusing on managing Technology Risk as the first line of defence. This role involves facilitating interactions between the Digital Technology Services team and BGE Technology, working collaboratively to identify and manage Technology risks to protect Centrica’s customers, data, services, and systems. The candidate will assist the Head of Risk and Compliance in performing analytical work on Risk Posture and appetite, providing insights into current threats and the risk landscape. Additionally, the role includes analysing existing risk mitigation strategies and technology controls, communicating their efficacy to the Manager, and suggesting improvements.Location: UK, Windsor Hybrid (Talk to us about flexible working) The day to day:<ul><li>Assist in implementing the Technology Risk and Controls framework, ensuring timely assessment and treatment of security risks.</li><li>Ensure Technology risks are either mitigated or accepted in accordance with the risk appetite.</li><li>Collaborate with IT teams to identify and assess Technology risks, including Cyber and InfoSec risks.</li><li>Conduct periodic Technology risk assessments of key services, third parties, and regulatory commitments, and monitor remediation plans.</li><li>Assess and classify services based on their Confidentiality, Integrity, and Availability.</li><li>Use the output from Technology risk assessments to identify control gaps and weaknesses, providing strategic direction to improve control efficacy.</li><li>Work with IT/OT teams to understand key Technology risks and agree on actions to mitigate or monitor and enhance controls.</li><li>Produce quarterly IT Risk submissions for business units and collaborate with Group-level risk functions on Technology risk.</li><li>Inform senior leadership of risks and recommendations in non-technical terms, considering cost/benefit, to ensure the security of Information Systems.</li></ul>About You<ul><li>Preferred active certification from ISACA in one of the following domains:<ul><li>Certified Information Systems Auditor (CISA)</li><li>Certified Information Security Manager (CISM)</li></ul></li></ul><ul><li>Strong knowledge of Technology risk and control assessment methods.</li><li>Proficient in Information Security technologies, such as identity and access management, encryption, and multi-factor authentication.</li><li>Understanding of power utilities, retail energy, and oil &amp; gas industry trends and emerging threats is useful but not essential.</li><li>Ability to leverage external networks to understand emerging Cyber Security threats and events.</li><li>Knowledge of internal and/or external regulatory policies, standards, procedures, and controls (e.g., COBIT, COSO, NIST, ISO27xx).</li><li>Capability to understand business visions and strategy, anticipate associated risks from an Information Technology perspective, and facilitate business objectives while managing Technology risk exposure; acting as a trusted Technology risk advisor to the business.</li></ul>Why should you apply?  &nbsp;  &nbsp; We’re not a perfect place – but we’re a people place. Our priority is supporting all of the different realities our people face. Life is about so much more than work. We get it. That’s why we’ve designed our total rewards to give you the flexibility to choose what you need, when you need it, making sure that you and your family are supported not only financially, but physically and emotionally too. Visit the link below to discover why we’re a great place to work and what being part of more means for you. &nbsp;  &nbsp; <a href="http://www.morethanacareer.energy/centrica">https://www.morethanacareer.energy/centrica</a> &nbsp;If you're full of energy, fired up about sustainability, and ready to craft not only a better tomorrow, but a better you, then come and find your purpose in a team where your voice matters, your growth is non-negotiable, and your ambitions are our priority. Help us, help you. We would love for you to share any information about yourself throughout our recruitment process so that we can better understand you and help shape your journey.

Technology Risk Management Analyst

About the Job

About the Company

Centrica Energy

Similar Jobs

Senior IS Security Architect

Senior IS Security Architect

IT Risk Specialist

IT Risk Specialist

Cybersecurity GRC Analyst | Digital Infrastructure

Cybersecurity GRC Analyst | Digital Infrastructure

Senior Security Engineer

Senior Security Engineer

Senior IT Data Security & OT Risk Engineer

Senior IT Data Security & OT Risk Engineer

Staff Analyst, Risk Compliance Financial Services (Privacy, Cybersecurity and Fraud)

Staff Analyst, Risk Compliance Financial Services (Privacy, Cybersecurity and Fraud)

Cybersecurity Engineer

Cybersecurity Engineer

Senior Cybersecurity Engineer

Senior Cybersecurity Engineer

Senior GRC Analyst

Senior GRC AnalystNew

Senior Cyber Operations Analyst

Senior Cyber Operations AnalystNew