Technology GRC Analyst

Why work for us?
A career at Janus Henderson is more than a job, it’s about investing in a brighter future together.
Our Mission at Janus Henderson is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world-class service. We will do this by protecting and growing our core business, amplifying our strengths and diversifying where we have the right.
Our Values are key to driving our success, and are at the heart of everything we do:
Clients Come First - Always | Execution Supersedes Intention | Together We Win | Diversity Improves Results | Truth Builds Trust
If our mission, values, and purpose align with your own, we would love to hear from you!
Your opportunity
Support the identification, assessment, documentation and reporting of technology risks, issues and control weaknesses.
Help assess whether key technology controls are appropriately designed and operating effectively, including reviewing evidence, identifying exceptions and documenting balanced conclusions.
Undertake gap analysis against technology policies, standards, regulatory requirements and control expectations, identifying practical opportunities to strengthen controls and processes.
Work with control owners and technology teams to investigate exceptions, agree proportionate remediation actions and track progress through to closure.
Support regulatory, audit and other assurance activity by coordinating evidence requests, facilitating stakeholder responses and helping to resolve findings.
Contribute to governance, risk and compliance procedures, control testing approaches, evidence standards, reporting, tooling and oversight of areas such as End User Developed Applications.
Prepare clear, concise reporting on technology risks, control effectiveness, assurance outcomes and remediation progress for management audiences.
Support the effective operation of governance forums by coordinating inputs, preparing materials and tracking decisions and actions.
Promote good governance, risk awareness, control discipline, accountability and continuous improvement across Technology.
Carry out other duties as assigned
What to expect when you join our firm
Hybrid working and reasonable accommodations
Generous Holiday policies
Excellent Health and Wellbeing benefits including corporate membership to Wellhub
Paid volunteer time to step away from your desk and into the community
Support to grow through professional development courses, tuition/qualification reimbursement and more
Maternal/paternal leave benefits and family services
All employee events including networking opportunities and social activities
Lunch allowance for use within our subsidized onsite canteen
Must have skills
Experience in technology governance, risk and compliance, IT risk, IT audit, control assurance, operational risk, information security or a related field.
Good working knowledge of technology risks, IT controls, control assurance techniques and risk and control assessment methodologies.
Experience supporting assurance, regulatory, audit, risk assessment or control review activity.
Ability to review evidence, identify exceptions and document clear, balanced conclusions.
Strong analytical skills and attention to detail, with the ability to apply sound judgement when assessing risks, evaluating control effectiveness and identifying practical improvement opportunities.
Clear written and verbal communication, including the ability to explain risk and control matters to technical and non-technical stakeholders.
Collaborative approach with the ability to build trusted working relationships and work effectively across Technology, Risk, Compliance, Information Security and Audit stakeholders.
Ability to work independently, manage competing priorities, maintain organised documentation and follow agreed actions through to completion.
Ability to analyse information from multiple sources and produce clear, concise and actionable reporting for management audiences.
Nice to have skills
Familiarity with recognised frameworks and standards such as ISO 27001, COBIT, ITIL, NIST or operational risk frameworks.
Experience supporting governance or assurance for End User Developed Applications.
Experience preparing risk, control and remediation reporting for management or governance forums.
Experience contributing to GRC procedures, control testing approaches, evidence standards or supporting tooling.
Confidence using Microsoft Office, data analysis tools and appropriate AI-enabled technologies to improve analysis, documentation, reporting and process efficiency.
A relevant professional certification, such as CISA, CRISC, CISM, CISSP or equivalent.
Experience working within a regulated financial services environment.
Supervisory responsibilities
No