IT Governance Analyst

IT Governance Analyst

Our client is looking to appoint an IT Governance Analyst to join their IT function in Glasgow.

• Home
• Vacancies

All vacancies Apply now

Role requirement

Vacancy type

Permanent

Sector

Technology / Fintech and IT

Specialisim

Information Security

Location

Glasgow

Language skills

English

Job reference No.

16634

Salary

Competitive

Data Published

12/10/2026

Closing date

02/11/2026

Job Description:

Our client is looking to appoint an IT Governance Analyst to join their IT function. In this role you will conduct IT due diligence on technology suppliers and respond to IT due diligence questionnaires from clients and others. This includes evaluating supplier security, operational resilience, governance and risk management controls, assessing compliance with regulatory and contractual obligations, and identifying technology, cyber, operational and data protection risks. You will also maintain due diligence records and a centralised knowledge base, support supplier on boarding and periodic reviews, and build strong relationships with internal stakeholders and external providers.

Skills/Experience:

• 3-5 year's experience in a similar role with a focus on IT, information security, technology risk or IT audit or in a more operational IT role.
• A solid understanding of third-party supplier risk and technology due diligence, underpinned by knowledge of information security principles and common cyber risks.
• Familiarity with business continuity, disaster recovery and operational resilience principles.
• Experience reviewing and interpreting technical documentation, policies and security controls.
• Ability to identify and assess technology and operational risks and communicate findings clearly to a range of stakeholders.
• Ability to undertake horizon scanning to identify emerging technology, cybersecurity, regulatory and operational risks.
• Strong analytical and problem-solving skills with excellent attention to detail.
• Confident written and verbal communication skills, with the ability to engage with both technical and non-technical stakeholders.
• Well organised, with the ability to manage multiple workstreams and meet deadlines.
• Proactive, inquisitive and keen to develop knowledge of technology risk and governance.
• Proficient in Microsoft Office applications, particularly Excel, Word and PowerPoint.
• Results-focused and client-focused, credible and respected by colleagues at all levels, with the initiative to look ahead and act without being asked, and a structured approach to decision-making.
• Experience completing or supporting due diligence, security and compliance questionnaires would be an advantage.

Core Responsibilities:

• Conduct IT due diligence assessments on prospective and existing third-party technology suppliers.
• Respond to client and other IT due diligence and information security questionnaires.
• Evaluate supplier security, operational resilience, governance and risk management controls.
• Review supplier documentation, including information security policies, ISO 27001 certifications and business continuity/disaster recovery plans.
• Assess third-party compliance with organisational policies, regulatory requirements and contractual obligations.
• Identify technology, cybersecurity, operational and data protection risks associated with third-party providers.
• Support supplier on boarding and periodic supplier review processes.
• Coordinate responses with internal teams to ensure accurate and consistent client communications.
• Maintain due diligence records and evidence to support governance and regulatory requirements.
• Maintain awareness of internal systems, processes and policies, and compile a centralised database/knowledge centre of key responses.
• Contribute to the continuous improvement of third-party risk management processes.
• Build and maintain effective relationships with internal stakeholders and external suppliers to facilitate risk assessments and information gathering.
• Ensure supplier adherence to regulatory standards and internal policies.
• Lead exercises to complete due diligence analysis of service providers, drawing on detailed technical subject matter knowledge, regulatory awareness and skilled relationship management.
• Support on cyber security risk and business continuity tasks.
• Support on the maintenance and drafting of policies and procedures.
• Carry out regulatory horizon scanning to keep abreast of changes that will impact the business.

Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.

To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.

At Core-Asset, we're committed to protecting and respecting your privacy. Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. We may change this policy from time to time, so please check this policy occasionally to ensure that you're happy with any changes.

By engaging with us (either by applying for a job we're advertising, registering through our website, or getting in touch with our business) you're agreeing to be bound by this policy.

Core-Asset Consulting is committed to protecting the privacy of our candidates, clients and website users. For further information, please refer to our full Privacy Statement available on our website http://www.core-asset.co.uk/about-core-asset/privacy-statement

Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland.

Apply now

Contact

T: 0131 264 0239 E: kevin@core-asset.co.uk

Kevin Feely Associate Director, Technology & Digital Innovation

Joining Core-Asset Consulting in 2026, Kevin brings almost three decades of experience connecting technology professionals with leading employers. He began his career in technology recruitment in London before returning to Scotland, where he has built an extensive network and a deep understanding of the UK technology market.

Specialising in technology recruitment, Kevin has a track record of successful placements across permanent, contract and executive search assignments for organisations ranging from SMEs to global enterprises. He recruits across the full breadth of technology functions, from graduate and first-line support roles through to IT Director, CIO, CTO and CISO appointments.

Kevin takes an honest, knowledgeable and consultative approach to recruitment, combining the necessary pace with a comprehensive understanding of each client and assignment. His integrity and strong rapport with clients and candidates have earned him a reputation as a trusted advisor within the technology sector.

Full Profile

We put people before profit, service before sales and ethics above all.

Betsy Williamson Chief Executive Officer

You might also be interested in

20-Jan-2025

The 2020s have seen monumental changes in employment, and 2025 is shaping up to be no different, with several trends key emerging.

19-Nov-2024

Louise Powrie, Managing Director, reflects on her journey to co-founding a business that prioritises integrity and inclusivity.

01-Aug-2024

A conversation featuring our Associate Director, Emma Hogg, discussing her career journey and key recruitment trends.

24-Jul-2024

Here’s a closer look at what makes us different.