Senior Associate – Technology Risk & Resilience

About the role

Our Technology Risk and Resilience team helps organisations navigate evolving regulatory requirements while building future‑proof technology estates. As a Senior Associate you will support advisory engagements, conduct risk assessments and contribute to the development of resilient digital frameworks.

Key responsibilities

• Support the engagement manager and team in delivering technology risk and resilience advisory projects.
• Perform control walkthroughs, sample testing and evidence review across risk domains.
• Draft gap‑analysis and maturity‑assessment artefacts aligned to COBIT, ITIL, NIST CSF, ISO 27001/22301.
• Assist regulatory readiness and assurance projects, including DORA resilience assessments.
• Prepare working papers and contribute to client, regulator and internal reports.
• Use ServiceNow for resilience‑related analysis and reporting.
• Leverage AI tools to enhance risk monitoring and resilience testing.
• Contribute to cloud and DevOps risk assessments, ensuring secure and recoverable environments.
• Support business‑development activities such as tender responses and proposal creation.
• Build trusted relationships with client SMEs and control owners.
• Coach junior team members and drive personal development.

Required profile

• Experience in technology risk, IT audit, digital resilience or related consulting.
• Working knowledge of UK/EU technology and resilience regulations (including DORA) and frameworks such as COBIT, ITIL, NIST CSF, ISO 27001/22301.
• Practical experience in control testing, evidence sampling and KRI analysis.
• Strong communication skills to translate technical findings for business stakeholders.
• Familiarity with ServiceNow for resilience analysis and automation.
• Understanding of technology risk models and resilience frameworks.
• Demonstrated use of AI in risk and resilience use cases.
• Progress toward certifications (CRISC, CISA, CISSP, ISO 22301 Lead Auditor, Prince2/AgilePM).
• Preferred exposure to regulatory remediation programmes.

Required skills

• COBIT
• ITIL
• NIST CSF
• ISO 27001
• ISO 22301
• ServiceNow
• AI tools
• Cloud platforms
• DevOps practices