Technology Risk and Control Analyst in London

Legal & General (L&G) is a leading UK financial services group and major global investor. We have been safeguarding people’s financial futures since 1836, striving to build a better society while improving the lives of our customers and creating value for shareholders. We are one of the world’s largest asset managers, providing powerful asset origination capabilities that underpin our retirement and protection solutions.

We are seeking a Technology Risk and Control Analyst to support the effective management of Information, Technology, and Data risks across L&G. This role will be responsible for analysing and reporting on risk management activities while partnering closely with First Line of Defence (1LoD) teams, process owners, and control owners. You will provide expert guidance and oversight on the design, implementation, and ongoing effectiveness of the Group’s technology risk and control framework.

The scope of the role spans IT, Information Security, Data, and IT Outsourcing risks, alongside emerging technologies such as artificial intelligence, and includes programme assurance activities.

• Support the Retail 2LoD IT & IS Risk team in embedding technology policies, standards and controls consistently across the Group, ensuring effective risk mitigation through accurate, timely metrics and reporting.
• Deliver data‑driven deep dives and targeted assurance reviews to assess the design and effectiveness of key technology controls, in collaboration with 1LoD and 1.5LoD teams.
• Provide subject matter expertise on technology risk governance, framework application and policy interpretation, promoting a strong culture of security and risk awareness.
• Analyse risk and control data from systems such as OneSumX, ServiceNow and Prevalent to generate actionable insights and monitor risk exposure against defined tolerances.
• Support assurance activities for high‑risk technology change programmes, ensuring key risks are identified, understood and effectively managed throughout delivery.
• Assess technology‑related risk events and control weaknesses, identify root causes and evaluate remediation actions to drive continuous improvement.
• Produce high‑quality risk reporting by collating and synthesising IT and Information Security data for governance forums and committees.
• Collaborate with 1LoD and 1.5LoD stakeholders to gather, validate and refine inputs, ensuring accurate and impactful risk reporting and informed decision making.

• Degree‑level education or equivalent relevant professional experience is desirable.
• Professional certifications in technology risk or information security (e.g., CRISC, CISA, CISSP) are advantageous but not essential.
• Strong understanding of technology risk management and control practices.
• Familiarity with recognised technology and security control frameworks (e.g., ISO 27001, COBIT, NIST) is beneficial.
• Experience using data analysis and analytics to produce meaningful insights and reporting.
• Practical experience in risk management across first, second or third line of defence functions.
• Solid understanding of IT information risk principles, including confidentiality, integrity, availability and authenticity.
• Demonstrated ability to take ownership of deliverables, collaborate effectively and influence stakeholders through strong communication and presentation skills.

• Opportunity to participate in our annual, performance‑related bonus plan and valuable share schemes.
• Generous pension contribution.
• Life assurance.
• Healthcare plan (permanent employees only).
• At least 25 days holiday, plus public holidays, 26 days after 2 years’ service. Option to buy and sell holiday available.
• Competitive family leave.
• Participation in our electric car scheme, offering the option to hire a brand‑new electric car through tax‑efficient salary sacrifice (permanent employees only).
• Various discounts on our own products and at a range of high‑street stores and online.
• Commitment to net‑zero carbon workplaces by 2030, investing in sustainable, modern offices across the UK.

At L&G, we believe it is possible to generate positive returns today while building a better future for all. If you join us, you will be part of a welcoming, inclusive culture, with opportunities to collaborate with people of diverse backgrounds, views and experiences. Guided by leaders with integrity who care about your future and wellbeing, and empowered through initiatives that support you to develop your career and excel.

We care passionately about outcomes rather than attendance and are therefore open to discussing all kinds of flexible working options, including part‑time, term‑time and job shares. Although some roles have limited flexibility due to customer demand, we accommodate requests when we can.

It doesn’t matter if you don’t meet every single criterion in this advert. Instead, think about what you excel at and what else you can bring in terms of strengths, potential and connection to our purpose.