Job Description
Refinitiv Data and Technology Risk Governance team is looking for an experienced individual to support the Technology Policy Governance function. The Technology Policy Analyst within Data and Technology Risk Governance team performs a key role in developing the tools and technology that support enterprise-wide  Technology Policy Governance for Refinitiv and for satisfying the obligations to Refinitiv customers and regulators.

A key component of the role is to implement the requirements, controls, and overall compliance requirements that Refinitiv entities, products, applications and services are obligated to.

The ideal candidate will possess the right demeanour, skillset and experience to operate in the fast-paced and dynamic world of cyber security and risk; with experience in technical control development, control compliance measurement, interpreting regulations, leading gap assessments and reporting compliance against risks. Additionally, they will have experience within security or technology governance programs, in a matrixed global environment and in a timely, efficient manner.

Essential Responsibilities:

•       Continuously assess existing Technology policies for relevancy and accuracy.
•       Maintain and implement a policy management lifecycle processes.
•       Support the Technology Risk Governance team on the Policy Working Group.
•       Administer the Technology Policy release process, including coordination of review and evaluation, develop policy language for publication, obtaining required levels of review/approval, change release to production.
•       Drive consensus across cross-functional partners to determine new policy feasibility and impact, balancing business needs, culture, and required protections.
•       Design and develop technology policies in conjunction with the architecture offices based on data available to determine impact and technical enforcement feasibility.
•       Support the operational activities to build and execute the Policy Governance program in alignment with Refinitiv business activities & CSTR strategy.
•       Implement the tools & capabilities to conduct in-depth analysis of data from disparate sources.
•       Perform assessments against policy governance principles/requirements. This includes assessments of controls before they are deemed effective.
•       Provide guidance on or interpretation of the Technology Policy Governance, procedures & tools for Refinitiv globally. This includes requirements for compliance to policy.
•       Maintain ongoing awareness to developments in both regulatory and cyber security requirements for policy governance (including changes/updates) across the global landscape.
•       Engage Application Owners to remediate assessment findings in a timely manner using approved solutions and processes.
•       Participate in the benchmarking of the enterprise-wide policy governance program and efforts to attain continuous improvement against the stated aims of the program.  
•       Establish and maintain relationships with key stakeholders and partners in Technology, Business Proposition, Compliance and General Counsel Teams.
•       Contribute to key operational and program level metrics to measure implementation of policies, maturity of the program and ongoing activities.
•       Assist in the development of content for employee and third-party training & awareness programs.
•       Creates regular metrics on the statuses of initiatives.
•       Deliver additional activities as defined by Senior Leadership.

Essential Requirements:

•       Experience as a Business or Data Analyst, an Information Security Analyst and/or working on policy governance programs.
•       Experience in Policy Framework management and technology control writing.
•       Knowledge of regulatory requirements for policy governance e.g. ISMS, ISO27001, NIST and industry practices related to policy management.
•       Critical thinking and thorough analysis to provide decision support and guidance to Refinitiv businesses, customers and executives.
•       Ability to work with and communicate effectively with technology stakeholders and managers.
•       Good verbal & written communication skills, including usage of Microsoft Office.
•       Strong team player with ability to execute in a matrix structure, across time zone and national boundaries.
 
Desired Characteristics:
 
•       Proficiency with data analysis tools & techniques
•       Experience supporting a Risk Management or Policy Governance program

As a global business, Refinitiv relies on diversity of culture and thought to deliver on our goals. Therefore we seek talented, qualified employees in all our operations around the world-regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under country or local law. Refinitiv is proud to be an Equal Employment Opportunity/Affirmative Action Employer providing a drug-free workplace.
 
Intrigued by a challenge as large and fascinating as the world itself? Come join us.

Locations
London-United Kingdom;Nottingham-United Kingdom