Technology Risk & Compliance Analyst - name

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.

Brown & Brow n is seeking a Technology Risk & Compliance Analyst to manage technology risk and ensure compliance across the Retail Technology portfolio. This role embeds risk and compliance into delivery as an integrated capability that enables speed, quality, and regulatory alignment.

The ideal candidate will partner with portfolio leaders, delivery teams, security, and business stakeholders to proactively identify, prioritize, and manage risks, enforce compliance standards, and drive remediation across applications, infrastructure, and data environments. This role aligns to the Retail OCIO objective of managing risk within defined appetite while enabling scalable, secure technology delivery.

How you will Contribute:

Technology Risk Management

Identify, assess, and document technology risks across projects, products, and platforms within the Retail portfolio.

Facilitate the prioritization of technology risks based on business impact, regulatory exposure, and defined risk appetite.

Conduct risk assessments for new initiatives, including M&A integrations and platform implementations.

Partner with project managers and product teams to integrate risk mitigation into delivery plans and milestones.

Ensure risk mitigation strategies align to enterprise risk appetite and portfolio priorities.

Monitor risk exposure and ensure remediation activities are tracked through completion.

Compliance Oversight & Governance

Ensure alignment with internal policies and external regulatory requirements (e.g., SOX, SOC controls, data privacy standards).

Support implementation and maintenance of IT governance, risk, and compliance (GRC) frameworks.

Evaluate and ensure technology policies, standards, and procedures are fit for purpose and aligned to regulatory and business requirements.

Recommend updates to policies and standards based on regulatory changes, audit findings, and evolving risk landscape.

Maintain compliance documentation, control narratives, and evidence repositories.

Monitor and report adherence to policies, standards, and standard operating procedures across the portfolio.

Audit & Control Effectiveness

Support internal and external audit activities, including evidence collection, walkthroughs, and remediation tracking.

Partner with internal and external Audit to support successful audit outcomes, including SOX compliance, evidence validation, and timely remediation of findings.

Assess effectiveness of IT controls and identify gaps across applications, infrastructure, and processes.

Partner with control owners to strengthen control design and execution.

Drive timely closure of audit findings and control deficienc