GRC Analyst

Our Operational Risk and Resilience function is seeking a GRC Analyst to lead the ongoing development, configuration, and support of our Archer Governance, Risk, and Compliance (GRC) platform.

You will act as the bridge between business requirements and technical delivery, working closely with risk, resilience, and technology stakeholders to ensure Archer evolves to meet regulatory expectations and the bank's internal risk management framework.

This is an excellent opportunity for someone with a blend of financial services risk knowledge and hands-on GRC systems experience to shape a platform that is central to the bank's risk and resilience agenda.

Responsibilities

System Development & Configuration

• Gather, document, and translate business requirements from risk, resilience, and control owners into functional and technical specifications for the Archer platform.
• Configure and maintain Archer modules/applications covering RCSA, Issue & Action Management, Operational Risk Event/Loss reporting, BIA, BCP, and Incident Management.
• Manage the end-to-end change lifecycle for Archer enhancements, including requirements gathering, design, build, testing (UAT), release, and post-implementation review.
• Maintain data integrity, workflows, taxonomies, and reference data within Archer in line with the bank's risk taxonomy and governance standards.
• Liaise with IT/Archer technical support on system upgrades, patches, integrations, and issue resolution.

Reporting & Dashboards

• Design, build, and maintain dashboards, reports, and MI packs within Archer to support risk oversight and decision-making.
• Produce regular and ad hoc reporting for senior stakeholders, ensuring accuracy, timeliness, and clear articulation of risk themes and trends.
• Support the production of Board and committee-level reporting on operational risk, resilience, and incident management.
• Continuously improve reporting outputs based on stakeholder feedback and evolving regulatory expectations.

Training & User Support

• Design and deliver training materials, user guides, and workshops to onboard new users and upskill existing users.
• Act as first point of contact for end-user queries, troubleshooting, and system support, escalating complex issues to vendor/IT support as needed.
• Promote consistent, high-quality use of Archer across the business, driving adoption and data quality improvements.

Governance & Continuous Improvement

• Support the Operational Risk Manager in aligning Archer functionality with regulatory requirements.
• Identify opportunities to automate manual processes and improve efficiency of risk and resilience workflows within the system.
• Maintain a roadmap of system enhancements, prioritising based on regulatory, business, and stakeholder needs.
• Support internal and external audits, and regulatory reviews, by ensuring Archer data and processes are well-documented and evidenced.

Qualifications

Essential Qualifications and Experience

• Experience working within financial services, ideally within a retail bank or similarly regulated environment.
• Demonstrable experience in operational risk management, including familiarity with RCSA, risk event/loss data, issue and action management, and/or operational resilience concepts.
• Hands-on experience configuring, administering, or supporting an enterprise GRC platform.
• Exposure to Business Intelligence/reporting tools for dashboard creation.
• Understanding of the UK/European regulatory landscape relevant to operational risk and resilience.
• Experience gathering business requirements and translating them into system design and configuration.

Skills and Competencies

• Strong analytical skills with the ability to interpret complex risk data and present it clearly to senior stakeholders.
• Excellent communication and stakeholder management skills, with the ability to train and support users at all levels.
• Detail-oriented with a strong focus on data quality, governance, and control.
• Project management skills, with the ability to manage multiple system change requests and priorities concurrently.
• Proactive, self-starting approach with a continuous improvement mindset.
• Ability to work collaboratively across the three lines of defence and with technology partners.