Staff GRC Analyst
We are seeking an experienced Staff GRC Analyst to help strengthen governance, risk and compliance practices across a complex technology environment. This is an influential role for a proactive professional who can translate regulatory expectations, business requirements and security principles into practical, sustainable controls.
You will lead and contribute to governance, risk and compliance initiatives, working closely with security, technology, legal, privacy, internal audit and operational teams. Your responsibilities will include maintaining risk registers, coordinating risk assessments, evaluating control design and effectiveness, and supporting the timely remediation of identified issues.
You will help develop, review and maintain policies, standards, procedures and control frameworks aligned with recognised industry practices and applicable regulations. The role will also involve coordinating internal and external audits, preparing evidence, tracking findings and producing clear reports for senior stakeholders. You will support the assessment of suppliers and third parties, contribute to security and compliance monitoring, and identify opportunities to improve processes through automation and better data quality.
The successful candidate will have substantial experience in governance, risk and compliance, information security, technology risk or a related discipline. You should be confident interpreting regulatory and contractual requirements and mapping them to controls and business processes. Experience with frameworks such as ISO 27001, SOC 2, NIST, CIS Controls or similar is desirable, along with familiarity with privacy, risk management and audit principles.
You will be an excellent communicator, capable of presenting complex issues clearly to both technical and non-technical audiences. Strong analytical, organisational and documentation skills are essential, as is the ability to manage competing priorities and work independently. A relevant professional qualification, such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, is advantageous.
This opportunity offers the chance to shape mature GRC capabilities, influence decision-making and make a measurable contribution to the organisation’s security, resilience and regulatory readiness.
Staff GRC Analyst
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Consultant
- Security Analyst
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Senior Security Consultant-Sec...
- Manager Application Security
- Data Privacy Co-Ordinator
- Information Security Manager
- Senior Technical Consultant-Se...
- Red Team Operator (Cyber Resil...
- Cyber Security Analyst
- CTI Lead
- Microsoft IAM Consultant / Ass...
- Security Architect
- IT Security Operations Lead
- Cyber Policy Lead