GRC Analyst
We are seeking a GRC Analyst to support the development, implementation and continuous improvement of governance, risk and compliance activities. This is an excellent opportunity for an analytical and organised professional who can work confidently with stakeholders across the organisation and help strengthen the control environment.
In this role, you will maintain risk and compliance registers, support risk assessments and monitor the progress of mitigation plans. You will help develop, review and maintain policies, standards, procedures and control documentation, ensuring that these remain aligned with business needs, regulatory expectations and recognised frameworks. You will also coordinate evidence collection for internal and external audits, track findings and support the timely completion of remediation actions.
Key responsibilities will include preparing management information and reports, monitoring key risk and compliance indicators, supporting control testing and documenting outcomes. You will contribute to governance meetings by preparing papers, recording actions and following up on agreed activities. The role will also involve assisting with security and compliance questionnaires, third-party risk assessments, business continuity activities and awareness initiatives.
The successful candidate will have experience in a governance, risk, compliance, information security or assurance environment, with a good understanding of risk management principles and internal controls. Familiarity with frameworks such as ISO 27001, NIST, COBIT or similar would be advantageous. You should be confident analysing information, identifying gaps and presenting clear, practical recommendations to varied audiences.
Strong written and verbal communication skills are essential, together with excellent attention to detail and the ability to manage competing priorities. You will be comfortable working independently while collaborating effectively with colleagues and external stakeholders. Professional qualifications or relevant training in risk, audit, compliance, information security or data protection would be beneficial. A proactive, curious and improvement-focused approach is highly valued.
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Consultant
- Security Analyst
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Governance and Compliance
- Cyber Security Consultant
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Data Protection Advisor
- Senior Consultant - IAM Securi...
- Identity and Access Management...
- Security Reverse / Anti-Bot En...
- Security Operations Centre Man...
- Senior Security Architect
- Legal, Data Protection & Infor...
- Cyber Governance and Assurance...
- OT Security Engineer
- Senior Security Operational Ce...
- GRC Analyst
- Cyber Risk Lead (Legacy Coordi...