Job Search

We are seeking a GRC Analyst to support the development, implementation and continuous improvement of governance, risk and compliance activities. This is an excellent opportunity for an analytical and organised professional who can work confidently with stakeholders across the organisation and help strengthen the control environment.

In this role, you will maintain risk and compliance registers, support risk assessments and monitor the progress of mitigation plans. You will help develop, review and maintain policies, standards, procedures and control documentation, ensuring that these remain aligned with business needs, regulatory expectations and recognised frameworks. You will also coordinate evidence collection for internal and external audits, track findings and support the timely completion of remediation actions.

Key responsibilities will include preparing management information and reports, monitoring key risk and compliance indicators, supporting control testing and documenting outcomes. You will contribute to governance meetings by preparing papers, recording actions and following up on agreed activities. The role will also involve assisting with security and compliance questionnaires, third-party risk assessments, business continuity activities and awareness initiatives.

The successful candidate will have experience in a governance, risk, compliance, information security or assurance environment, with a good understanding of risk management principles and internal controls. Familiarity with frameworks such as ISO 27001, NIST, COBIT or similar would be advantageous. You should be confident analysing information, identifying gaps and presenting clear, practical recommendations to varied audiences.

Strong written and verbal communication skills are essential, together with excellent attention to detail and the ability to manage competing priorities. You will be comfortable working independently while collaborating effectively with colleagues and external stakeholders. Professional qualifications or relevant training in risk, audit, compliance, information security or data protection would be beneficial. A proactive, curious and improvement-focused approach is highly valued.

We are seeking a GRC Support Analyst to provide effective coordination and administrative support across governance, risk and compliance activities. This is an excellent opportunity for an organised and detail-focused professional to develop their experience within a structured risk and assurance environment.

In this role, you will maintain governance, risk and compliance records, ensuring information is accurate, complete and kept up to date. You will support the management of risk registers, control frameworks, policies, procedures and evidence repositories, while tracking actions and escalating overdue items where appropriate. You will also help prepare reports, dashboards, meeting papers and performance updates for internal stakeholders.

Key responsibilities will include coordinating compliance activities, supporting audit and assurance requests, arranging meetings and recording decisions and actions. You will liaise with colleagues across the business to gather evidence, monitor progress against agreed deadlines and assist with the completion of risk and control assessments. You may also contribute to policy reviews, staff communications, training administration and the continuous improvement of GRC processes and documentation.

The successful candidate will have experience in an administrative, analytical, risk, compliance, audit or governance support role. You should be confident working with spreadsheets, databases and document management systems, with strong attention to detail and the ability to handle confidential information appropriately. Excellent written and verbal communication skills are essential, together with the ability to organise competing priorities and build positive working relationships.

Knowledge of governance, risk management, compliance, internal controls or information security would be advantageous. Familiarity with GRC platforms, audit processes or recognised frameworks is desirable, although full training will be provided. You will be proactive, dependable and comfortable working independently while contributing effectively to a wider team. The role offers the opportunity to broaden your professional knowledge and play a valued part in strengthening risk and compliance practices.

We are seeking an experienced Staff GRC Analyst to help strengthen governance, risk and compliance practices across a complex technology environment. This is an influential role for a proactive professional who can translate regulatory expectations, business requirements and security principles into practical, sustainable controls.

You will lead and contribute to governance, risk and compliance initiatives, working closely with security, technology, legal, privacy, internal audit and operational teams. Your responsibilities will include maintaining risk registers, coordinating risk assessments, evaluating control design and effectiveness, and supporting the timely remediation of identified issues.

You will help develop, review and maintain policies, standards, procedures and control frameworks aligned with recognised industry practices and applicable regulations. The role will also involve coordinating internal and external audits, preparing evidence, tracking findings and producing clear reports for senior stakeholders. You will support the assessment of suppliers and third parties, contribute to security and compliance monitoring, and identify opportunities to improve processes through automation and better data quality.

The successful candidate will have substantial experience in governance, risk and compliance, information security, technology risk or a related discipline. You should be confident interpreting regulatory and contractual requirements and mapping them to controls and business processes. Experience with frameworks such as ISO 27001, SOC 2, NIST, CIS Controls or similar is desirable, along with familiarity with privacy, risk management and audit principles.

You will be an excellent communicator, capable of presenting complex issues clearly to both technical and non-technical audiences. Strong analytical, organisational and documentation skills are essential, as is the ability to manage competing priorities and work independently. A relevant professional qualification, such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, is advantageous.

This opportunity offers the chance to shape mature GRC capabilities, influence decision-making and make a measurable contribution to the organisation’s security, resilience and regulatory readiness.

We are seeking a Senior GRC Analyst to support the development, maintenance and continuous improvement of governance, risk and compliance practices across a complex technology and business environment. This is an excellent opportunity for an experienced professional to provide practical advice, strengthen control frameworks and help ensure that information, systems and services meet relevant regulatory and organisational requirements.

You will lead and contribute to risk assessments, control reviews and compliance activities, identifying gaps and recommending proportionate improvements. The role will involve maintaining risk and control registers, supporting policy development, coordinating remediation plans and preparing clear reports for senior stakeholders. You will also monitor changes in legislation, regulation and industry standards, assessing their potential impact and helping to embed appropriate responses.

Working closely with technology, security, legal, procurement and operational teams, you will support internal and external audits, customer assurance requests and third-party risk management. You will help manage evidence collection, track actions through to completion and promote consistent governance across projects and day-to-day operations. The successful candidate will be confident challenging existing processes constructively and translating complex requirements into practical, achievable actions.

We are looking for proven experience in a GRC, information security, IT audit, risk or compliance role, together with a strong understanding of recognised frameworks and standards such as ISO 27001, NIST, COBIT or relevant data protection requirements. Experience of managing audits, control testing, supplier assurance and risk treatment plans is highly desirable. Professional qualifications in information security, audit, risk or compliance would be advantageous.

You will be analytical, organised and comfortable managing several priorities in a changing environment. Strong written and verbal communication skills are essential, as is the ability to engage stakeholders at all levels and produce concise, evidence-based recommendations. In return, you will have the opportunity to influence governance maturity, support meaningful business outcomes and play a key role in strengthening organisational resilience.

We are seeking a Cyber Governance, Risk and Compliance (GRC) Analyst to support the development, implementation and continuous improvement of cyber security governance across a complex, international environment. This role will help ensure that information security practices align with business objectives, regulatory obligations and recognised industry standards. You will work collaboratively with technology, risk, audit, legal and operational stakeholders to strengthen the organisation’s cyber resilience and risk management capability.

Key responsibilities will include maintaining cyber security policies, standards, procedures and control frameworks; supporting regular cyber risk assessments and documenting risks, controls, treatment plans and remediation activity; and preparing clear reports, dashboards and management information for senior stakeholders. You will coordinate evidence gathering for internal and external audits, track findings through to closure, and assist with assurance reviews of systems, suppliers and third parties. The role will also contribute to compliance monitoring against relevant requirements, such as ISO 27001, NIST, data protection legislation and other applicable regulatory frameworks. You may be involved in policy reviews, control testing, risk awareness initiatives and the continuous enhancement of GRC processes and tooling.

The successful candidate will have experience in a cyber security, information security, risk, audit or compliance position, ideally within a large or geographically distributed organisation. You will have a sound understanding of security controls, risk assessment methodologies, governance principles and audit practices, with the ability to interpret technical information and communicate it clearly to non-technical audiences. Familiarity with standards such as ISO 27001, NIST or COBIT, as well as experience using GRC platforms, will be advantageous. Strong analytical, organisational and stakeholder management skills are essential, alongside a proactive approach, excellent attention to detail and the confidence to challenge constructively. Relevant professional qualifications, such as CISA, CRISC, CISSP or equivalent experience, would be desirable.

We are seeking an IT GRC Analyst to support the effective management of information technology governance, risk and compliance activities. This role will help ensure that technology processes, systems and controls are aligned with internal policies, regulatory obligations and recognised industry frameworks. You will work closely with colleagues across technology, security, audit, legal and business functions to identify risks, strengthen controls and promote a consistent approach to governance.

Key responsibilities will include maintaining IT policies, standards, procedures and control documentation; supporting risk assessments and tracking remediation actions; coordinating evidence collection for internal and external audits; and monitoring compliance with applicable laws, regulations and contractual requirements. You will assist with control testing, risk and issue reporting, third-party assessments, exception management and the preparation of clear management information. The role will also involve supporting the development of governance processes, contributing to awareness initiatives and helping teams understand and meet their control responsibilities.

The successful candidate will have experience in IT governance, risk management, information security, compliance or a closely related discipline. You should have a practical understanding of frameworks such as ISO 27001, COBIT, NIST or ITIL, along with knowledge of audit principles, control design and risk assessment methodologies. Strong analytical, organisational and communication skills are essential, as is the ability to manage competing priorities and work effectively with stakeholders at different levels. Experience using risk, compliance or audit management tools would be advantageous. Relevant qualifications, such as CISA, CRISC, CISM or a similar certification, are desirable, although equivalent professional experience will be considered.

We are seeking a Cyber Governance, Risk and Compliance (GRC) Analyst to support the development, operation and continuous improvement of cyber security governance and risk management practices across a complex, international environment. This role will help ensure that information security controls, policies and processes remain effective, proportionate and aligned with business objectives, regulatory obligations and recognised industry standards.

Key responsibilities will include maintaining cyber security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports for stakeholders and governance forums. You will help coordinate internal and external audits, monitor compliance with relevant legislation and standards, and maintain accurate evidence and documentation. The role will also involve assisting with third-party and supply-chain security assessments, reviewing security exceptions, supporting incident and issue management, and identifying opportunities to strengthen the organisation’s overall security posture. You will work closely with technology, legal, procurement, privacy, internal audit and business teams to promote consistent and practical risk management.

The successful candidate will have experience in cyber security governance, risk, compliance, audit or a closely related discipline, ideally within a large or geographically distributed organisation. You should have a sound understanding of frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, COBIT or CIS Controls, together with knowledge of risk assessment methodologies, security control principles and data protection requirements. Relevant professional qualifications, such as CISA, CRISC, CISSP, CISM or ISO 27001 certification, would be advantageous. Strong analytical, organisational and communication skills are essential, as is the ability to explain technical and regulatory matters clearly to varied audiences. A proactive, collaborative approach and the confidence to challenge constructively will be highly valued.

We are seeking an Information Security Analyst – GRC & Risk to support the development, implementation and continuous improvement of effective information security governance, risk and compliance practices. This role will help protect information assets, strengthen organisational resilience and ensure that security activities align with applicable regulations, industry standards and business objectives. You will work closely with technology, legal, compliance, audit and operational teams, providing clear, practical advice on information security risks and controls.

Key responsibilities will include maintaining security policies, standards, procedures and risk registers; conducting information security and third-party risk assessments; supporting the identification, evaluation and treatment of risks; and monitoring the effectiveness of controls. You will contribute to internal and external audits, coordinate evidence gathering, track remediation actions and prepare concise reports for stakeholders and senior management. The role will also involve supporting governance forums, reviewing security requirements for new projects and services, assessing supplier assurance documentation, and helping to promote a positive culture of security and regulatory awareness across the organisation.

Applicants should have experience in information security governance, risk management, compliance, audit or a closely related discipline, with a sound understanding of frameworks such as ISO 27001, NIST or COBIT. Knowledge of data protection requirements, third-party risk and control testing would be advantageous. You will need strong analytical and organisational skills, excellent written and verbal communication, and the confidence to engage with stakeholders at all levels. Relevant professional qualifications, such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, are desirable, although equivalent practical experience will be considered. The successful candidate will be methodical, commercially aware and able to translate technical and regulatory requirements into clear, proportionate actions.

We are seeking an experienced Senior GRC Analyst to support the continued development and operation of a robust governance, risk and compliance framework. This is an excellent opportunity for a risk professional who can combine strong analytical capability with practical experience of information security, technology risk and regulatory compliance. You will work with stakeholders across the organisation to identify and assess risks, strengthen controls and promote a culture of continuous improvement.

Key responsibilities will include maintaining risk registers, conducting control assessments and coordinating remediation activity across agreed timescales. You will support internal and external audits, prepare clear management information and contribute to governance forums, reporting on risk exposure, control effectiveness and emerging issues. The role will also involve reviewing and updating policies, standards and procedures; mapping requirements to relevant controls; supporting third-party and supplier risk assessments; and assisting with business continuity, resilience and incident management activities. You will help ensure that evidence is accurately maintained and that regulatory, contractual and organisational obligations are understood and met.

Applicants should have significant experience in a GRC, information security, technology risk or audit environment, ideally within a regulated or complex organisation. You will have a sound understanding of risk management principles, control frameworks and assurance methodologies, with experience of standards such as ISO 27001, NIST, COBIT or equivalent. Relevant professional qualifications, such as CISA, CRISC, CISM, CISSP or an equivalent risk or audit certification, would be advantageous. Strong written and verbal communication skills are essential, as is the ability to interpret technical and regulatory information and present it clearly to varied audiences. We are looking for someone organised, collaborative and confident in challenging constructively, managing competing priorities and delivering high-quality work with minimal supervision.

We are seeking a Technology GRC Analyst to support the development, maintenance and continuous improvement of technology governance, risk and compliance practices. This role will work closely with technology, information security, privacy, audit and business stakeholders to help ensure that systems, processes and controls meet applicable regulatory, contractual and internal requirements.

Key responsibilities will include maintaining technology policies, standards, procedures and control frameworks; coordinating risk and control assessments; supporting the identification, evaluation and treatment of technology and cyber risks; and monitoring remediation activity to ensure actions are completed within agreed timescales. You will assist with internal and external audits, provide evidence and coordinate responses to information requests, track findings and prepare clear reports for relevant governance forums. The role will also contribute to third-party risk assessments, control testing, compliance reviews, security questionnaires and the assessment of new or changing technology services. Where appropriate, you will help develop metrics and management information to highlight trends, control weaknesses and emerging risks.

The successful candidate will have experience in technology governance, risk, compliance, information security, IT audit or a related discipline, together with a practical understanding of frameworks such as ISO 27001, NIST, COBIT or ITIL. You should be confident interpreting policies and regulatory requirements, assessing controls, documenting risks and communicating findings to both technical and non-technical audiences. Strong analytical, organisational and report-writing skills are essential, as is the ability to manage competing priorities and work collaboratively across teams. Experience with governance, risk and compliance tools, audit management platforms or control libraries would be advantageous. Relevant qualifications such as CISA, CRISC, CISM, CISSP or equivalent experience are welcomed, but not essential.