Job Search

We are seeking an experienced Senior GRC Analyst to strengthen governance, risk and compliance activities across a complex and evolving technology environment. This role will support the development, implementation and continuous improvement of security and risk management frameworks, ensuring that policies, controls and operational practices remain aligned with business objectives, regulatory expectations and recognised industry standards.

Key responsibilities will include maintaining risk and control registers, conducting control assessments, coordinating remediation activity and preparing clear reports for senior stakeholders. You will support internal and external audits, manage evidence collection, track issues through to resolution and contribute to the design and review of information security policies, standards and procedures. The role will also involve monitoring regulatory and legislative developments, assessing their potential impact, and helping teams translate requirements into practical and sustainable controls. You may be required to facilitate risk workshops, support third-party assurance reviews and provide guidance to colleagues on governance and compliance matters.

To be successful, you will have substantial experience in governance, risk and compliance, information security or a closely related discipline, together with a strong understanding of risk assessment, control frameworks and audit processes. Experience working with standards such as ISO 27001, NIST, COBIT, SOC 2 or relevant data protection legislation would be advantageous. You should be confident analysing complex information, identifying areas of weakness and presenting clear, proportionate recommendations to both technical and non-technical audiences. Strong organisational skills, attention to detail and the ability to manage competing priorities are essential. Relevant professional certifications, such as CISA, CRISC, CISM, CISSP or equivalent, would be welcomed. This is an opportunity to make a meaningful contribution to a mature and forward-looking risk culture while working collaboratively with stakeholders across the organisation.