NE

Cyber Risk & GRC Analyst

Newcold-Advanced-Cold-Logistics-1https://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png United Kingdom Posted 23 Oct 2026 Closing: 22 Nov 2026
Permanent Hybrid

Role Description & Technical Scope

NewCold is a global leader in advanced food logistics. Our warehousesand transport network sit at the center of the food supply chain. Connectingthe world’s major food manufacturers with retailers and food service providers.

Our goal is to keep the world’s food fresh and safe with our proprietarytechnologies and innovative solutions.

NewCold designs, builds, and operates state-of-the-art cold storagefacilities that are highly automated. We push the boundaries of logistics with end-to-endstorage and transport operations that add greater resilience, efficiency, andsustainability to supply chains on four continents. And we are growing rapidly.

To support our rapid growth, we’re constantly looking for talentedpeople to join our team. Want to be a part of a dynamic, forward-thinkingenvironment? Join us!

About the role:

NewCold's cyber risk function isscaling fast: risk assessments, supplier due diligence, and (ISO 27001 and NIS2-drivengovernance work have grown to a volume that needs a dedicated person to providethe right level of focus.

This role exists to keep thatpipeline moving: triaging intake, running the risk register day-to-day, chasingevidence collection, and turning raw risk data into reporting that leadershipcan act on. It's a hands-on, high-throughput role rather than a strategic orpolicy-setting one.

We're looking for someone who'sactually run a risk register under time pressure, not just someone who can talkfluently about frameworks.

Must-have experience:

  • 3–5 years in cyber security risk management, IT risk, or GRC, in a regulated or complex enterprise environment.
  • Hands-on risk register ownership: risk articulation, scoring, treatment tracking, and producing executive-ready reporting.
  • Supplier/third-party risk assessment execution: questionnaire-based due diligence, evidence review, and posture evaluation, done independently and at volume.
  • High-volume triage: proven ability to prioritize a busy intake queue based on risk and business impact, without things slipping.
  • Working knowledge and experience with frameworks such as: ISO/IEC 27001/27002, NIST CSF, or CIS Controls with the ability to map control evidence to risk outcomes.
  • Communication & cross-cultural stakeholder skills: strong written and verbal communication skills, with the ability to adapt tone and approach across internal and external stakeholders, from technical engineers to senior business leaders to third-party suppliers.
  • Comfortable operating across cultures and communication styles given NewCold's multinational footprint, and able to build trust and drive follow-through with stakeholders from different regional and organisational backgrounds.
  • Stakeholder follow-through: comfortable chasing technical teams, procurement, IT, and business stakeholders repeatedly until items close out.

Preferred / nice-to-have:

  • Exposure to supplier tiering, criticality assessment, or ongoing supplier monitoring models.
  • Familiarity with OT/industrial risk concepts (e.g. IEC 62443, Purdue model) would be a plus given NewCold's OT environment.
  • Certified in Risk and Information Systems Control (CRISC).
  • Experience with GRC or workflow tooling (e.g. Archer, ServiceNow GRC, Jira, Monday.com or equivalent).
  • Prior experience operating across multiple regions/time zones.
  • Understanding of risk governance concepts: risk appetite, residual risk, risk acceptance, escalation paths.

How success looks like in the first 6 months:

  • Risk register is current, accurately scored, and reporting cadence is reliable without prompting.
  • Supplier risk assessment backlog is under control, with clear tiering and a repeatable evidence-review process.
  • Stakeholders across regions know who to go to and trust the follow-up will happen.

Whyjoin NewCold?

At NewCold, our people are our most valuable asset. We take pride in ourteam-oriented culture, where innovation and collaboration are at the heart ofeverything we do.

What we offer:

  • A supportive and collaborative environment.
  • The opportunity for professional growth in a fast-scaling, international company.
  • The chance to have real impact and innovate alongside other bright minds.
  • The challenge of transforming the future of cold storage and food logistics.
  • A strong commitment to employee well-being.

Whether you’re a seasoned expert or just starting your career, NewColdprovides the opportunities and challenges that allow you to grow and excel.Ready to turn your curiosity into impact?

#J-18808-Ljbffr
Ready to apply for this cyber security position?

This opportunity is hosted on Newcold-Advanced-Cold-Logistics-1https://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png. Click below to view full details and submit your application.

Key Details
  • Date Posted: 23 Oct 2026
  • Location: United Kingdom
  • Employment: Permanent
  • Workplace: Hybrid
  • Domain: Database, Analytics & BI
100% FREE CV BUILDER
Need an ATS CV for this role?

Optimize your cyber CV with ATS-friendly templates before submitting your application.

Build Free CV Now
Employer Profile
NE
Newcold-Advanced-Cold-Logistics-1https://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png
Verified Tech Employer

Enterprise technology firm or security consultancy operating across the UK digital defense ecosystem.

More Jobs at Newcold-Advanced-Cold-Logistics-1https://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png