Senior IT GRC Analyst

In this Senior IT GRC Analyst role you will help build and sustain the organisation's governance, risk and compliance capability. You will operate core GRC processes and translate security framework requirements into practical controls, ensuring technology risks are effectively managed. You will collaborate with stakeholders to provide assurance and strengthen third‑party risk management and supplier reviews. This role offers an opportunity to shape security governance in a regulated, security‑minded environment.

• Operate core GRC processes
• Translate security framework requirements into practical controls
• Provide assurance that technology risks are effectively managed

• IT GRC, Information Security, Technology Risk, or IT Audit experience
• IT risk management, risk assessments, and reporting
• Policy, standards, assurance, and compliance management
• Supplier security reviews and third-party risk assessments
• Knowledge of: ISO 27001, NIST CSF, NIS2, Cyber Essentials
• Right to Work in the UK
• DBS Check Required

• ISO 27001
• NIST Cyber Security Framework (CSF)
• NIS2
• Cyber Essentials
• IT risk management
• risk assessments