Full job description

GRC Analyst

£45,000 - £55,000 DOE + Private Medical Insurance + Dental & Vision Cover + Enhanced Annual Leave + Pension + Wellbeing Support

UK - Remote

Are you a GRC professional with a strong background in cybersecurity, cloud security and compliance frameworks who wants to join a rapidly growing consultancy where you can work with a diverse client base, lead high-value security initiatives and play a key role in improving organisations' security and compliance posture?

This is an exciting opportunity to join an established and expanding cybersecurity and compliance consultancy supporting clients across a variety of industries. You'll work alongside experienced security professionals, helping organisations achieve and maintain compliance while strengthening their overall security programmes.

In this role, you will support clients through audits, risk assessments, compliance activities and security programme development. You will engage directly with stakeholders, manage security and compliance initiatives, conduct tabletop exercises and help clients implement security best practices across modern cloud environments.

The ideal candidate will have experience across governance, risk and compliance activities, strong knowledge of frameworks such as ISO 27001, SOC 2, GDPR and DORA, and a solid understanding of cloud platforms including AWS, Azure and GCP. Strong communication skills and a customer-focused approach are essential.

The Role:

• Deliver GRC, compliance and security consulting services to clients
• Conduct audits, risk assessments and compliance gap analyses
• Support cloud security monitoring and security tool implementation
• Lead compliance evidence collection and auditor engagements
• Facilitate incident response, business continuity and disaster recovery exercises
• Work directly with clients to improve security programmes and regulatory compliance

The Person:

• Good years of experience within cybersecurity, technology or GRC
• Strong understanding of ISO 27001, SOC 2, GDPR, DORA and related frameworks
• Experience with AWS, Azure and/or GCP environments
• Degree qualified in Cyber Security, IT or a related discipline, or equivalent experience