The Role
As the GRC Analyst, you will take ownership of cyber and technology risk management activities, ensuring risks are identified, assessed, reported and managed effectively across the organisation.
Key Responsibilities
- Build, develop and maintain cyber and technology risk registers
- Identify, assess and document risks across technology, cyber security and business change initiatives
- Produce clear risk statements covering threats, vulnerabilities, business impact and existing controls
- Develop and maintain risk treatment plans, ensuring actions are owned and delivered
- Track remediation activities and challenge overdue actions where required
- Facilitate risk reviews and workshops with technical and non-technical stakeholders
- Support Cyber Assessment Framework (CAF) activities, evidence gathering and remediation tracking
- Produce high-quality risk reporting and management information for senior leadership
- Help establish consistent risk management processes, methodologies and governance controls
- Translate technical findings and control weaknesses into meaningful business risks
Skills & Experience Required
- Proven experience as a GRC Analyst, Technology Risk Analyst, Cyber Risk Analyst or Information Security Risk Analyst
- Strong practical experience owning and maintaining risk registers
- Demonstrable experience conducting risk assessments and developing risk treatment plans
- Ability to write meaningful risk statements and present complex risks clearly
- Strong stakeholder management skills with the confidence to operate independently from day one
- Experience tracking remediation and mitigation activities through to completion
- Excellent communication and reporting skills
Technical & Framework Experience
- NCSC Cyber Assessment Framework (CAF)
- ISO 27001
- NIST Cybersecurity Framework
- Enterprise Risk Management methodologies
- Cyber Security Governance, Risk & Compliance practices
- Risk Reporting, Control Assurance and Remediation Management
Desirable Experience
- Previous experience helping to build or mature a risk management function
- Exposure to large, complex enterprise organisations
- Experience engaging with senior leadership and executive stakeholders
- Understanding of cyber security controls and technology risk landscapes
Key Details
- GRC Analyst
- Outside IR35 Contract
- Hybrid Working
- North West Location
- Initial 6-Month Contract
- Immediate Start Available
Rate:
£425/day
Location:
Merseyside
IR35 Status:
Outside
Remote Status:
Hybrid
Industry:
Cybersecurity
Seniority Level:
Mid-Level