GRC Analyst, Risk, NCSC CAF, ISO 27001, NIST - Outside IR35

What you'll be doing:

• Building and embedding a risk management function
• Owning and maintaining risk registers, including identification, assessment, treatment and reporting
• Supporting Cyber Assessment Framework (CAF) activity and evidence gathering
• Working with stakeholders across the business to track risks and remediation actions
• Producing clear risk reporting for senior audiences

What we're looking for:

• Solid GRC experience with a clear emphasis on risk management
• Hands-on ownership of risk registers
• Exposure to NCSC CAF, ISO 27001, NIST or similar frameworks
• Confident communicator who can work independently from day one