GRC Analyst

GRC Analyst

Role Overview: 

We are looking for a GRC Analyst with a strong foundation in governance, risk, and compliance to support client engagements and contribute to high-quality cybersecurity advisory services. 

This role is suited to a practitioner who enjoys working across control frameworks, audit readiness, risk assessment, and compliance delivery while producing structured client outputs and working closely with senior consultants, delivery leads, and client stakeholders. 

You will support clients in strengthening control environments, preparing for audits and certifications, and improving security maturity in a practical way. 

Responsibilities 

• Support GRC engagements across multiple clients 

• Assist with policies, standards, procedures, and control documentation 

• Support control mapping, gap assessments, and remediation tracking against recognised frameworks 

• Maintain evidence repositories, compliance trackers, and governance records 

• Assist with audits, risk assessments, and risk register maintenance 

• Produce client-ready reports, summaries, and governance outputs 

• Support workshops, interviews, and stakeholder engagement activities 

• Contribute to templates, knowledge assets, and service improvements 

• Support supplier assurance and third-party risk activities where required 

• Skills and Knowledge 

• 3–5 years’ experience in GRC, information security, or related advisory roles 

• Experience supporting compliance, assurance, or audit-related programmes in consultancy, client, or enterprise environments 

• Good understanding of policy development, control mapping, audit support, and evidence management 

• Strong written and verbal communication skills with the ability to produce accurate, client-ready documentation 

• Able to manage multiple assignments and engage professionally with stakeholders 

Technical Capability 

Good understanding of: 

• Frameworks such as ISO 27001, NIST, NIS2, DORA, SCSF and CIS 

• Risk assessment methods, risk registers, and issue tracking 

• Audit readiness, evidence collection, and remediation tracking 

• Control design, compliance gap analysis, and documentation development 

• Governance reporting, management information, and third-party risk processes 

Desirable 

• Experience supporting compliance implementation, certification, or formal assurance activity 

• Familiarity with regulated environments and governance tooling 

• Relevant certifications, or progress towards them, such as CGRC, ISO 27001 Lead Auditor, CRISC, CISM, or similar