GRC Analyst - Cyber Security

Position: GRC Analyst - Cyber Security

Type: Permanent

Location: Remote, UK-based

Salary: £50-60K

We're seeking a GRC Analyst to strengthen pour client's governance, risk and compliance capability. The organisation is committed to maintaining robust security standards and regulatory compliance across its operations.

This is a fully remote role offering real visibility and the opportunity to influence security maturity across a diverse environment.

The Role

As a Cyber Security GRC Analyst, you will support and enhance the organisation's security governance framework, risk management processes, and compliance activities.

Working closely with IT, security and business stakeholders, you'll help identify and mitigate risk, maintain compliance with key regulatory requirements (including PCI DSS and GDPR), and contribute to building a strong culture of security awareness.

Key Responsibilities

• Information Security Frameworks - Support ongoing alignment with ISO 27001, ISO 22301 and NIST standards.
• Risk Management - Conduct security risk assessments and contribute to the continuous improvement of the risk management framework.
• Third-Party Risk Management (TPRM) - Assist in overseeing supplier and supply chain security assurance processes.
• Security Awareness - Support initiatives that promote a positive and proactive security culture.
• Policy & Governance - Contribute to the development and maintenance of security policies, standards and procedures.
• Control Assurance - Assess security controls and provide recommendations for improvement.
• Compliance Activities - Support PCI DSS compliance requirements and collaborate with relevant stakeholders on GDPR adherence.
• Business Continuity & Disaster Recovery - Assist with BC/DR planning, testing and documentation.

About You

• Proven experience in a Cyber Security GRC or Information Security Analyst role
• Strong understanding of recognised security frameworks (ISO 27001, NIST, etc.)
• Experience supporting PCI DSS and GDPR compliance
• Exposure to third-party risk management processes
• Strong analytical skills with the ability to engage effectively with technical and non-technical stakeholders
• Relevant certifications such as CISM, CISSP or CISA (desirable but not essential)

Why Apply?

• Fully remote working
• Opportunity to develop within a growing and evolving security function
• Exposure to a complex, multi-site and digitally enabled environment
• A role offering genuine influence across governance, risk and compliance activities

If you're looking to build your GRC career within a business that takes security seriously and offers real scope for progression, we'd be keen to speak with you.

Apply now or get in touch for a confidential discussion.