GRC Lead
- Hiring Organisation
- Capgemini
- Location
- Highland, United Kingdom
- Employment Type
- Full Time
ensuring that security controls, processes, and governance frameworks are effective, auditable, and aligned to industry standards including ISO 27001, Cyber Essentials Plus, GDPR, NIST, and contractual security obligations. The Analyst provides security oversight, assurance, and risk-based guidance across projects, operational services, and technology changes while supporting secure-by-design … audit, or risk management activities. Familiarity with security standards, certifications, and compliance frameworks, including: o ISO 27001 o Cyber Essentials Plus o GDPR o NIST Cyber Security Framework o ITIL Experience maintaining security risk registers, control frameworks, policies, standards, and compliance documentation. Understanding of vulnerability management processes, remediation tracking, and ...