GRC Analyst

• GRC Analyst (Cyber & Technology Risk) | Outside IR35 Contract
• Location: North West | Hybrid Working
• Rate: £425 per day | Outside IR35
• Contract: Initial 6 Months with Potential Extension
• Xpertise have partnered with a leading global organisation embarking on a significant cyber and technology risk maturity programme. We are looking for an experienced GRC Analyst with a strong risk management background to play a key role in shaping, building and embedding a robust risk function across a complex enterprise environment.
• This is an excellent opportunity for a hands-on contractor who enjoys creating structure, driving accountability and working closely with stakeholders to improve the identification, assessment and treatment of technology and cyber risks.
• Why Join?

• Opportunity to help build and mature a risk management function from the ground up
• Work within a large-scale, enterprise environment with exposure across Cyber Security, Technology and Business Operations
• Highly visible role with regular engagement across senior stakeholders
• Outside IR35 engagement with flexible hybrid working arrangements
• Chance to influence risk strategy, governance and reporting processes

• The Role
• As the GRC Analyst, you will take ownership of cyber and technology risk management activities, ensuring risks are identified, assessed, reported and managed effectively across the organisation.
• Key Responsibilities

• Build, develop and maintain cyber and technology risk registers
• Identify, assess and document risks across technology, cyber security and business change initiatives
• Produce clear risk statements covering threats, vulnerabilities, business impact and existing controls
• Develop and maintain risk treatment plans, ensuring actions are owned and delivered
• Track remediation activities and challenge overdue actions where required
• Facilitate risk reviews and workshops with technical and non-technical stakeholders
• Support Cyber Assessment Framework (CAF) activities, evidence gathering and remediation tracking
• Produce high-quality risk reporting and management information for senior leadership
• Help establish consistent risk management processes, methodologies and governance controls
• Translate technical findings and control weaknesses into meaningful business risks

Skills & Experience Required

• Proven experience as a GRC Analyst, Technology Risk Analyst, Cyber Risk Analyst or Information Security Risk Analyst
• Strong practical experience owning and maintaining risk registers
• Demonstrable experience conducting risk assessments and developing risk treatment plans
• Ability to write meaningful risk statements and present complex risks clearly
• Strong stakeholder management skills with the confidence to operate independently from day one
• Experience tracking remediation and mitigation activities through to completion
• Excellent communication and reporting skills

Technical & Framework Experience

• NCSC Cyber Assessment Framework (CAF)
• ISO 27001
• NIST Cybersecurity Framework
• Enterprise Risk Management methodologies
• Cyber Security Governance, Risk & Compliance practices
• Risk Reporting, Control Assurance and Remediation Management

Desirable Experience

• Previous experience helping to build or mature a risk management function
• Exposure to large, complex enterprise organisations
• Experience engaging with senior leadership and executive stakeholders
• Understanding of cyber security controls and technology risk landscapes

Key Details

• GRC Analyst
• Outside IR35 Contract
• Hybrid Working
• North West Location
• Initial 6-Month Contract
• Immediate Start Available

• Our Client are an equal opportunities employer. Xpertise is acting as an employment agency & business.
• At Xpertise, we keep things human, your application will always be reviewed by a real person. We do not rely on AI or automated screening tools. Every candidate receives fair, considered attention from our team.
• Right to work in the UK is required for this role.