GRC Analyst

• GRC Analyst (Cyber & Technology Risk) | Outside IR35 Contract
• Location: North West | Hybrid Working
• Rate: £425 per day | Outside IR35
• Contract: Initial 6 Months

• Xpertise are partnering with a leading organisation to recruit an experienced GRC Analyst to support the development and maturity of their Cyber & Technology Risk function.
• This role will focus on cyber and technology risk management, risk reporting, remediation tracking, stakeholder engagement and governance activities across a complex enterprise environment.

• Why Join?
• Outside IR35 contract
• High-profile role with regular senior stakeholder engagement
• Opportunity to influence cyber and technology risk processes
• Large-scale enterprise environment
• Flexible hybrid working

• Key Responsibilities
• Build, maintain and improve cyber and technology risk registers
• Conduct risk assessments across technology, cyber security and change initiatives
• Write clear risk statements covering threats, vulnerabilities, controls and business impact
• Develop and track risk treatment and remediation plans
• Challenge risk owners and drive accountability for outstanding actions
• Facilitate risk workshops with technical and non-technical stakeholders
• Support Cyber Assessment Framework (CAF) activities, evidence gathering and remediation tracking
• Produce risk reporting and management information for senior leadership
• Assess control effectiveness and identify gaps in the control environment
• Translate technical findings into meaningful business risk recommendations

• Skills & Experience Required
• Proven experience as a GRC Analyst, Cyber Risk Analyst, Technology Risk Analyst or Information Security Risk Analyst
• Strong experience managing risk registers and conducting risk assessments
• Experience developing risk treatment plans and tracking remediation activities
• Ability to articulate technical risks in business terms
• Experience challenging stakeholders and driving risk ownership
• Strong communication and reporting skills
• Ability to operate independently in a fast-paced environment

• Technical & Framework Experience
• NCSC Cyber Assessment Framework (CAF)
• ISO 27001
• NIST Cybersecurity Framework
• NIS2 Directive
• Enterprise Risk Management methodologies
• Cyber Security Governance, Risk & Compliance (GRC)
• Control Assurance and Remediation Management
• Risk Reporting and Governance Processes

• Desirable Experience
• Experience helping build or mature a risk management function
• Experience within large, complex enterprise organisations
• Experience engaging with senior leadership and governance forums
• Understanding of cyber security controls and technology risk landscapes

We welcome applicants from all backgrounds. Our Client are an equal opportunities employer. Xpertise is acting as an employment agency & business.

• At Xpertise, we keep things human, your application will always be reviewed by a real person.
• We do not rely on AI or automated screening tools. Every candidate receives fair, considered attention from our team.

Right to work in the UK is required for this role.