Senior Security Analyst - GRC

We’re partnering with an innovative international consultancy that’s redefining how Governance, Risk & Compliance is delivered. Rather than treating GRC as a compliance exercise, they’re embedding continuous assurance, automation and AI into the heart of security and business decision-making.

This is an opportunity for a Senior GRC Analyst who wants to move beyond traditional frameworks and play a key role in modernising security governance across both internal technology platforms and a diverse client portfolio.

What You’ll Be Doing

You’ll work closely with technical teams, business stakeholders and clients to build practical, risk-based security programmes that genuinely add value., * Leading governance, risk and compliance initiatives across multiple environments

• Implementing and maturing security frameworks including ISO 27001, NIST, CIS Controls and SOC 2
• Delivering internal and client-facing GRC projects from gap analysis through to audit readiness
• Conducting risk assessments, internal audits and compliance reviews
• Developing meaningful security metrics and reporting that support business decisions
• Driving automation and AI initiatives to improve assurance and reduce manual effort
• Enhancing third-party risk management, security policies and awareness programmes
• Influencing stakeholders across both technical and executive audiences, You’ll join a forward-thinking organisation that’s investing heavily in the future of Governance, Risk & Compliance, giving you the opportunity to influence strategy, modernise assurance practices and work with cutting-edge technologies including AI and automation.

You’ll be trusted to challenge the status quo, work closely with senior leadership and make a genuine impact across both internal operations and client engagements.

You’ll already have solid experience working in Information Security Governance, Risk & Compliance and enjoy partnering with both technical and business teams.

You’ll ideally bring:

• Strong experience within a Senior GRC, Risk or Compliance role
• Practical implementation experience with ISO 27001, CIS Controls, NIST or similar frameworks
• Experience supporting audits and compliance programmes
• A strong understanding of modern IT infrastructure, cloud technologies and security principles
• Excellent stakeholder management and communication skills
• A pragmatic, risk-based approach to governance
• An interest in automation, AI and the future of GRC