> Markdown version of [/jobs/ext/3674541-grc-analyst](https://www.wearedevelopers.com/jobs/ext/3674541-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst

- **Company:** Xpertise LLC
- **Location:** United States
- **Contract:** Temporary contract
- **Skills:** Encodings, Cyber Security
- **Published:** October 10, 2026
- **Apply:** https://computerjobs.com/us/en/mob/job/30FDB88B1CB538C647

## About the Role

* Proven experience as a GRC Analyst, Technology Risk Analyst, Cyber Risk Analyst or Information Security Risk Analyst
 * Strong practical experience owning and maintaining risk registers
 * Demonstrable experience conducting risk assessments and developing risk treatment plans
 * Ability to write meaningful risk statements and present complex risks clearly
 * Strong stakeholder management skills with the confidence to operate independently from day one
 * Experience tracking remediation and mitigation activities through to completion
 * Excellent communication and reporting skills

Technical & Framework Experience

 * NCSC Cyber Assessment Framework (CAF)
 * ISO 27001
 * NIST Cybersecurity Framework
 * Enterprise Risk Management methodologies
 * Cyber Security Governance, Risk & Compliance practices
 * Risk Reporting, Control Assurance and Remediation Management

Desirable Experience

 * Previous experience helping to build or mature a risk management function
 * Exposure to large, complex enterprise organisations
 * Experience engaging with senior leadership and executive stakeholders
 * Understanding of cyber security controls and technology risk landscapes

## Description

Xpertise have partnered with a leading global organisation embarking on a significant cyber and technology risk maturity programme. We are looking for an experienced GRC Analyst with a strong risk management background to play a key role in shaping, building and embedding a robust risk function across a complex enterprise environment.

This is an excellent opportunity for a hands-on contractor who enjoys creating structure, driving accountability and working closely with stakeholders to improve the identification, assessment and treatment of technology and cyber risks.

Why Join?

 * Opportunity to help build and mature a risk management function from the ground up
 * Work within a large-scale, enterprise environment with exposure across Cyber Security, Technology and Business Operations
 * Highly visible role with regular engagement across senior stakeholders
 * Outside IR35 engagement with flexible hybrid working arrangements
 * Chance to influence risk strategy, governance and reporting processes, As the GRC Analyst, you will take ownership of cyber and technology risk management activities, ensuring risks are identified, assessed, reported and managed effectively across the organisation., * Build, develop and maintain cyber and technology risk registers
 * Identify, assess and document risks across technology, cyber security and business change initiatives
 * Produce clear risk statements covering threats, vulnerabilities, business impact and existing controls
 * Develop and maintain risk treatment plans, ensuring actions are owned and delivered
 * Track remediation activities and challenge overdue actions where required
 * Facilitate risk reviews and workshops with technical and non-technical stakeholders
 * Support Cyber Assessment Framework (CAF) activities, evidence gathering and remediation tracking
 * Produce high-quality risk reporting and management information for senior leadership
 * Help establish consistent risk management processes, methodologies and governance controls
 * Translate technical findings and control weaknesses into meaningful business risks