IT GRC Analyst

Perfect role for a junior/mid professional looking to grow their Cybersecurity career in Newcastle., Governance, risk and compliance has become the backbone of any serious security function. As regulatory pressure builds across UK industry, from ISO 27001 audits to Cyber Essentials Plus and beyond, organisations need people who can translate policy into practice. This established and growing security business, part of the wider Cybersecurity sector, is looking for an IT GRC Analyst to join its Newcastle team as it scales its risk and assurance capability.

Here’s what you’ll be doing:

Supporting the delivery of risk assessments across IT systems, third parties and business processes

Maintaining and updating the risk register, tracking remediation actions through to closure

Assisting with internal and external audits, gathering evidence and liaising with control owners

Mapping controls against frameworks such as ISO 27001, NIST and Cyber Essentials

Drafting and reviewing policies, standards and procedures in plain, usable language

Monitoring compliance status and preparing reporting packs for senior stakeholders

A year or two working in an IT GRC Analyst, risk, audit or compliance capacity, ideally within Cybersecurity or a regulated sector

Working knowledge of at least one major framework (ISO 27001, NIST, SOC 2 or similar)

Confidence writing clearly. Policies only work if people actually read them

Comfortable in spreadsheets and GRC tooling, with an eye for detail that others miss

Strong communication skills, able to hold your own with technical teams and non-technical stakeholders alike

A genuine interest in how organisations manage risk, not just tick boxes

£33,500 to £41,500 depending on experience, plus bonus scheme

Hybrid working from the Newcastle office, with a sensible balance between home and site

Private medical insurance and pension contribution

Generous annual leave and flexible working arrangements

Structured progression path within a defined but growing GRC function