> Markdown version of [/jobs/ext/3901668-it-grc-analyst](https://www.wearedevelopers.com/jobs/ext/3901668-it-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT GRC Analyst

- **Company:** THE OPPORTUNITY HUB UK LTD
- **Location:** Newcastle upon Tyne, UK
- **Experience:** Starter
- **Salary:** £33,500.0 - £41,500.0
- **Contract:** Permanent contract
- **Skills:** Spreadsheets, Cyber Security, Information Technology
- **Published:** October 24, 2026
- **Apply:** https://www.jobs.service.gov.uk/jobs/6adb0b2fcde5c8a238bc8ca0/apply

## About the Role

A year or two working in an IT GRC Analyst, risk, audit or compliance capacity, ideally within Cybersecurity or a regulated sector

Working knowledge of at least one major framework (ISO 27001, NIST, SOC 2 or similar)

Confidence writing clearly. Policies only work if people actually read them

Comfortable in spreadsheets and GRC tooling, with an eye for detail that others miss

Strong communication skills, able to hold your own with technical teams and non-technical stakeholders alike

A genuine interest in how organisations manage risk, not just tick boxes

## Description

Perfect role for a junior/mid professional looking to grow their Cybersecurity career in Newcastle., Governance, risk and compliance has become the backbone of any serious security function. As regulatory pressure builds across UK industry, from ISO 27001 audits to Cyber Essentials Plus and beyond, organisations need people who can translate policy into practice. This established and growing security business, part of the wider Cybersecurity sector, is looking for an IT GRC Analyst to join its Newcastle team as it scales its risk and assurance capability.

Here's what you'll be doing:

Supporting the delivery of risk assessments across IT systems, third parties and business processes

Maintaining and updating the risk register, tracking remediation actions through to closure

Assisting with internal and external audits, gathering evidence and liaising with control owners

Mapping controls against frameworks such as ISO 27001, NIST and Cyber Essentials

Drafting and reviewing policies, standards and procedures in plain, usable language

Monitoring compliance status and preparing reporting packs for senior stakeholders