> Markdown version of [/jobs/ext/4574972-cyber-grc-analyst](https://www.wearedevelopers.com/jobs/ext/4574972-cyber-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber GRC Analyst

- **Company:** IBEX RECRUITMENT LTD
- **Location:** Manchester, United Kingdom
- **Experience:** Experienced
- **Salary:** £31,200
- **Contract:** Permanent contract
- **Skills:** Microsoft Excel, Artificial Intelligence, Cyber Security, Python (Programming Language), Monte Carlo Methods, Prompt Engineering, Cyber Threat Analysis
- **Published:** November 5, 2026
- **Apply:** https://www.totaljobs.com/job/information-security-analyst/ibex-recruitment-ltd-job108281346

## About the Role

* Experience in cyber risk management, ideally in a regulated or critical infrastructure environment
 * Understanding of cyber risk frameworks (ISO 27005, NIST, FAIR) and the NCSC CAF
 * Degree or equivalent in cyber security, risk management, or a related field
 * Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager)
 * Working knowledge of FAIR or equivalent quantitative frameworks, scenario-based risk analysis, Monte Carlo simulations, and quantified risk models
 * Practical experience using AI tools for risk analysis and scenario generation, with strong prompt engineering skills
 * Advanced Excel; Python/R and CRQ tools (desirable)
 * Familiarity with threat intelligence, incident datasets (VERIS), and control frameworks (NIST, ISO)
 * Ability to translate quantitative outputs into clear business narratives
 * Desirable: nuclear/CNI experience; ONR SyAPs, NISR 2003, HMG SPF
 * 3-8 years in cyber risk, security, or analytical roles

## Description

We are recruiting on behalf of a client in the Critical National Infrastructure (CNI) sector for Cyber GRC Analysts at intermediate and senior levels. These roles embed effective cyber risk management across a large, highly regulated organisation, identifying, assessing, and treating cyber risks in line with business objectives and enterprise risk frameworks.

What you'll do

 * Conduct cyber risk assessments across systems, services, and projects
 * Maintain and update the cyber risk register, escalating significant risks
 * Collaborate with ICT, business units, and project teams to embed risk management practices
 * Support development of cyber risk frameworks, tools, and methodologies
 * Advise on risk mitigation strategies and treatment plans
 * Contribute to risk reporting for governance forums and regulators
 * Monitor emerging threats and assess impact on the organisation's risk posture
 * Promote cyber risk awareness and training
 * Lead complex risk programmes, influence senior stakeholders, and develop innovative solutions to emerging risk scenarios (senior level)