How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About the job you’re considering
These opportunities can be based in Preston or Inverness
The Governance, Risk, Compliance (GRC) and Vulnerability Assessment Analyst supports the account's cyber security governance, risk management, compliance, assurance, and vulnerability management activities within a complex and highly regulated environment. This role contributes to ensuring that security controls, processes, and governance frameworks are effective, auditable, and aligned to industry standards including ISO 27001, Cyber Essentials Plus, GDPR, NIST, and contractual security obligations.
The Analyst provides security oversight, assurance, and risk-based guidance across projects, operational services, and technology changes while supporting secure-by-design principles through governance and design review activities. Working closely with technical and business stakeholders, the successful candidate will help identify, assess, manage, and report security risks appropriately, while supporting continual improvement initiatives that enhance the overall security posture of the account.
If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service).
Hybrid working Preston or Inverness
The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time.
Key Responsibilities
- Support the maintenance and continuous improvement of the Cyber Security Governance Framework, ensuring alignment with organisational, client, and regulatory requirements.
- Assist with security risk management activities, including risk identification, assessment, treatment, acceptance tracking, and ongoing monitoring.
- Support the development, review, and maintenance of security policies, standards, and procedures aligned to ISO 27001, Cyber Essentials Plus, GDPR, and contractual obligations.
- Conduct security assurance reviews and control assessments to identify compliance gaps, risks, and opportunities for improvement.
- Produce security reporting and metrics covering risk, compliance, audit, incident, and vulnerability management activities for internal and client stakeholders.
Your skills and experience
- Experience working within a Cyber Security Governance, Risk & Compliance (GRC) environment.
- Good understanding of security risk management frameworks and methodologies.
- Experience supporting security governance, compliance, assurance, audit, or risk management activities.
- Familiarity with security standards, certifications, and compliance frameworks, including:
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
-
ISO 27001
-
Cyber Essentials Plus
-
GDPR
-
NIST Cyber Security Framework
-
ITIL
-
Strong analytical, reporting, documentation, communication, and organisational skills.
Desirable
- Relevant cyber security qualifications or willingness to work towards industry-recognised certifications (e.g. ISO 27001, Security+, ISC2 CC).
We are a Disability Confident Employer
Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:
- Declare they have a disability, and
- Meet the minimum essential criteria for the role.
Please opt in during the application process.
Your security clearance and pre-employment checks
If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service).
Some roles will also require an additional level of security clearance:
Security Check (SC) Clearance
To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements.
Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.
Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.
Make it real – what does it mean for you?
Flexibility to work your way
You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements.
Your wellbeing
You’d be joining an accredited Great Place to work for Wellbeing in 2024. Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce as a critical component for us to achieve our organisational ambitions. To help support wellbeing we have trained ‘Mental Health Champions’ across each of our business areas, and we have invested in wellbeing apps such as Thrive and Peppy.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Shape your path
You will be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications, and much more.
Shared energy
You’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way.
Why should you consider Capgemini?
Growing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs, and industry experts. We find new ways technology can help us reimagine what’s possible. It’s why, together, we seek out opportunities that will transform the world’s leading businesses, and it’s how you’ll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you’ll build the skills you want. You’ll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is.
About Capgemini
Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology, and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of over 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering, and business operations. The Group reported 2025 global revenues of €22.5 billion.
Make it real | www.capgemini.com
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills