TechNET IT Recruitment Ltd
GRC Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Governance, Risk & Compliance (GRC) Analyst
Contract | Initial 6 Months | Hybrid (2 days per week onsite in Gloucestershire) | Inside IR35 - Up to £350 per day
We are seeking an Information Security Governance, Risk & Compliance (GRC) Analyst to join a busy Group Information Security team on an initial six-month contract, supporting a major international organisation.
This opportunity has been created to help reduce a significant backlog of third-party vendor and application security assessments while supporting the wider Governance, Risk & Compliance function. Working alongside an experienced cyber security team, you'll play a key role in ensuring new technologies, software and suppliers meet the organisation's security, compliance and risk standards before being introduced into the business.
This is an excellent opportunity for an early-career GRC professional looking to gain broad exposure across governance, third-party risk, information security frameworks and compliance within a complex enterprise environment. You'll work across vendor lifecycle management, security due diligence, application onboarding and risk assessment, gaining valuable experience within a collaborative and supportive team.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
- Conduct third-party supplier and software security due diligence assessments.
- Review new applications and vendors as part of the organisation's software onboarding process.
- Assess suppliers against established governance and risk frameworks.
- Review security certifications including ISO 27001, SOC 2 and other recognised security standards.
- Complete risk assessments and Risk Acceptance documentation where required.
- Respond to customer security questionnaires, audits and compliance assessments.
- Maintain governance documentation, metrics and reporting across the GRC function.
- Support Data Protection Impact Assessments (DPIAs) and Data Subject Access Requests (DSARs).
- Contribute to the maintenance and continual improvement of the Group Information Security Management System (ISMS).
- Work closely with business stakeholders and third-party vendors to gather evidence and drive assessments through to completion.
- Support the development of GRC processes, procedures and security awareness initiatives.
Experience Required
We're looking for someone with a minimum of 2+ years' experience within Information Security, Governance, Risk or Compliance who is keen to continue developing their career.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
You'll ideally have experience with:
- Governance, Risk & Compliance (GRC)
- Third-party supplier or vendor risk assessments
- Application or software onboarding
- Information Security Management Systems (ISMS)
- ISO 27001, NIST Cyber Security Framework and/or CIS Controls
- Security questionnaires and compliance assessments
- Data Protection and Privacy (DPIAs / DSARs)
- Risk assessments and risk acceptance processes
- Working with business stakeholders and external suppliers
- Strong written and verbal communication skills
- Microsoft Office, SharePoint and Power BI
Desirable Certifications
- ISO 27001 Lead Implementer or Lead Auditor
- CIPP/E or other Data Protection qualification
- CRISC or similar Governance & Risk certification
What's on Offer
- Initial 6-month contract with the potential for longer-term opportunities.
- Exposure to a broad range of Information Security and GRC activities.
- The opportunity to work within an experienced and collaborative cyber security team.
- Hands-on experience across governance, third-party risk management, vendor lifecycle management and enterprise security frameworks.
- Hybrid working with regular onsite collaboration in Gloucestershire.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills