Made4Tech Global
Information Security Governance & Risk Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
We're partnering with a large and complex organisation seeking an Information Security Governance & Risk Analyst to support the development of its security governance, compliance and risk management capabilities.
This role would suit someone with broad Governance, Risk & Compliance (GRC) experience who enjoys working with stakeholders, improving processes, supporting compliance initiatives and helping organisations strengthen their overall security culture.
Whilst the role sits within Information Security, this is not a hands-on cyber security engineering or technical security position. Instead, the focus is on governance, assurance, risk management, compliance, awareness and organisational engagement.
Key Responsibilities
- Support the implementation and adoption of information security policies, procedures and governance frameworks.
- Conduct gap analysis activities to identify compliance and control improvement opportunities.
- Assist with information security assurance and compliance programmes.
- Support risk identification, assessment and mitigation activities across the organisation.
- Work with stakeholders to review existing risks and identify emerging threats.
- Help deliver security awareness and human risk initiatives to build security maturity and capability.
- Contribute to audit, assurance and reporting activities.
- Promote a culture of information security across technical and non-technical teams.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What We're Looking For
- Experience within Governance, Risk & Compliance (GRC), information security governance, risk, audit or compliance.
- Strong understanding of risk management and control frameworks.
- Experience supporting compliance, assurance or policy implementation activities.
- Excellent stakeholder engagement and communication skills.
- Ability to work across diverse teams and influence positive outcomes.
- Experience delivering or supporting awareness, training or behavioural change programmes.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
We'd Particularly Like To Hear From You If You Have
- Experience within a large, matrixed or complex organisation.
- Public sector, education, healthcare, local government or wider regulated environment experience.
- Exposure to information security, cyber governance, compliance or risk functions.
- Security, risk or governance certifications are welcome but not essential.
Initial Priorities
The successful candidate will initially focus on:
- Understanding and embedding new policies and procedures
- Supporting gap analysis activity to inform compliance objectives
- Helping roll out a new human risk and security awareness programme
- Working with stakeholders to review current and emerging information security risks
To find out more, please apply or contact Made4Tech Global for a confidential discussion.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills