Spencer Rose
Security Compliance Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior IT Cyber Governance, Risk & Compliance Analyst
Contract - Initial 6 Month Contract
Day rate - £800 per day (Inside IR35)
Hybrid working
Spencer Rose are currently seeking an experienced Senior Cyber Governance, Risk & Compliance (GRC) Analyst with one of our key clients who are a leading Insurance organisation. The Senior Cyber Governance Risk & Compliance Analyst will be responsible for helping strengthen my client's cyber security governance framework and ensuring effective management of cyber risks across the organisation.
This role is ideal for a cyber focused GRC professional with experience supporting compliance against frameworks such as DORA, ISO 27001, NIST CSF, SOX and IT General Controls (ITGCs). Working closely with technology, security and business stakeholders, you will support cyber risk management, security assurance, policy governance, third-party security oversight and regulatory compliance activities.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Responsibilities
- Support the governance and oversight of cyber security risks, controls and compliance activities.
- Conduct cyber risk assessments and maintain the cyber risk register, ensuring risks and remediation actions are tracked and reported.
- Support compliance with key frameworks and regulations including DORA, ISO 27001, NIST CSF, SOX and ITGC requirements.
- Monitor control effectiveness and support security assurance and compliance reviews.
- Coordinate user access reviews, privileged access reviews and access governance activities.
- Support third-party cyber risk assessments, supplier due diligence and ongoing security assurance.
- Assist in the development and maintenance of information security policies, standards and procedures.
- Track and report on cyber security risks, control gaps, vulnerabilities and remediation activities.
- Support cyber awareness initiatives and promote a strong security culture across the business.
- Provide reporting and insight to management on cyber risk, compliance and security posture.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skills/Experience
- 5+ years' experience within Cyber Security, Information Security, Security GRC or Technology Risk.
- Strong understanding of cyber governance, risk management and security compliance.
- Experience with DORA, ISO 27001, NIST CSF, SOX and ITGC frameworks.
- Knowledge of security controls, identity and access management, vulnerability management and third-party risk management.
- Experience supporting security assurance, control reviews and regulatory compliance activities.
- Strong stakeholder engagement and communication skills.
- Relevant certifications such as CISM, CRISC, CISSP, CISA or ISO 27001 are desirable.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location