GRC Analyst - Cybersecurity, ISO/NIST, Hybrid Role

The Opportunity Hub UK Ltd; Newcastle; Hybrid; AUD 64.000 - 80.000; Vollzeit

Benefits dieser Stelle

Private medical insurance

Pension contribution

Generous annual leave

Flexible working arrangements

Hybrid working from Newcastle office

Zusammenfassung

The Opportunity Hub UK Ltd in Newcastle is hiring an IT GRC Analyst to grow our risk and assurance capability. You will help deliver risk assessments, maintain the risk register, support audits, and map controls against ISO 27001 and NIST frameworks.

You’ll also draft clear policies and monitor compliance for senior stakeholders. Ideal candidates have 1–2 years in IT GRC or related fields, strong writing ability, and a genuine interest in how organisations manage risk.

Qualifikationen

• 1–2 years in IT GRC, risk, audit or compliance.
• Familiar with ISO 27001, NIST, SOC 2 or similar frameworks.
• Strong writing skills to translate policy into plain language.
• Detail-oriented with good analytical mindset.

Aufgaben

• Support risk assessments across IT systems, third parties and processes.
• Maintain and update risk register; track remediation to closure.
• Assist with audits; gather evidence and liaise with control owners.
• Map controls to ISO 27001, NIST and Cyber Essentials.
• Draft and review policies, standards and procedures in plain language.
• Monitor compliance status and prepare reporting packs for leaders.

Kenntnisse

GRC Analyst

ISO 27001

NIST

SOC 2

Policy drafting

Stakeholder comms

GRC tooling

Spreadsheets

Jobbeschreibung

The Opportunity Hub UK Ltd in Newcastle is hiring an IT GRC Analyst to grow our risk and assurance capability. You will help deliver risk assessments, maintain the risk register, support audits, and map controls against ISO 27001 and NIST frameworks.

You’ll also draft clear policies and monitor compliance for senior stakeholders. Ideal candidates have 1–2 years in IT GRC or related fields, strong writing ability, and a genuine interest in how organisations manage risk.