IT GRC Analyst

The Opportunity Hub UK Ltd; Newcastle; Hybrid; AUD 64.000 - 80.000; Vollzeit

Benefits dieser Stelle

Private medical insurance

Pension contribution

Generous annual leave

Flexible working arrangements

Hybrid working from Newcastle office

Zusammenfassung

The Opportunity Hub UK Ltd in Newcastle is hiring an IT GRC Analyst to grow our risk and assurance capability. You will help deliver risk assessments, maintain the risk register, support audits, and map controls against ISO 27001 and NIST frameworks.

You’ll also draft clear policies and monitor compliance for senior stakeholders. Ideal candidates have 1–2 years in IT GRC or related fields, strong writing ability, and a genuine interest in how organisations manage risk.

Qualifikationen

• 1–2 years in IT GRC, risk, audit or compliance.
• Familiar with ISO 27001, NIST, SOC 2 or similar frameworks.
• Strong writing skills to translate policy into plain language.
• Detail-oriented with good analytical mindset.

Aufgaben

• Support risk assessments across IT systems, third parties and processes.
• Maintain and update risk register; track remediation to closure.
• Assist with audits; gather evidence and liaise with control owners.
• Map controls to ISO 27001, NIST and Cyber Essentials.
• Draft and review policies, standards and procedures in plain language.
• Monitor compliance status and prepare reporting packs for leaders.

Kenntnisse

GRC Analyst

ISO 27001

NIST

SOC 2

Policy drafting

Stakeholder comms

GRC tooling

Spreadsheets

Jobbeschreibung

Perfect role for a junior/mid professional looking to grow their Cybersecurity career in Newcastle.

Governance, risk and compliance has become the backbone of any serious security function. As regulatory pressure builds across UK industry, from ISO 27001 audits to Cyber Essentials Plus and beyond, organisations need people who can translate policy into practice. This established and growing security business, part of the wider Cybersecurity sector, is looking for an IT GRC Analyst to join its Newcastle team as it scales its risk and assurance capability.

Here’s what you’ll be doing:

• Supporting the delivery of risk assessments across IT systems, third parties and business processes
• Maintaining and updating the risk register, tracking remediation actions through to closure
• Assisting with internal and external audits, gathering evidence and liaising with control owners
• Mapping controls against frameworks such as ISO 27001, NIST and Cyber Essentials
• Drafting and reviewing policies, standards and procedures in plain, usable language
• Monitoring compliance status and preparing reporting packs for senior stakeholders

Here are the skills you’ll need:

• A year or two working in an IT GRC Analyst, risk, audit or compliance capacity, ideally within Cybersecurity or a regulated sector
• Working knowledge of at least one major framework (ISO 27001, NIST, SOC 2 or similar)
• Confidence writing clearly. Policies only work if people actually read them
• Comfortable in spreadsheets and GRC tooling, with an eye for detail that others miss
• Strong communication skills, able to hold your own with technical teams and non-technical stakeholders alike
• A genuine interest in how organisations manage risk, not just tick boxes

Key perks and benefits:

• £33,500 to £41,500 depending on experience, plus bonus scheme
• Hybrid working from the Newcastle office, with a sensible balance between home and site
• Private medical insurance and pension contribution
• Generous annual leave and flexible working arrangements
• Structured progression path within a defined but growing GRC function

Why pursue a career in Cybersecurity?

Demand for GRC talent has outpaced supply for years now, and that shows no sign of slowing. Newcastle has quietly built a strong reputation as a Cybersecurity hub outside London, with salaries and opportunities to match. Few career paths offer this combination of job security, intellectual challenge and clear routes upward for people willing to put the work in.