Governance, Risk, and Compliance Analyst

La Fosse; Cambridgeshire and Peterborough; Hybrid; GBP 92,250 - 101,475; Part time

Job summary

A recruitment firm is looking for a senior GRC contractor to join a tech company in Cambridge. This role requires strong experience in asset governance and third-party risk management. Candidates should have a proven track record in risk assessments and be able to integrate findings into platforms like ServiceNow IRM. The position is hybrid, requiring 2 days in the office, and offers a day rate between £500–£550 for an initial 6-month contract.

Qualifications

• Strong experience in asset governance, including classification and control assurance for business-critical systems.
• Skilled in third-party risk management assessing supplier security and reviewing contracts.
• Proven ability to lead risk assessments and control reviews with hands-on experience.

Responsibilities

• Shape frameworks to drive faster decisions and reduce enterprise risk.
• Identify and remediate control failures, managing policy exceptions.
• Build automated workflows to improve audit readiness.

Skills

Asset governance

Third-party risk management

Risk assessments and control reviews

Building scalable workflows

Control frameworks (NIST CSF, ISO 27001, SOC 2)

Tools

ServiceNow IRM

Job description

Overview

La Fosse have partnered with a well-known tech company in the Cambridge area. They are looking for a senior GRC contractor to come in and shape frameworks to drive faster decisions whilst reducing enterprise and supplier risk.

Qualifications

• Strong experience in asset governance, including classification and control assurance for business-critical systems.
• Skilled in third-party risk management assessing supplier security, reviewing contracts, and supporting customer due diligence processes.
• Proven ability to lead risk assessments and control reviews, with hands-on experience integrating findings into ServiceNow IRM or similar GRC platforms.
• Track record of identifying and remediating control failures, managing policy exceptions, and following through on audit findings.
• Experience building scalable, automated workflows to improve audit readiness and reduce manual effort in GRC functions.
• Deep understanding of control frameworks (NIST CSF, ISO 27001, SOC 2)
• Ability to hit the ground running and proven track record of working in dynamic fast paced environments.

Contract details

This role is initially a 6 month contract, hybrid with 2 days a week in office in Cambridge. Candidates must have the right to work in the UK. Day rate is between £500–£550 inside IR35.

Seniority level

• Mid-Senior level

Employment type

• Contract

Job function

• Information Technology and Engineering

Industries

• Software Development, IT System Custom Software Development, and IT Services and IT Consulting