Governance, Risk & Compliance Analyst

Tate; Kingston upon Hull; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading infrastructure solutions provider in Kingston upon Hull is seeking a Governance, Risk & Compliance Analyst. The role involves governance of IT control policies, conducting risk assessments, and supporting compliance frameworks. Ideal candidates will possess a degree in a related field and have experience in GRC or risk analysis. The company offers competitive salaries, bonus opportunities, and generous pension contributions.

Benefits

Competitive salary

25 days' holiday

Corporate volunteering opportunities

Training and development programs

Employee Assistance Programme

Qualifications

• 2+ years' experience in GRC, cyber security, compliance, or risk analysis.
• Familiarity with compliance frameworks such as ISO 27001, NIST.
• Understanding of IT systems including Windows and cloud services.

Responsibilities

• Support IT control policies and standards governance.
• Conduct risk assessments and maintain divisional Risk Register.
• Prepare audit documentation for internal and external audits.

Skills

Analytical skills

Time management

Communication skills

Education

Degree in Information Security, Business, or Risk Management

Tools

Microsoft Office Suite

GRC platforms

Job description

Overview

At Tate we are passionate about everything we do. As a member of Kingspan Group, a global plc group of companies, Tate is recognised worldwide as an industry leader in the development and manufacture of data centre infrastructure solutions and commercial office raised access floors, for over 120 years. With revenues of over $420m and growing, Tate play a pivotal role in offering expertise in cutting edge design engineering in order to craft solutions, by working collaboratively with clients as a trusted partner. Our business continues to grow and expand, operating multiple manufacturing and commercial sites across the US, Europe, the Middle East, Asia, and Australia. We are excited about our fresh, dynamic, and inclusive team of experts working on new innovations and forward-thinking designs, as we remain a market leading player within our industry. We continue to invest heavily in the best available manufacturing tools and equipment needed to adhere to Kingspan's world class standards and in keeping with our Planet Passionate sustainability strategy, our focus is on having minimal climate impact. We are committed to equality, diversity and inclusion in the workplace and are an equal opportunities employer. We welcome applications from all backgrounds.

What will you be doing?

Key objectives in your role as Governance, Risk & Compliance Analyst include:

• Governance of the Tate/Kingspan IT control policies and standards, which we abide and are audited on.
• Assisting in the development and maintenance of compliance programs to meet regulatory and industry standards (e.g., ISO 27001, NIST, SOC 2, GDPR, HIPAA, SOX).
• Conducting risk assessments and supporting mitigation strategies across business units.
• Supporting the vendor risk management process by assessing third-party risks.
• Maintaining risk and compliance in the divisional Risk Register.
• Preparing audit documentation and assisting with internal and external audits.
• Maintaining and reporting on the learning management system (LMS).
• Tracking and following up on any remediation activities, including audit findings, vulnerabilities and control gaps.
• Assisting in handling cyber security incidents and any associated follow up.
• Any other ad-hoc duties deemed necessary.

Compliance

• Adhere to the Company\'s compliance obligations, policies, processes, and procedures.
• Report compliance concerns, issues, and failures.
• Participate in training as required.

What do you need?

You should:

• Be educated to degree level in an Information Security, Business, Risk Management, or other related field.
• Have a 2+ years\' experience in GRC, cyber security, compliance, internal audit, or risk analysis.
• Hold knowledge of common compliance frameworks and standards (e.g., ISO 27001, NIST CSF, COBIT).
• Have a general understanding of IT systems - Windows (desktop/server), networking, cloud (Azure/AWS).
• Possess strong analytical, research, and problem-solving skills.
• Possess excellent time management and organisational skills, with the ability to set objectives and prioritise workloads.
• Have strong communication skills, both written and verbal, and the ability to work with internal and external stakeholders.
• Be proficient with Microsoft Office Suite and GRC platforms.
• Be structured, self-motivated and passionate about detail.

It would also be advantageous if you:

• Hold relevant certifications such as CISA, CGRC, CRISC, CGEIT, CISSP, or similar.
• Have experience with enterprise risk management (ERM) processes.
• Be familiar with privacy regulations (e.g., GDPR, CCPA).

What can we offer?

• We are proud to offer competitive salaries, bonus opportunities and generous pension contributions.
• We know a work/life balance is important, which is why we offer 25 days\' holiday entitlement.
• Corporate volunteering with paid time off to give back to our local community.
• Unrivalled training and development opportunities. We prioritise developing both you and your career at Tate.
• Getting to know your colleagues on a personal level is easy at Tate with social events scheduled throughout the year.
• We are People Passionate and offer our employees unrestricted access to an Employee Assistance Programme and have dedicated MHFA representatives across the business.
• We are part of the global Kingspan Group, which means direct access to careers opportunities worldwide!