GRC Analyst

JR United Kingdom; England; Remote; GBP 45,000 - 65,000; Full time

Job summary

A leading company in the UK is seeking a skilled GRC Analyst for a 6-month contract to support the implementation of the NIST Cybersecurity Framework. This role is crucial for enhancing cybersecurity governance and risk management processes, requiring expertise in NIST CSF and strong communication skills.

Qualifications

• Proven experience with NIST CSF implementation.
• Strong understanding of governance, risk, and compliance practices.
• Ability to translate cyber frameworks into actionable processes.

Responsibilities

• Contribute to the design, documentation, and implementation of cybersecurity processes.
• Establish a Security Risk Governance Committee.
• Develop and maintain cybersecurity policies and standards.

Skills

NIST CSF implementation

Governance, risk, and compliance practices

Communication

Stakeholder engagement

Job description

Social network you want to login/join with:

Location: UK Remote

Contract Type: 6 Month Contract

About the Role:

We are seeking a skilled GRC Analyst to support the implementation of the NIST Cybersecurity Framework. This is an exciting opportunity to be part of a key transformation initiative focused on strengthening their cybersecurity governance and risk management processes.

Key Responsibilities:

You will contribute to the design, documentation, and implementation of processes that align with industry standards and internal cyber policies, including:

• Establishing a Security Risk Governance Committee,
• Developing and maintaining cybersecurity policies and standards,
• Performing gap analyses against internal and external requirements,
• Designing and embedding cyber risk management processes,
• Implementing policy exception and deficiency management workflows.

Key Domains:

• Cybersecurity Oversight & Governance
• Cyber Policy Development
• NIST CSF v2.0 Compliance

Essential Skills and Experience:

• Proven experience with NIST CSF implementation,
• Strong understanding of governance, risk, and compliance practices,
• Ability to translate cyber frameworks into actionable and scalable processes,
• Excellent communication and stakeholder engagement skills.