GRC Analyst

Experis - ManpowerGroup; Manchester; On-site; GBP 661,000 - 716,000; Full time

Job summary

Experis - ManpowerGroup in Manchester is seeking a GRC Analyst for a hybrid contract. The role requires oversight of cyber security risks across suppliers, with governance reporting and risk-based prioritisation.

The contract is 80% remote and 20% onsite, with a rate of £480–£520 per hour. Candidates must be SC cleared (active) and UK nationals, and will be paid PAYE through umbrella.

Qualifications

• SC cleared (active) and UK national.
• Must be paid PAYE through umbrella.

Responsibilities

• Maintain oversight of cyber security risks across suppliers
• Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately
• Govern risk acceptance and exception management processes
• Support risk-based prioritisation across security disciplines
• Coordinate supplier compliance activities within the SIAM framework
• Validate supplier adherence to agreed security requirements
• Monitor security performance against contractual obligations
• Drive accountability for control weaknesses, non-compliance, and improvement actions
• Maintain visibility of compliance obligations and control requirements
• Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles
• Coordinate remediation of identified compliance gaps
• Produce consolidated security governance reporting
• Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings
• Present governance information to client stakeholders and governance forums
• Support strategic planning and risk-informed decision making
• Drive security governance maturity improvements across the supplier landscape
• Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness
• Security governance practices
• Support continuous improvement programmes across the cyber security operating model
• Facilitate cross-supplier resolution of governance issues

Job description

GRC Analyst

Location: Manchester, Hybrid | 80% remote, 20% onsite

Duration: 31/10/2031

Rate - £480 - £520

CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL

The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years

MUST BE PAYE THROUGH UMBRELLA

Role Description:

• Maintain oversight of cyber security risks across suppliers
• Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately
• Govern risk acceptance and exception management processes
• Support risk-based prioritisation across security disciplines
• Coordinate supplier compliance activities within the SIAM framework
• Validate supplier adherence to agreed security requirements
• Monitor security performance against contractual obligations
• Drive accountability for control weaknesses, non-compliance, and improvement actions
• Maintain visibility of compliance obligations and control requirements
• Support compliance against frameworks and standards such as:
• ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles
• Coordinate remediation of identified compliance gaps
• Produce consolidated security governance reporting
• Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings
• Present governance information to client stakeholders and governance forums
• Support strategic planning and risk-informed decision making
• Drive security governance maturity improvements across the supplier landscape
• Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness
• Security governance practices
• Support continuous improvement programmes across the cyber security operating model
• Facilitate cross-supplier resolution of governance issues