GRC Analyst

Experis; Manchester; On-site; GBP 89,000 - 96,000; Full time

Job summary

Experis in Manchester is seeking a contract GRC Analyst for a hybrid role (80% remote, 20% onsite). The £480-£520 daily rate is for a Practitioner with active SC clearance and sole UK national status.

You will oversee cyber security risks across suppliers, drive governance reporting, and coordinate remediation within the SIAM framework, ensuring compliance with ISO 27001, NIST CSF and NCSC guidance.

Qualifications

• Active SC clearance (UK) and sole UK national status required.
• Must be PAYE through umbrella arrangements.

Responsibilities

• Maintain oversight of cyber security risks across suppliers.
• Ensure risks are identified, assessed, recorded, tracked & escalated.
• Govern risk acceptance and exception management processes.
• Support risk-based prioritisation across security disciplines.
• Coordinate supplier compliance activities within the SIAM framework.
• Validate supplier adherence to security requirements.
• Monitor security performance against contractual obligations.
• Drive improvements in control weaknesses and non-compliance actions.
• Produce consolidated security governance reporting.
• Present governance information to client stakeholders.

Skills

Cyber security risk

SIAM governance

Risk assessment

Governance reporting

Stakeholder communication

Tools

ISO 27001

NIST CSF

NCSC guidance

Job description

GRC Analyst

Location: Manchester, Hybrid | 80% remote, 20% onsite

Duration: 31/10/2031

Rate - £480 - £520

CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL

The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years

MUST BE PAYE THROUGH UMBRELLA

Role Description

• Maintain oversight of cyber security risks across suppliers
• Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately
• Govern risk acceptance and exception management processes
• Support risk-based prioritisation across security disciplines
• Coordinate supplier compliance activities within the SIAM framework
• Validate supplier adherence to agreed security requirements
• Monitor security performance against contractual obligations
• Drive accountability for control weaknesses, non-compliance, and improvement actions
• Maintain visibility of compliance obligations and control requirements
• Support compliance against frameworks and standards such as:
• ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles
• Coordinate remediation of identified compliance gaps
• Produce consolidated security governance reporting
• Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings
• Present governance information to client stakeholders and governance forums
• Support strategic planning and risk-informed decision making
• Drive security governance maturity improvements across the supplier landscape
• Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness
• Security governance practices
• Support continuous improvement programmes across the cyber security operating model
• Facilitate cross-supplier resolution of governance issues