GRC Analyst

Evri; Morley; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

Evri is seeking a Governance, Risk & Compliance (GRC) Analyst to strengthen information risk management, ensure regulatory compliance and embed governance across Security, Technology, Legal and Privacy teams. You will assess controls, support audits and drive improvements at scale.

This hybrid role, based with regular collaboration from our Morley office, offers the chance to influence how governance and risk management operate in a leading UK parcel delivery business, shaping resilient security

Qualifications

• Experience in Governance, Risk & Compliance, Information Security, Risk Management, or Audit.
• Knowledge of ISO 27001, NIST CSF, Cyber Essentials, PCI DSS.
• Strong analytical, attention to detail, and stakeholder communication.

Responsibilities

• Conduct control assessments across the business and track remediation to completion.
• Support development, maintenance and communication of information security policies, standards and procedures.
• Facilitate information risk assessments with business and technical stakeholders.
• Support governance and risk activities for AI technologies, including ethical use, security, transparency and regulatory considerations.
• Coordinate evidence collection and support internal and external audits.
• Contribute to third-party risk management processes, including supplier due diligence and security assessments.
• Identify opportunities to improve governance processes, enhance controls and strengthen organisational risk maturity.

Skills

Governance & compliance

Information security

Risk management

Audit

Job description

Evri Group is the UK’s premier parcel delivery business, uniting four distinct brands—Evri, Evri Premium, a network of DHL, UK Mail and Irish e-commerce specialist Coll-8 to deliver more than 1 billion parcels and letters annually across the UK and to over 200 global destinations. With 12,000 colleagues, 30,000 couriers and drivers, 8,000 vehicles, and a nationwide network of hubs, depots and fulfilment centres, we combine over 50 years of expertise with the scale and flexibility to support everyone from casual senders to SMEs and major retailers. Driven by our friendly, ambitious and diverse people, we are passionate about delivering exceptional service and offer exciting opportunities across the Evri Group.

Governance, Risk & Compliance (GRC) Analyst

What if your work helped protect the systems, data and services that keep millions of parcels moving every day?

At Evri, security, governance and risk management are critical to delivering trusted services at scale. As our technology landscape continues to evolve, we’re investing in strengthening our security governance frameworks, risk management capabilities, and compliance processes to ensure we remain resilient, secure, and audit-ready.

We’re looking for a Governance, Risk & Compliance (GRC) Analyst to play a key role in helping us manage information risk, maintain compliance with industry standards, and support the governance processes that underpin our security strategy.

If you enjoy analysing risk, improving controls, working across multiple stakeholders, and helping organisations navigate complex regulatory requirements, this could be the perfect next step in your career.

This is far more than a compliance administration role.

You’ll work across Security, Technology, Legal, Privacy and Business teams, helping to embed governance frameworks, assess risks, support audits, and drive continuous improvements across the organisation.

You’ll gain exposure to a broad range of cybersecurity, privacy and risk management activities, including ISO 27001, NIST Cyber Security Framework, Cyber Essentials, PCI compliance, third-party risk management and emerging governance challenges surrounding AI technologies.

Most importantly, you’ll have the opportunity to influence how governance and risk management operate across a large and complex organisation.

This role is hybrid, with regular collaboration from our Morley office.

What you’ll be doing

• Conducting control assessments across the business, identifying gaps and tracking remediation activities through to completion
• Supporting the development, maintenance and communication of information security policies, standards and procedures
• Facilitating information risk assessments with business and technical stakeholders
• Supporting governance and risk management activities associated with AI technologies, including ethical use, security, transparency and regulatory considerations
• Coordinating evidence collection and supporting both internal and external audit activities
• Contributing to third-party risk management processes, including supplier due diligence and security assessments
• Identifying opportunities to improve governance processes, enhance controls and strengthen organisational risk maturity

What you’ll bring

• Experience working within Governance, Risk & Compliance, Information Security, Risk Management, Audit or a similar discipline
• Good knowledge of governance and compliance frameworks including:
  • ISO 27001
  • NIST Cyber Security Framework (CSF)
  • Cyber Essentials
  • PCI DSS
• Strong analytical and problem-solving skills with excellent attention to detail
• Experience working with a broad range of stakeholders across technical and non-technical teams
• Excellent communication, organisation and prioritisation skills
• Experience with GRC tooling would be advantageous

You’ll work alongside passionate security, technology and business professionals who are committed to doing things the right way, continuously improving, and building a resilient organisation ready for the future.

We’ll give you the support, autonomy and development opportunities to grow your career while helping shape the governance landscape of one of the UK’s leading parcel delivery businesses.

Most importantly, you’ll be part of a business that values different perspectives, encourages collaboration, and understands that great outcomes come from great people.

We are Evri. Where everyone is welcome.

We’re excited about what's next. Let’s deliver it together.

Evri Group for everyone

We’recommitted to building a truly inclusive and diverse workplace where everyone can bring – and be – their whole authentic selves.

We’re also on a mission to be the UK’s most accessible delivery business. We’ve partnered with Scope, the leading disability equality charity, to improve deliveries for millions of customers and give extra support to our colleagues and couriers who need it.

Collaboration is key because we work better together. Bring passion, ambition and an open mind, and in return we’ll give you respect, flexibility and a place where you can thrive.