GRC Analyst

Maxwell Bond; Southampton; Hybrid; GBP 50,000 - 57,000; Full time

Job summary

A UK cybersecurity consultancy is seeking a GRC Analyst to join its governance, risk, and compliance team. This remote role involves supporting compliance frameworks, identifying security risks, and contributing to audits and policy development. Ideal candidates should have experience in GRC or information security, strong communication skills, and a degree or relevant certifications. The position offers a competitive salary between £50,000–£57,000 and a comprehensive benefits package with opportunities for professional development.

Benefits

Competitive salary and benefits

Flexibility in working arrangements

Professional development support

Inclusive culture

Career growth opportunities

Qualifications

• Experience within GRC, assurance, risk management, or information security.
• Knowledge of risk assessment and compliance frameworks.
• Ability to produce clear, concise documentation.

Responsibilities

• Support and maintain compliance frameworks including 27001 and CAF.
• Identify and monitor security risks within the ISMS.
• Coordinate internal and external audits.

Skills

GRC, assurance, risk management, or information security

Understanding of risk assessment methodologies

Strong communication skills

Excellent organization and prioritization skills

Confident engaging with stakeholders

Education

Degree in Cybersecurity, Information Security, or a related field

Professional certifications such as CISA, CISM, CISSP

Tools

Audit management tools

Job description

GRC Analyst – Cybersecurity Consultancy

📍 Location : Remote UK (Occasional Office Visits)

💰 Salary : £50,000-£57,000 + Benefits

Overview

We’re representing a highly accredited UK cybersecurity consultancy that is seeking a GRC Analyst to join its growing governance, risk, and compliance team.

This role offers the opportunity to work across a diverse portfolio of clients, helping to strengthen their security posture, ensure compliance with regulatory and contractual obligations, and contribute to the ongoing development of robust risk and assurance frameworks.

Ideal for someone with experience in GRC, assurance, or information security , this position provides exposure to high-impact projects within a collaborative, forward-thinking environment.

Key Responsibilities

• Governance & Compliance : Support and maintain compliance frameworks, including 27001, CAF, and other relevant standards.
• Risk Management : Identify, assess, and monitor security risks, ensuring effective mitigation and continuous improvement within the ISMS.
• Audit & Assurance : Plan, conduct, and coordinate internal and external audits, tracking findings and follow-up actions to closure.
• Policy & Control Development : Assist in developing, reviewing, and improving security policies, procedures, and control documentation.
• Supplier & Third-Party Risk : Support assurance activities with suppliers, partners, and service providers to maintain a consistent security baseline.
• Information Governance : Contribute to compliance with data protection regulations such as GDPR and the Data Protection Act 2018.
• Awareness & Training : Promote security best practice through awareness initiatives and collaboration with internal and external stakeholders.
• Stakeholder Engagement : Build strong relationships across technical and business functions to support security governance objectives.

Skills & Experience

Essential :

• Experience within GRC, assurance, risk management, or information security.
• Understanding of risk assessment methodologies and compliance frameworks (e.g. ISO 27001, CAF, NIST).
• Strong communication and reporting skills, with the ability to produce clear, concise documentation.
• Excellent organisation and prioritisation skills with attention to detail.
• Confident engaging with stakeholders at all levels of the business.

Desirable :

• Experience with audit management tools or compliance automation platforms.
• Knowledge of GDPR, Data Protection Act 2018, or similar legislation.
• Degree in Cybersecurity, Information Security, or a related field.
• Professional certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Implementer / Auditor.

Benefits

• Competitive salary and comprehensive benefits package.
• Flexible hybrid working arrangements.
• Access to professional development and certification support.
• Inclusive and supportive culture focused on collaboration and innovation.
• Clear opportunities for career growth and progression within a fast-scaling consultancy.

Core Values

This organisation is driven by collaboration, accountability, and innovation. It fosters a culture of continuous improvement and empowers its people to make meaningful contributions to both client success and the company’s mission of delivering security excellence.