GRC Analyst - Cyber Security

TEC Partners Limited; Enfield; On-site; GBP 50,000 - 60,000; Full time

Benefits offered by this job

Fully remote

Job summary

TEC Partners Limited is seeking a GRC Analyst to strengthen governance, risk and compliance for client security programs. This fully remote, UK-based role offers exposure to a diverse technology landscape and opportunities to influence security maturity across projects.

You will work with IT and business stakeholders to identify risk, support PCI DSS and GDPR compliance, and help maintain ISO 27001/NIST aligned controls.

Qualifications

• Proven experience in a Cyber Security GRC or Information Security Analyst role.
• Strong understanding of recognised security frameworks (ISO 27001, NIST, etc.).
• Experience supporting PCI DSS and GDPR compliance.
• Exposure to third-party risk management processes.
• Strong analytical skills with the ability to engage effectively with technical and non-technical stakeholders.
• Relevant certifications such as CISM, CISSP or CISA (desirable but not essential).

Responsibilities

• Information Security Frameworks – Align with ISO 27001, ISO 22301 and NIST.
• Risk Management – Conduct risk assessments and improve risk framework.
• TPRM – Oversee supplier and supply chain security assurance.
• Security Awareness – Promote a proactive security culture.
• Policy & Governance – Develop and maintain security policies and standards.
• Control Assurance – Assess controls and recommend improvements.
• Compliance Activities – Support PCI DSS and GDPR adherence.
• BC/DR – Assist with business continuity and disaster recovery planning.

Skills

GRC experience

Security Frameworks

PCI DSS

GDPR

TPRM knowledge

Job description

Position: GRC Analyst - Cyber Security

Type: Permanent

Location: Remote, UK-based

Salary: £50-60K

We’re seeking a GRC Analyst to strengthen pour client’s governance, risk and compliance capability. The organisation is committed to maintaining robust security standards and regulatory compliance across its operations.

This is a fully remote role offering real visibility and the opportunity to influence security maturity across a diverse environment.

The Role

As a Cyber Security GRC Analyst, you will support and enhance the organisation’s security governance framework, risk management processes, and compliance activities.

Working closely with IT, security and business stakeholders, you’ll help identify and mitigate risk, maintain compliance with key regulatory requirements (including PCI DSS and GDPR), and contribute to building a strong culture of security awareness.

Key Responsibilities

• Information Security Frameworks – Support ongoing alignment with ISO 27001, ISO 22301 and NIST standards.
• Risk Management – Conduct security risk assessments and contribute to the continuous improvement of the risk management framework.
• Third-Party Risk Management (TPRM) – Assist in overseeing supplier and supply chain security assurance processes.
• Security Awareness – Support initiatives that promote a positive and proactive security culture.
• Policy & Governance – Contribute to the development and maintenance of security policies, standards and procedures.
• Control Assurance – Assess security controls and provide recommendations for improvement.
• Compliance Activities – Support PCI DSS compliance requirements and collaborate with relevant stakeholders on GDPR adherence.
• Business Continuity & Disaster Recovery – Assist with BC/DR planning, testing and documentation.

About You

• Proven experience in a Cyber Security GRC or Information Security Analyst role
• Strong understanding of recognised security frameworks (ISO 27001, NIST, etc.)
• Experience supporting PCI DSS and GDPR compliance
• Exposure to third-party risk management processes
• Strong analytical skills with the ability to engage effectively with technical and non-technical stakeholders
• Relevant certifications such as CISM, CISSP or CISA (desirable but not essential)

Why Apply?

• Fully remote working
• Opportunity to develop within a growing and evolving security function
• Exposure to a complex, multi-site and digitally enabled environment
• A role offering genuine influence across governance, risk and compliance activities

If you’re looking to build your GRC career within a business that takes security seriously and offers real scope for progression, we’d be keen to speak with you.