GRC Analyst: Hybrid Edinburgh | Risk & Compliance Impact

The Opportunity Hub UK Ltd; City of Edinburgh; Hybrid; GBP 36,000 - 45,000; Full time

Benefits offered by this job

Private medical and dental insurance

Enhanced pension scheme

Performance-based bonus

Job summary

The Opportunity Hub UK Ltd in Edinburgh is looking for a GRC Analyst to drive governance, risk and compliance across a cybersecurity team.

You’ll support risk assessments, maintain ISO 27001, SOC 2 and NIST documentation, coordinate audits, monitor controls, and prepare leadership dashboards.

Hybrid working from Edinburgh, with a salary of £35,500 to £45,000, private medical and dental insurance, enhanced pension, and performance-based bonuses.

Qualifications

• A year or two working in a GRC, audit, or information security role.
• Knowledge of ISO 27001, NIST, SOC 2, or similar.
• Comfortable writing clearly; a lot of this job is documentation that others rely on.
• Confidence engaging with senior stakeholders when something doesn't add up.
• Certification (CompTIA Security+, ISO 27001 Lead Implementer, or similar) is useful but not essential.

Responsibilities

• Support risk assessments across the business, identifying gaps before they become problems
• Maintain and improve compliance documentation against frameworks like ISO 27001, SOC 2, and NIST
• Coordinate internal and external audits, chasing evidence and closing findings on schedule
• Monitor control effectiveness and flag anything that's drifted out of line
• Work with security, legal, and IT teams to keep policies current and actually usable
• Help prepare reports and dashboards that give leadership a clear view of risk posture

Skills

GRC

Audit processes

ISO 27001

NIST

SOC 2

Documentation

Stakeholder comms

Risk assessment

Policy writing

Attention to detail

Job description

The Opportunity Hub UK Ltd in Edinburgh is looking for a GRC Analyst to drive governance, risk and compliance across a cybersecurity team.

You’ll support risk assessments, maintain ISO 27001, SOC 2 and NIST documentation, coordinate audits, monitor controls, and prepare leadership dashboards.

Hybrid working from Edinburgh, with a salary of £35,500 to £45,000, private medical and dental insurance, enhanced pension, and performance-based bonuses.