GRC Analyst: Security & Compliance for Tech Teams

Rightmove; Greater London; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Dental and optical plan

Private Medical Insurance

27 days holiday

Job summary

Rightmove in London is seeking a proactive GRC Analyst to join the Technology Risk team. You will support the Head of Technology Risk and Delivery Assurance in executing the risk roadmap and maintaining a secure, compliant environment.

The role bridges compliance and engineering, translating requirements into actionable outputs within product and development workflows, while driving governance projects and audits to strengthen system resilience and regulatory alignment.

Qualifications

• 2–4 years of experience in a project management, GRC, or security-related role.
• Familiarity with information security, privacy, or compliance-based projects.
• Experience reporting to stakeholders at all levels of the business.
• Familiarity with Agile tools (e.g. Jira) and embedding requirements into development backlogs.

Responsibilities

• Implement major projects across departments (Business Resilience, Risk Management).
• Translate GRC requirements into technical specs, user stories, and tickets.
• Support audits, identify vulnerabilities, and implement controls with technical teams.
• Contribute to Technology Risk strategy by rolling out frameworks and embedding automated practices.
• Collaborate with teams to integrate compliance requirements into Agile/Jira workflows.
• Support due diligence on software and partners to strengthen system resilience.

Skills

Collaboration

Project management

Technical fluency

Pragmatic mindset

Process focus

Tools

Jira

Job description

Rightmove in London is seeking a proactive GRC Analyst to join the Technology Risk team. You will support the Head of Technology Risk and Delivery Assurance in executing the risk roadmap and maintaining a secure, compliant environment.

The role bridges compliance and engineering, translating requirements into actionable outputs within product and development workflows, while driving governance projects and audits to strengthen system resilience and regulatory alignment.