GRC Cyber Consultant

Bright Purple Resourcing Ltd; Hempstalls; Remote; GBP 83,000 - 97,000; Part time

Benefits offered by this job

Remote work (UK)

Occasional site travel

Job summary

Bright Purple Resourcing Ltd is seeking an experienced Cyber GRC Analyst on a 12‑month contract. You’ll support EU Cyber Resilience Act readiness and mature governance across engineering, product, quality, service and cyber security teams.

Responsibilities include maintaining risk registers, supporting audits and implementing AuditBoard, with UK remote work and occasional travel to client sites in England.

Qualifications

• Experience in cyber GRC, compliance, risk management or audit.
• Hands-on with risk registers, risk assessments and remediation tracking.
• Experience supporting regulatory compliance programmes.
• Familiarity with Cyber Resilience Act requirements.
• Knowledge of NIST 800-53, ISO 27001, NIS2 and IEC 62443.
• AuditBoard or similar GRC tooling experience.
• Ability to develop KPIs and clear compliance reporting.
• Experience writing cyber security policies, standards and procedures.
• Strong stakeholder engagement and documentation skills.

Responsibilities

• Own and mature the Cyber Security Risk Register.
• Support audit preparation and security assessments.
• Maintain System Security Plans and associated compliance documentation.

Skills

GRC compliance

Risk management

Regulatory standards

Stakeholder engagement

Policy writing

Audit expertise

NIST/NIS2

Tools

AuditBoard

GRC tooling

Job description

Cyber GRC Analyst | EU Cyber Resilience | Contract

UK Remote, with occasional site travel
£450-£525
Likely Outside IR35
12 months

Bright Purple are looking for an experienced Cyber GRC Analyst to join a global security technology manufacturer on a 12 month contract. You’ll play a key part in the organisation’s EU Cyber Resilience Act (CRA) readiness, while maturing cyber risk management and governance across the business. Working closely with engineering, product management, quality, service and cyber security teams, you’ll help turn compliance requirements into tracked, measurable deliverables.

What we’re looking for:

• Cyber GRC, compliance, risk management or audit experience
• Hands-on experience maintaining risk registers, running risk assessments and tracking remediation
• Experience supporting regulatory compliance programmes
• Familiarity with Cyber Resilience Act requirements
• Knowledge of NIST 800-53, ISO 27001, NIS2 and IEC 62443
• AuditBoard or similar GRC tooling experience
• Ability to develop KPIs and clear compliance reporting
• Experience writing cyber security policies, standards and procedures
• Strong stakeholder engagement and documentation skills

You’ll own and mature the Cyber Security Risk Register, support audit preparation and security assessments, help with the implementation of AuditBoard, and maintain System Security Plans and associated compliance documentation.

This is a 12 month contract, [Inside/Outside] IR35, paying £[XXX] to £[XXX] per day.

The role is UK remote, with occasional travel to client sites in England.

Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry.