GRC & Cyber Security Analyst — Hybrid, Leicester

Dunelm; East Midlands; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

Dunelm is seeking an experienced Governance, Risk & Compliance (GRC) Analyst to join our Information Security team. The role focuses on developing and improving cyber security governance, risk and compliance capabilities to align with regulatory obligations and industry best practices.

You will collaborate across technology, retail operations, finance, legal, procurement and HR to strengthen cyber security maturity, support regulatory compliance, and embed security into daily business processes.

Qualifications

• Experience in Governance, Risk & Compliance or Cyber Security roles.

Responsibilities

• Develop and maintain the Information Security Management System.
• Support PCI DSS, CSF 2.0 and data protection obligations.
• Oversee third-party security assurance throughout contracts.
• Produce governance reports for senior stakeholders.
• Support security awareness and training programs.
• Partner with business functions to embed security governance.

Skills

Governance risk compliance

Cyber security

NIST CSF 2.0

PCI DSS

UK GDPR Data Protection Act 2018

Stakeholder management

Communication skills

Tools

LogicGate

OneTrust

Archer

AuditBoard

Job description

Dunelm is seeking an experienced Governance, Risk & Compliance (GRC) Analyst to join our Information Security team. The role focuses on developing and improving cyber security governance, risk and compliance capabilities to align with regulatory obligations and industry best practices.

You will collaborate across technology, retail operations, finance, legal, procurement and HR to strengthen cyber security maturity, support regulatory compliance, and embed security into daily business processes.