GRC & Info Security Analyst — Remote

PCI Pal; Ipswich; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

25 days holiday rising to 28

Medical, dental and optical insurance

Option to work in Ipswich office or at

EV Scheme incentive

Work from anywhere policy

Training and development opportunities

Ad-hoc team events

Job summary

PCI Pal is seeking a GRC Analyst to strengthen the central Information Security function by providing structured governance, risk and compliance analysis across audits, assurance, control management and strategic change.

You will turn requirements, evidence, risks and delivery updates into concise, traceable information to support timely decisions by the GRC Lead and CISO, partnering with the Information Security Project Manager for visibility and delivery coordination.

Qualifications

• Relevant experience in GRC, information security compliance, risk management, internal audit or assurance.
• Experience reviewing policies, audit reports, control narratives and evidence, and translating findings into clear actions.
• Familiarity with PCI DSS Level 1 service provider, ISO/IEC 27001, SOC 2 or NIST CSF.

Responsibilities

• Support the CISO, GRC Lead and wider Information Security team with risk, compliance and control analysis.
• Maintain governance artefacts including policies, standards, control mappings, risk registers, Statements of Applicability and supporting records.
• Review security policies, procedures, control narratives and evidence for accuracy, completeness, consistency and alignment with applicable frameworks.
• Identify control gaps, emerging risks and compliance issues, and provide practical recommendations with clear owners and target dates.
• Monitor relevant regulatory and industry developments, assess potential business impact and support the controlled update of affected requirements and documentation.
• Conduct control assessments, testing and evidence reviews, with clear findings and conclusions reported to the GRC Lead.

Skills

GRC experience

Framework knowledge

Policy & evidence review

Stakeholder comms

PMO collaboration

Attention to detail

AI governance awareness

Education

Information security certification

Tools

Drata

Jira

ServiceNow GRC

Archer

OneTrust

Job description

PCI Pal is seeking a GRC Analyst to strengthen the central Information Security function by providing structured governance, risk and compliance analysis across audits, assurance, control management and strategic change.

You will turn requirements, evidence, risks and delivery updates into concise, traceable information to support timely decisions by the GRC Lead and CISO, partnering with the Information Security Project Manager for visibility and delivery coordination.