GRC & Security Risk Analyst | Hybrid (ISO 27001)

Capgemini; Inverness; Hybrid; GBP 48,000 - 70,000; Full time

Job summary

Capgemini is seeking a Governance, Risk, Compliance (GRC) and Vulnerability Assessment Analyst to support security governance, risk management, compliance, assurance and vulnerability management across projects and services. Based in Preston or Inverness, the role blends office, client site and home working.

You will identify and report security risks, develop policies aligned with ISO 27001, Cyber Essentials Plus, GDPR and NIST, and contribute to continual security posture improvements.

Qualifications

• Experience working within a Cyber Security Governance, Risk & Compliance (GRC) environment.
• Familiarity with security standards, certifications, and compliance frameworks, including: ISO 27001, Cyber Essentials Plus, GDPR, NIST Cyber Security Framework, ITIL.
• Strong analytical, reporting, documentation, communication and organisational skills.

Responsibilities

• Support the maintenance and continuous improvement of the Cyber Security Governance Framework, ensuring alignment with organisational, client, and regulatory requirements.
• Assist with security risk management activities, including risk identification, assessment, treatment, acceptance tracking, and ongoing monitoring.
• Support the development, review, and maintenance of security policies, standards, and procedures aligned to ISO 27001, Cyber Essentials Plus, GDPR, and contractual obligations.
• Conduct security assurance reviews and control assessments to identify compliance gaps, risks, and opportunities for improvement.
• Produce security reporting and metrics covering risk, compliance, audit, incident, and vulnerability management activities for internal and client stakeholders.

Skills

GRC experience

Risk management

Governance & compliance

Audit support

ISO 27001

Cyber Essentials Plus

GDPR

NIST

ITIL

Analytical skills

Reporting

Job description

Capgemini is seeking a Governance, Risk, Compliance (GRC) and Vulnerability Assessment Analyst to support security governance, risk management, compliance, assurance and vulnerability management across projects and services. Based in Preston or Inverness, the role blends office, client site and home working.

You will identify and report security risks, develop policies aligned with ISO 27001, Cyber Essentials Plus, GDPR and NIST, and contribute to continual security posture improvements.