GRC & Security Risk Analyst - Hybrid UK

Capgemini; Inverness; Hybrid; GBP 45,000 - 60,000; Full time

Benefits offered by this job

Disability Confident Employer

Flexible hybrid work

Wellbeing program

Job summary

Capgemini is seeking a Governance, Risk & Compliance (GRC) Analyst to support security governance, risk management, and compliance activities across projects and operations in the UK. The role involves security oversight, assurance, and risk-guided guidance within a regulated environment and will contribute to secure-by-design practices.

The role will operate on a hybrid model with work from Preston or Inverness, blending office, client site, and home-based work as needed.

Qualifications

• Experience in a Cyber Security Governance, Risk & Compliance (GRC) environment.
• Understanding of security risk management frameworks and methodologies.
• Experience supporting security governance, compliance, assurance, audit, or risk management activities.
• Familiarity with security standards, certifications, and compliance frameworks, including ISO 27001, Cyber Essentials Plus, GDPR, and NIST.

Responsibilities

• Support the maintenance and continuous improvement of the Cyber Security Governance Framework, ensuring alignment with requirements.
• Assist with security risk management activities, including risk identification, assessment, treatment, acceptance tracking, and monitoring.
• Support development, review, and maintenance of security policies, standards, and procedures aligned to ISO 27001, Cyber Essentials Plus, GDPR, and contractual obligations.
• Conduct security assurance reviews and control assessments to identify gaps and opportunities for improvement.
• Produce security reporting and metrics covering risk, compliance, audit, incident, and vulnerability management for internal and client stakeholders.

Skills

GRC experience

Security risk management

Governance & compliance

ISO 27001 familiarity

Education

Cyber security qualifications

Job description

Capgemini is seeking a Governance, Risk & Compliance (GRC) Analyst to support security governance, risk management, and compliance activities across projects and operations in the UK. The role involves security oversight, assurance, and risk-guided guidance within a regulated environment and will contribute to secure-by-design practices.

The role will operate on a hybrid model with work from Preston or Inverness, blending office, client site, and home-based work as needed.