Hybrid GRC & Cyber Security Analyst

Dunelm; Leicester; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

Dunelm is seeking an experienced Governance, Risk & Compliance (GRC) Analyst to join our Information Security team in the UK. You will strengthen cyber security governance, risk and compliance capabilities while aligning with regulatory requirements and business objectives.

Working with technology, retail operations, finance, legal and HR, you will drive governance improvements, support regulatory compliance, and embed security into daily processes.

Qualifications

• Experience in GRC, information security or cyber security.
• Able to develop and maintain governance documentation with accuracy.
• Strong stakeholder management and written communication skills.
• Experience supporting audits and regulatory compliance activities.

Responsibilities

• Develop and maintain cyber security governance, risk and compliance capabilities.
• Coordinate third‑party security assurance and supplier risk management.
• Support risk assessments, risk lifecycle activities and executive reporting.
• Produce governance documentation, policies and standards.
• Embed security governance across business functions and projects.

Skills

Governance & risk

Cyber security

Stakeholder management

Regulatory compliance

Policy writing

Security metrics reporting

Tools

LogicGate

OneTrust

Archer

AuditBoard

Job description

Dunelm is seeking an experienced Governance, Risk & Compliance (GRC) Analyst to join our Information Security team in the UK. You will strengthen cyber security governance, risk and compliance capabilities while aligning with regulatory requirements and business objectives.

Working with technology, retail operations, finance, legal and HR, you will drive governance improvements, support regulatory compliance, and embed security into daily processes.