Information Security Governance & Risk Analyst

Made4Tech Global; Greater Manchester; On-site; GBP 50,000 - 75,000; Full time

Job summary

Made4Tech Global is seeking an Information Security Governance & Risk Analyst to help develop governance, compliance and risk management capabilities. The role focuses on governance, assurance, risk management, compliance, awareness and organisational engagement rather than hands-on technical security.

Key responsibilities include implementing information security policies, conducting gap analyses, supporting assurance and risk activities, and promoting security culture across diverse teams to

Qualifications

• Experience in Governance, Risk & Compliance (GRC), information security governance, risk, audit or compliance.
• Strong understanding of risk management and control frameworks.
• Experience supporting compliance, assurance or policy implementation activities.
• Excellent stakeholder engagement and communication skills.
• Ability to work across diverse teams and influence positive outcomes.
• Experience delivering awareness, training or behavioural change programmes.

Responsibilities

• Support the implementation and adoption of information security policies, procedures and governance frameworks.
• Conduct gap analysis activities to identify compliance and control improvement opportunities.
• Assist with information security assurance and compliance programmes.
• Support risk identification, assessment and mitigation activities across the organisation.
• Work with stakeholders to review existing risks and identify emerging threats.
• Help deliver security awareness and human risk initiatives to build security maturity and capability.
• Contribute to audit, assurance and reporting activities.
• Promote a culture of information security across technical and non-technical teams.

Skills

GRC experience

Stakeholder engagement

Policy implementation

Awareness programmes

Tools

Policy frameworks

Job description

We're partnering with a large and complex organisation seeking an Information Security Governance & Risk Analyst to support the development of its security governance, compliance and risk management capabilities.

This role would suit someone with broad Governance, Risk & Compliance (GRC) experience who enjoys working with stakeholders, improving processes, supporting compliance initiatives and helping organisations strengthen their overall security culture.

Whilst the role sits within Information Security, this is not a hands-on cyber security engineering or technical security position. Instead, the focus is on governance, assurance, risk management, compliance, awareness and organisational engagement.

Key Responsibilities

• Support the implementation and adoption of information security policies, procedures and governance frameworks.
• Conduct gap analysis activities to identify compliance and control improvement opportunities.
• Assist with information security assurance and compliance programmes.
• Support risk identification, assessment and mitigation activities across the organisation.
• Work with stakeholders to review existing risks and identify emerging threats.
• Help deliver security awareness and human risk initiatives to build security maturity and capability.
• Contribute to audit, assurance and reporting activities.
• Promote a culture of information security across technical and non-technical teams.

What We're Looking For

• Experience within Governance, Risk & Compliance (GRC), information security governance, risk, audit or compliance.
• Strong understanding of risk management and control frameworks.
• Experience supporting compliance, assurance or policy implementation activities.
• Excellent stakeholder engagement and communication skills.
• Ability to work across diverse teams and influence positive outcomes.
• Experience delivering or supporting awareness, training or behavioural change programmes.

We'd Particularly Like To Hear From You If You Have

• Experience within a large, matrixed or complex organisation.
• Public sector, education, healthcare, local government or wider regulated environment experience.
• Exposure to information security, cyber governance, compliance or risk functions.
• Security, risk or governance certifications are welcome but not essential.

Initial Priorities

The successful candidate will initially focus on:

Understanding and embedding new policies and procedures

Supporting gap analysis activity to inform compliance objectives

Helping roll out a new human risk and security awareness programme

Working with stakeholders to review current and emerging information security risks