IT GRC Senior Analyst

Nigel Wright Recruitment; Newcastle upon Tyne; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Hybrid work policy

Job summary

Nigel Wright Recruitment is seeking an experienced GRC focused Information Security professional to join a growing international organisation at a pivotal stage as it matures its technology landscape. You will act as a trusted advisor to senior leadership, embedding governance, risk and compliance frameworks across a global environment.

Working with an established international GRC function, you will assess systems and business requirements, provide guidance on controls and support audit and

Qualifications

• Extensive experience in IT Governance, Risk & Compliance or related disciplines.
• Strong knowledge of ISO 27001, PCI, SOX and privacy regulations.
• Experience identifying, assessing and managing technology and information security risks.
• Ability to influence stakeholders and build credibility.
• Excellent communication with technical and non-technical audiences.
• Proactive, autonomous with problem-solving mindset.

Responsibilities

• Develop, enhance and embed governance, risk and compliance frameworks.
• Assess technology and information security risks and support mitigation activities.
• Support internal and external audits, compliance reviews and assurance programmes.
• Evaluate new systems, tools and business initiatives from a risk and compliance perspective.
• Maintain and improve policies, standards, controls and governance processes.
• Partner with stakeholders across multiple locations and functions to promote best practice.
• Support continuous improvement activities, reporting, metrics and compliance monitoring.
• Contribute to the ongoing development of a mature and scalable risk management culture.

Skills

IT Governance

Risk & Compliance

Information Security

IT Audit

ISO 27001

PCI DSS

SOX

Privacy Regulations

Stakeholder Management

Policy Development

Education

Relevant professional certifications or related degree

Job description

A growing international organisation at a pivotal stage in its evolution as it matures its technology landscape, is seeking an experienced GRC focused Information Security professional, to play a key role in ensuring effective controls across their global environment are maintained.

Working closely with senior leadership and reporting into an established international GRC function, you will play a key role in strengthening and embedding compliance frameworks, identifying and mitigating technology risks, and ensuring governance activities remain practical, effective and aligned to business objectives.

The business employs a hybrid working policy where you will be expected to be onsite 2 days a week.

Unfortunately our client doesn't sponsor visas so you will need an indefinite right to work in the UK

The Role

Acting as a trusted advisor to stakeholders across technology, business operations and corporate functions, helping to balance risk management with business agility, you'll assess new systems, tools and business requirements, provide guidance on governance and control frameworks and support audit and assurance activities across a diverse international environment. You will:

• Develop, enhance and embed governance, risk and compliance frameworks.
• Assess technology, operational and information security risks and support mitigation activities.
• Support internal and external audits, compliance reviews and assurance programmes.
• Evaluate new systems, tools and business initiatives from a risk and compliance perspective.
• Maintain and improve policies, standards, controls and governance processes.
• Partner with stakeholders across multiple locations and functions to promote best practice.
• Support continuous improvement activities, reporting, metrics and compliance monitoring.
• Contribute to the ongoing development of a mature and scalable risk management culture.

The Person

As a collaborative and commercially aware Information Security professional who can translate compliance requirements into practical business outcomes, you will bring:

• Significant experience within IT Governance, Risk & Compliance, IT Audit, Information Security Compliance or a related discipline.
• Strong knowledge of recognised frameworks such as ISO 27001, PCI, SOX and privacy regulations.
• Experience identifying, assessing and managing technology and information security risks.
• The ability to influence stakeholders at all levels and build credibility quickly.
• Strong communication skills with both technical and non-technical audiences.
• A proactive, solutions-focused approach and the confidence to work with a high degree of autonomy.

Relevant professional certifications and/or a related degree would be advantageous.