Principal GRC Analyst

Encore Capital Group; West Malling; Hybrid; GBP 63,000 - 75,000; Full time

Job summary

A leading financial services company in the UK is seeking a Governance, Risk & Compliance Analyst to enhance their security posture. This role involves developing security policies, delivering training, and managing compliance with frameworks like GDPR and NIST. The ideal candidate will have strong experience with GRC tools, excellent communication and problem-solving skills, and the ability to mentor junior staff. The position offers a salary up to £75,000 along with a competitive bonus scheme and great benefits, with flexible hybrid working arrangements.

Benefits

Competitive salary

Bonus scheme

Private health insurance

Discount and cash back on high-street shops

Qualifications

• Proficient in using GRC tools and software to streamline risk and compliance processes.
• Experience in managing relationships with business units and stakeholders.
• Familiarity with regulations such as GDPR and compliance frameworks like NIST and ISO.

Responsibilities

• Develop and support information security governance policies and standards.
• Prepare and deliver information security training for target audiences.
• Evaluate the effectiveness of security controls and recommend improvements.
• Maintain compliance with FTC Safeguards, PCI DSS, and ISO 27001.
• Mentor junior GRC team members and support their development.

Skills

Proficiency in GRC tools

Skilled in audit management

Strong communication skills

Excellent problem-solving skills

Time management skills

Tools

AuditBoard

Job description

The Governance, Risk & Compliance (GRC) Analyst will play a key role in strengthening our global security posture by supporting the development and maintenance of information security policies, delivering engaging security training, coordinating phishing simulations, and contributing to enterprise-wide risk management activities. This role is ideal for someone with a strong understanding of cybersecurity best practices and the ability to translate them into practical improvements across systems and business processes. You will help drive complex GRC initiatives from inception to successful delivery, ensuring alignment with relevant compliance frameworks and supporting a culture of continuous security enhancement.

What you can expect as an Governance, Risk & Compliance Analyst:

• Salary of up to £75,000
• Perm
• Hybrid or able to travel – Flexible

Not only are we offering a competitive salary and a fantastic bonus scheme, you’ll also be entitled to loads of great benefits including, discount and cash back on hundreds of high‑street shops and private health insurance, plus much more.

Key responsibilities include:

• Develop and support information security governance policies, standards, and processes in collaboration with business and technical teams, and align them with business goals X
• Prepare and deliver information security training, education, and awareness activities appropriate for target audiences
• Evaluate effectiveness of information security controls and recommending remediation or control re‑design guidance where necessary
• Fine tune and drive adoption of an information security risk assessment framework and related processes; maintain Information Security risk registers and perform annual assessments
• Maintain knowledge of FTC Safeguards, PCI DSS, ISO 27001, and NIST CSF and ensure organizational compliance
• Partner with business leaders to gain a deeper understanding of their needs and provide solutions that meet their goals and objectives while aligning with security best practices and policy
• Maintain working knowledge of data privacy laws and regulations
• Mentor junior members of the GRC Team and support their professional development

We are looking for someone with:

• Proficiency in using GRC tools and software to streamline and automate risk and compliance processes (i.e., AuditBoard)
• Skilled in audit management and experience liaising with third party auditors
• Able to work in a complex, global environment, actively and effectively managing relationships with other business units and stakeholders
• Skilled in communicating technical requirements with non‑technical stakeholders
• Excellent oral and written communication skills
• Excellent problem solving and analytical skills
• Strong time management skills, including effective responsibility prioritisation
• Strong analytical and problem‑solving skills to identify and assess security risks and develop appropriate mitigation strategies
• Familiarity with relevant industry regulations and compliance requirements such as GDPR, CCPA, SOX, etc.
• Familiarity with various cybersecurity frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS Controls, etc.

What happens next?

If this sounds like you and you’d like to join our rapidly expanding company that offers excellent career progression, then apply now!

Working for Cabot:

You’ll be working for an award winning; Investors in People Gold accredited organisation. We’re passionate about the ethical treatment of our customers and employees. Our mission is to create pathways to economic freedom. Our vision is to make credit accessible by partnering with our consumers to restore their financial health.

Diversity and inclusion are very important to us at Cabot, and we value a multitude of diverse talent within our business. We want everyone to be themselves at work and encourage a culture that includes everyone. Our policies ensure that every candidate and employee are treated fairly and with equal opportunities.

At Cabot we are highly regulated by our clients, as such, any successful candidates will have to undergo a basic credit check and criminal background check. Please note that we are unable to proceed to interview stage if a CCJ, IVA or Bankruptcy appears on a credit file, or if you do not have full right to work in the UK – we are unfortunately unable to offer sponsorship.