Remote Cyber Security GRC Analyst - Impact & Compliance

TEC Partners Limited; Enfield; On-site; GBP 50,000 - 60,000; Full time

Benefits offered by this job

Fully remote

Job summary

TEC Partners Limited is seeking a GRC Analyst to strengthen governance, risk and compliance for client security programs. This fully remote, UK-based role offers exposure to a diverse technology landscape and opportunities to influence security maturity across projects.

You will work with IT and business stakeholders to identify risk, support PCI DSS and GDPR compliance, and help maintain ISO 27001/NIST aligned controls.

Qualifications

• Proven experience in a Cyber Security GRC or Information Security Analyst role.
• Strong understanding of recognised security frameworks (ISO 27001, NIST, etc.).
• Experience supporting PCI DSS and GDPR compliance.
• Exposure to third-party risk management processes.
• Strong analytical skills with the ability to engage effectively with technical and non-technical stakeholders.
• Relevant certifications such as CISM, CISSP or CISA (desirable but not essential).

Responsibilities

• Information Security Frameworks – Align with ISO 27001, ISO 22301 and NIST.
• Risk Management – Conduct risk assessments and improve risk framework.
• TPRM – Oversee supplier and supply chain security assurance.
• Security Awareness – Promote a proactive security culture.
• Policy & Governance – Develop and maintain security policies and standards.
• Control Assurance – Assess controls and recommend improvements.
• Compliance Activities – Support PCI DSS and GDPR adherence.
• BC/DR – Assist with business continuity and disaster recovery planning.

Skills

GRC experience

Security Frameworks

PCI DSS

GDPR

TPRM knowledge

Job description

TEC Partners Limited is seeking a GRC Analyst to strengthen governance, risk and compliance for client security programs. This fully remote, UK-based role offers exposure to a diverse technology landscape and opportunities to influence security maturity across projects.

You will work with IT and business stakeholders to identify risk, support PCI DSS and GDPR compliance, and help maintain ISO 27001/NIST aligned controls.