Remote GRC and Cloud Security Advisor

EasyInfoBlog.com LLC; United Kingdom; Remote; GBP 35,000 - 40,000; Full time

Benefits offered by this job

Medical insurance

Dental & Vision

Annual leave

Sick leave

Public holidays

Pension

Mental health support

Job summary

Rhymetec is seeking a GRC Analyst to support client engagements from a remote UK base. You will prepare agendas, reports and documentation, discuss security and compliance requirements with clients, and help implement frameworks such as SOC 2 Type 2, ISO 27001, GDPR and DORA.

You will collaborate with clients across cloud environments (AWS, Azure, GCP) and conduct internal audits, risk assessments and evidence collection to demonstrate compliance and support audit engagements.

Qualifications

• Strong understanding of cybersecurity, information security and regulatory compliance frameworks, including PCI, ISO/IEC, SOC 2, DORA and GDPR.
• Practical knowledge of cloud security and infrastructure protection.
• Familiarity with AWS, Google Cloud Platform (GCP) and Microsoft Azure environments.
• Understanding of security control integration through DevOps practices and Infrastructure as a Service (IaaS).
• At least 3 years of professional experience in technology or cybersecurity.
• Bachelor’s degree in technology, cybersecurity or a related discipline, or equivalent practical experience.
• Strong customer service skills and the ability to build and maintain professional client relationships.
• Excellent communication, analytical and problem-solving abilities.

Responsibilities

• Prepare meeting agendas, reports and relevant documentation for client engagements.
• Maintain regular communication with clients and lead meetings to discuss security and compliance requirements.
• Configure and monitor performance alerts across cloud platforms such as AWS, Azure, GCP and Datadog.
• Implement security monitoring tools, intrusion detection systems and supporting security applications across cloud environments.
• Deploy and manage mobile device management solutions, including Jamf, JumpCloud, Microsoft Endpoint Manager and Hexnode.
• Configure and maintain compliance monitoring systems to ensure clients meet required security standards.
• Conduct internal security audits, risk assessments, gap analyses and prepare detailed reports.
• Organise incident response, business continuity and disaster recovery tabletop exercises with clients.
• Help clients implement regulatory and security frameworks such as SOC 2 Type 2, ISO 27001, GDPR and DORA.
• Carry out employee access reviews and assess the security practices of SaaS vendors.
• Review and investigate bug reports and vulnerability disclosures submitted by security researchers.
• Complete security questionnaires and prepare information security policies and supporting documentation for clients.
• Collect, organise and maintain evidence required for compliance assessments.
• Coordinate audit engagements and communicate with external auditors on behalf of clients.
• Guide clients’ employees on security procedures, compliance requirements and cybersecurity best practices.

Skills

Cybersecurity

Regulatory compliance

Cloud security

Communication

Education

Bachelor's degree in technology, cybersecurity or related discipline

Job description

Rhymetec is seeking a GRC Analyst to support client engagements from a remote UK base. You will prepare agendas, reports and documentation, discuss security and compliance requirements with clients, and help implement frameworks such as SOC 2 Type 2, ISO 27001, GDPR and DORA.

You will collaborate with clients across cloud environments (AWS, Azure, GCP) and conduct internal audits, risk assessments and evidence collection to demonstrate compliance and support audit engagements.