Security Governance Analyst II

Rapid7 International Limited; Belfast City District; On-site; GBP 40,000 - 60,000; Full time

Job summary

Rapid7 International Limited in Belfast seeks a Security Governance Analyst to bridge the gap between complex security requirements and practical execution. You will join the GRC team, executing compliance initiatives and collaborating with legal, engineering, and InfoSec to maintain a transparent security posture across EMEA and APAC.

Key duties include translating auditor requirements, identifying gaps and risks, and driving security controls throughout the organization.

Qualifications

• 2+ years of information security, IT audit, or related compliance in cloud-first environments.

Responsibilities

• Execute GRC deliverables within SLAs, ensuring compliance programs run with high quality.
• Translate auditor requirements into actionable steps for technical and engineering teams.
• Identify gaps, delays, and risks early to pivot to effective solutions.
• Assist in evaluating the design and effectiveness of security controls to support audits.
• Advocate for security controls across the business to foster a culture of shared responsibility.

Skills

Information security

IT audit

Compliance

Stakeholder communication

Regulatory frameworks

Cross-functional collaboration

Risk assessment

ISO 27001

SOC 2

NIST CSF

Job description

Are you ready to move beyond "check-the-box" compliance? We are looking for a Security Governance Analyst to help us bridge the gap between complex security requirements and real-world execution. Based in our Belfast office, you will be a key player in our Governance, Risk & Compliance (GRC) team, helping Rapid7 maintain its reputation for transparency and security across the EMEA and APAC regions.

About the Team

Rapid7’s GRC team operates at the intersection of technical excellence and business enablement, partnering deeply with InfoSec, Legal, and Engineering to build resilient, compliant, and transparent security posture for our customers.

About the Role

As a Security Governance Analyst, your primary responsibility will be to serve as a key practitioner executing compliance initiatives and bridging the gap between technical teams and regulatory frameworks.

Specifically, your focus will be to:

• Execute GRC deliverables within SLAs, ensuring compliance programs run predictably and with high quality.
• Translate complex auditor requirements into actionable, practical steps for internal technical and engineering teams.
• Identify gaps, spot project delays, and flag risks early to pivot proactively toward effective solutions.
• Assist in evaluating the design and effectiveness of security controls to support the overall audit lifecycle.
• Advocate for security controls across the business to foster an organizational culture where security is a shared responsibility.

The skills and qualities you'll bring include:

• Bring 2+ years of experience in information security, IT audit, or a related compliance domain within cloud-first environments.
• Demonstrate foundational knowledge of security frameworks such as ISO 27001, SOC2, or NIST CSF.
• Break down complex compliance objectives into clear, time-bound milestones while executing quickly and assessing progress.
• Hold self and others responsible for driving outcomes, delivering commitments, and establishing clear project ownership.
• Communicate complex technical risks and rationale clearly to non-technical stakeholders to build alignment.
• Build global cross-functional partnerships across legal, engineering, and security teams to deliver sustainable business value.
• Apply strong self-awareness to adapt to group dynamics, seek feedback, and learn continuously from challenges.
• Emb…? Embody our core values to foster a culture of excellence that drives meaningful impact and collective success.

We know that the best ideas and solutions come from multi-dimensional teams. That’s because these teams reflect a variety of backgrounds and professional experiences.

If you are excited about this role and feel your experience can make an impact,

About Rapid7

At Rapid7, our vision is to create a secure digital world for our customers, our industry, and our communities. We do this by harnessing our collective expertise and passion to challenge what’s possible and drive extraordinary impact. We’re building a dynamic and collaborative workplace where new ideas are welcome. Protecting 11,500+ customers against bad actors and threats means we’re continuing to push the envelope just like we’ ve been doing for the past 20 years. If you ’re ready to solve some of the toughest challenges in cybersecurity, we’re ready to help you take command of your career. Join us. Rapid7 is creating a more secure digital future for all by helping organizations strengthen their security programs in the face of accelerating digital transformation. Our portfolio of best-in-class solutions empowers security professionals to manage risk and eliminate threats across the entire threat landscape from apps to the cloud to traditional infrastructure to the dark web. We foster open source communities and cutting-edge research–using these insights to optimize our products and arm the global security community with the latest in attacker methodology. Trusted by more than 11,000 customers worldwide, our industry-leading solutions and services help businesses stay ahead of attackers, ahead of the competition, and future-ready for what’s next.