Senior Cyber Governance, Risk & Compliance (GRC) Analyst

dmg:media; City Of London; On-site; GBP 55,000 - 75,000; Full time

Job summary

A leading media company in London seeks an experienced Senior Cyber Governance, Risk & Compliance (GRC) Analyst to manage compliance risks across its operations. You'll lead risk assessments, ensure adherence to critical standards, and collaborate with teams to enhance information security. Ideal candidates will have over 3 years of experience and strong communication skills. Competitive benefits package included.

Benefits

25 days' holiday, increasing with tenure

Pension plan and life cover

Employee discounts and assistance

Onsite gym and subsidised canteen

Qualifications

• 3+ years' experience in information security or GRC.
• Strong understanding of ISO 27001, NIST, GDPR.
• Excellent problem-solving skills.
• Ability to manage multiple projects.

Responsibilities

• Conduct and lead risk assessments.
• Support the development of Information Security frameworks.
• Monitor compliance metrics and report on effectiveness.

Skills

Risk assessment

Compliance review

Information security

Strong communication skills

Analytical skills

Project management

Education

Relevant degree or equivalent experience

Tools

GRC tools

Job description

Location: DMGT HQ - High Street Kensington, London | Position: Permanent

About the Role

We're looking for an experienced and motivated Senior Cyber Governance, Risk & Compliance (GRC) Analyst to join our Information Security team. This is a hands‑on role for someone who thrives on responsibility, builds strong relationships, and takes pride in delivering high‑quality, practical outcomes. You'll play a key role in managing information security and compliance risks across dmg media and its third parties, supporting a culture of continuous improvement and accountability. While not essential, experience or interest in AI technologies and how they intersect with security, privacy, and compliance would be a plus.

Main Responsibilities

• Conduct and lead risk assessments, audits, and compliance reviews across dmg media's systems, data, and third‑party suppliers.
• Identify, evaluate, and document information security and data protection risks, developing clear and actionable mitigation plans.
• Support the development, implementation, and monitoring of the Information Security and GRC frameworks, ensuring alignment with organisational goals.
• Partner with the Procurement, Legal/Privacy, and Technology teams to ensure risk, compliance, and data protection requirements are embedded in vendor relationships.
• Maintain and enhance records within dmg media's risk, compliance, and service management systems.
• Provide clear and practical guidance to business teams on information security, data privacy, and compliance best practices.
• Monitor and report on compliance metrics and control effectiveness, escalating significant risks or issues appropriately.
• Stay informed of relevant industry standards, regulations, and emerging technologies, including developments in AI, data protection, and media security.
• Support internal and external audits, including ISO 27001, PCI‑DSS, GDPR, and other frameworks.

Person Specification

• 3+ years' experience in information security, GRC, or risk management, ideally within a complex or fast‑paced organisation.
• Strong understanding of key frameworks and standards such as ISO 27001, NIST, GDPR, and CIS Controls.
• Demonstrated experience conducting risk assessments, compliance reviews, or third‑party due diligence.
• Excellent communication and interpersonal skills, able to build trusted relationships across business and technical teams.
• Strong analytical and problem‑solving skills, with the ability to interpret complex information and make sound recommendations.
• Proven ability to manage multiple projects and priorities with attention to detail and accountability.
• High level of integrity, professionalism, and discretion when handling sensitive information.
• Positive attitude, collaborative approach, and strong work ethic are essential qualities for success in this team.

Desirable Skills

• Exposure to AI systems or data analytics and an understanding of their governance or compliance implications.
• Experience within the media, technology, or digital services sectors.
• Professional certifications such as CISM, CISSP, CRISC, or ISO 27001 Lead Auditor.
• Experience using GRC tools and risk management platforms.
• Awareness of AI governance frameworks or upcoming regulatory changes (e.g. EU AI Act).

Package Description

Our benefits package increases the longer you've been with us. Here's what to expect:

• 25 days' holiday (increasing by 1 per year up to a total of 30)
• Pension plan and life cover
• Discounts on online shopping, dining cards and vouchers, and access to our Employee Assistance Programme
• Onsite gym, subsidised canteen and onsite nurse and GP clinics

Plus much more…

About Us

dmg media maintains an unwavering commitment to uncovering the stories that matter most. Its brands Daily Mail, The Mail on Sunday, Metro, The i Paper, MailOnline, and Mail+ reach more than 9 million people daily in the UK. Globally, dmg media's brands reach 160 million unique browsers every month across its domains and apps.*

Its global newsroom of journalists, formidable story‑getting power, and breadth of content formats, delivers highly engaging, trusted content to loyal and new audiences, 24 hours a day, seven days a week. The Mail brand reaches three in five Brits every month and is officially the best‑read, most recognised, most engaged newsbrand in the country. It is the largest news publisher on TikTok with over 28 million total followers and nearly 45 billion views** in the past year.

www.dmgmedia.co.uk

*GA Sept 2024 **March 2024 - Feb 2025 inclusive

Our Commitment

We are committed to increasing diversity and maintaining an inclusive workplace culture. We welcome applications from all qualified candidates regardless of their ethnicity, race, gender, religious beliefs, sexual orientation, age, marital status, or disability.

We are Disability Confident Committed. Please let us know if you require any recruitment documentation in other formats or if you require reasonable adjustments to be made during the recruitment process. Please be assured that any such information will be held separately to your recruitment application and will not be considered as part of the selection process.