Senior GRC Analyst - AI-Driven Risk & Compliance

Recruitment; Greater London; On-site; GBP 75,000 - 110,000; Full time

Job summary

Recruitment is seeking a Senior GRC Analyst to evolve governance, risk and compliance from periodic assessment to continuous assurance influencing business and technology decisions.

You will assess risk across technology estates, translate findings into actionable risk positions for leadership, and work across CIS Controls, ISO 27001 and SOC 2 with an emphasis on automation and AI-enabled improvements.

Qualifications

• Experience across information security governance, risk, compliance and audit.
• Practical implementation experience with CIS Controls, ISO 27001 or equivalent.
• Ability to engage credibly with IT teams across security domains.
• Active interest in AI and automation in GRC.
• Risk-based mindset with evidence-driven reporting.

Responsibilities

• Develop an accurate understanding of the risk picture and report it to technical and executive audiences.
• Plan, implement and maintain a security program aligned to CIS Controls v8 and related requirements.
• Lead internal and client GRC engagements from gap assessment to audit readiness and advisory.
• Maintain a current view of control effectiveness and risk trends with tangible data.
• Plan and conduct internal and external compliance audits and drive remediation.
• Identify manual, repetitive assurance activities and drive automation improvements.
• Contribute to core GRC services like third‑party risk, policy framework and security awareness.

Skills

GRC governance

Risk assessment

ISO 27001

NIST

SOC 2

AI in GRC

Stakeholder comms

Audit readiness

Job description

Recruitment is seeking a Senior GRC Analyst to evolve governance, risk and compliance from periodic assessment to continuous assurance influencing business and technology decisions.

You will assess risk across technology estates, translate findings into actionable risk positions for leadership, and work across CIS Controls, ISO 27001 and SOC 2 with an emphasis on automation and AI-enabled improvements.