Senior GRC Analyst: Cloud, ISO/NIST, Audits

311 Garrison Technology Ltd; Greater London; Hybrid; GBP 82,000 - 106,000; Full time

Benefits offered by this job

Competitive annual leave

Pension match

Medical and dental benefits

Income protection

Hybrid work environment

Job summary

Everfox in London/Malvern is seeking a Senior Governance, Risk, and Compliance Analyst to drive security governance, risk, and regulatory compliance across on-premises and cloud environments. You’ll map requirements to controls, support audits, and enhance security culture in a hybrid, UK-based role.

The role emphasizes translating governance into practical controls, automating evidence collection, and coordinating with cross-functional teams to maintain ongoing compliance.

Qualifications

• Bachelor’s degree preferred or equivalent combination of education, training, and experience.
• 7+ years in Information Security disciplines with at least 5 years in on-prem and cloud product vendor environments (preferably Azure).
• Strong communication skills across levels in the organization.
• Familiarity with security controls and frameworks such as DCC CSM, Cyber Essentials, ISO 27001, JOSCAR, NIST 800-171/CMMC, ITGC; ISO 42001 is a plus.
• Industry certifications such as CISSP, CISM, GIAC are a plus.

Responsibilities

• Governance and Compliance: work with external auditors for certifications and mapping controls to requirements.
• Maintain and update IS policies, standards, and procedures; support compliance monitoring and evidence gathering.
• Contribute to cybersecurity risk management activities and remediation planning.
• Support privacy program and GDPR awareness; coordinate BC/DR processes.

Skills

Information security

Risk management

Regulatory compliance

Communication skills

Cloud security

Education

Bachelor’s degree or equivalent

Tools

Azure

ITGC

NIST/CMMC

Job description

Everfox in London/Malvern is seeking a Senior Governance, Risk, and Compliance Analyst to drive security governance, risk, and regulatory compliance across on-premises and cloud environments. You’ll map requirements to controls, support audits, and enhance security culture in a hybrid, UK-based role.

The role emphasizes translating governance into practical controls, automating evidence collection, and coordinating with cross-functional teams to maintain ongoing compliance.