Senior GRC Analyst — Hybrid, NIS2 & ISO27001 Focus

Euro Garages; Horwich; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Discretionary bonus

Hybrid working

Cycle to Work

Car Scheme

Enhanced leave

Job summary

Cumberland Farms is seeking an experienced Senior GRC Analyst to join our Information Security team in Horwich. You will provide specialist support across governance, risk, and compliance, focusing on NIS2 readiness, risk assessments, ISMS, and policy governance.

Reports to Head of Information Security. This is a hands‑on, delivery‑focused role requiring independence, prioritisation, and the ability to work with diverse stakeholders across the business.

Qualifications

• Extensive experience in Information Security GRC at senior level.
• Proven track record supporting regulatory audits and remediation management.
• Hands-on with ISO 27001 ISMS and policy governance.
• Experience with NIS2, GDPR or similar frameworks.
• Strong stakeholder management and communication skills.

Responsibilities

• Support NIS2 audit readiness by coordinating evidence, reviews, and remediation tracking.
• Conduct security risk assessments across projects and systems, proposing practical controls.
• Support maintenance and improvement of the ISMS aligned to ISO 27001.
• Review and maintain security policies, standards, and control frameworks.
• Assess design and operation of controls and track improvements to completion.
• Maintain cyber risk register with accurate risks, treatments, and owners.
• Coordinate audit findings, remediation, evidence, and third‑party assessments.
• Produce GRC reporting and metrics for senior stakeholders.

Skills

GRC governance

Security risk assessments

Regulatory compliance

NIS2 readiness

ISMS

Policy governance

Audit readiness

Stakeholder management

cyber risk management

Education

CISM

CRISC

CISSP

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Tools

GRC platforms

ISO standards knowledge

Job description

Cumberland Farms is seeking an experienced Senior GRC Analyst to join our Information Security team in Horwich. You will provide specialist support across governance, risk, and compliance, focusing on NIS2 readiness, risk assessments, ISMS, and policy governance.

Reports to Head of Information Security. This is a hands‑on, delivery‑focused role requiring independence, prioritisation, and the ability to work with diverse stakeholders across the business.