Senior GRC Analyst: ITDR, ISO22301 & Cyber Risk

Arup; Birmingham; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Private medical insurance

Life assurance

Income protection

Profit share

Flexible benefits

Job summary

Arup’s Digital Technology’s Cyber GRC team leads governance, risk, and compliance for cybersecurity across the organisation. The role focuses on developing IT disaster recovery plans, conducting risk assessments, and driving security-awareness initiatives globally.

You will collaborate with regional teams to embed security-by-design and ensure ISO 22301 compliance, strengthening BCM across all projects and services.

Qualifications

• Demonstrate strong skills in IT DR and ISO22301 compliance within a global digital technology environment.
• Experience in threat and risk assessment and security awareness programs is essential.
• Ability to collaborate across regional teams to embed security-by-design principles.

Responsibilities

• Develop, maintain, and test the organisation’s IT Disaster Recovery (ITDR) plans.
• Conduct regular risk assessments and impact analyses to identify critical systems, dependencies, and recovery priorities.
• Manage global cybersecurity awareness campaigns and training initiatives to strengthen security culture.
• Collaborate with regional digital teams to embed security-by-design principles into projects and products.
• Drive implementation and ongoing compliance with ISO 22301 standards, ensuring the organisation meets global BCM requirements.

Skills

IT Disaster Recovery

ISO22301 Compliance

Risk Assessment

Security Awareness

Stakeholder Engagement

Job description

Arup’s Digital Technology’s Cyber GRC team leads governance, risk, and compliance for cybersecurity across the organisation. The role focuses on developing IT disaster recovery plans, conducting risk assessments, and driving security-awareness initiatives globally.

You will collaborate with regional teams to embed security-by-design and ensure ISO 22301 compliance, strengthening BCM across all projects and services.