Senior GRC Analyst — NIS2 & ISMS Risk Champion

EG Group; Horwich; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Hybrid working

Discretionary bonus

Generous annual leave

Free secure on-site parking

Wellbeing facilities

Annual leave buy back

Job summary

Cumberland Farms is seeking an experienced Senior GRC Analyst to join our Information Security team. You will support governance, risk and compliance, focusing on NIS2 audit readiness, risk assessments, ISMS, and policy governance.

This hands-on role requires delivering audit-ready outcomes and collaborating with multiple stakeholders across the business. You will work independently, manage competing priorities, and drive structured information security activities, with opportunities for growth

Qualifications

• Significant practical experience in Information Security Governance, Risk and Compliance at Senior Analyst, Consultant, or equivalent level.
• Experience supporting regulatory, certification, or external security audit readiness, including evidence coordination and remediation management.
• Hands‑on experience with ISO 27001‑aligned ISMS and policy/control governance.
• Experience conducting project and technology security risk assessments and assessing control design/effectiveness.

Responsibilities

• Coordinate NIS2 audit readiness by coordinating evidence and remediation activity.
• Conduct security risk assessments across projects, systems and technology changes.
• Maintain and improve ISMS aligned to ISO 27001.
• Review and update information security policies and control frameworks.
• Assess design and operation of security controls and track improvements.
• Maintain the cyber risk register with up-to-date records.
• Coordinate audit findings, remediation activity and third‑party assessments.
• Produce GRC reporting for senior stakeholders.

Skills

GRC governance

Regulatory compliance

NIS2

ISO 27001

Risk assessments

Stakeholder management

Auditing

Policy governance

Education

CISM

CRISC

CISSP

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Tools

GRC platforms

Job description

Cumberland Farms is seeking an experienced Senior GRC Analyst to join our Information Security team. You will support governance, risk and compliance, focusing on NIS2 audit readiness, risk assessments, ISMS, and policy governance.

This hands-on role requires delivering audit-ready outcomes and collaborating with multiple stakeholders across the business. You will work independently, manage competing priorities, and drive structured information security activities, with opportunities for growth