Tech GRC Analyst — Risk, IAM & Controls Lead

SmartRecruiters, Inc.; Mansfield; On-site; GBP 40,000 - 60,000; Full time

Benefits offered by this job

Frasers Champion

Retail Trust

Fearless 1200

Job summary

Frasers Group is seeking a Technology GRC Analyst to support the ongoing development of its technology risk and assurance capability across the group’s global operations. You will identify, assess and monitor technology and cyber risks while ensuring IT and business controls are designed and operating effectively, collaborating with multiple stakeholders.

You will deliver risk assessments, controls testing and IAM assurance, maintain the risk register and contribute to supplier risk and

Qualifications

• 2+ years' experience within Technology Risk, IT Audit, Governance, Risk & Compliance (GRC), Internal Controls or Cyber Risk.
• Experience delivering technology risk assessments and controls testing across enterprise technology environments.
• Strong understanding of IT General Controls (ITGCs), technology governance and operational risk management.
• Experience conducting Identity and Access Management (IAM) reviews, user access certifications and privileged access assurance.
• Knowledge of third‑party risk management, supplier assurance and technology risk across complex supply chain environments.
• Experience supporting internal and external audits, including evidence management and remediation tracking.
• Strong analytical and problem‑solving skills with the ability to identify control weaknesses and recommend practical improvements.
• Excellent communication and stakeholder management skills, with the ability to engage technical and non-technical audiences.
• Experience working with Governance, Risk & Compliance (GRC) platforms such as OneTrust
• Passionate about strengthening governance, improving controls and enabling secure business growth across a complex global retail organisation.
• Professional certifications such as CRISC, CISA, CISM, CISSP or equivalent.
• Experience working within large retail, e-commerce or multinational organisations.
• Knowledge of NIST Cybersecurity Framework, ISO 27001, COBIT and ITIL.
• Experience with data analytics, continuous controls monitoring or assurance automation.
• Familiarity with PCI DSS, SOX or other regulatory and compliance frameworks.

Responsibilities

• Deliver technology and cyber risk assessments across enterprise infrastructure, cloud platforms, retail systems, digital applications and strategic technology initiatives.
• Perform controls testing across IT General Controls (ITGCs), automated application controls and key operational processes to provide assurance over the effectiveness of the Group's control environment.
• Conduct Identity and Access Management (IAM) assurance activities, including user access reviews, privileged access audits, Joiner-Mover-Leaver (JML) controls and Segregation of Duties (SoD) assessments.
• Support identity audits to ensure access to business‑critical systems remains appropriate, compliant and aligned with security policies.
• Maintain the Technology Risk Register, ensuring risks, remediation actions and control improvements are accurately tracked and reported.
• Perform supplier and third‑party technology risk assessments, supporting ongoing assurance over strategic technology partners and service providers.
• Support Supply Chain Assurance by assessing technology and operational risks across logistics, warehousing, distribution centres and supplier ecosystems.
• Partner with Internal Audit, Internal Controls and Cyber Security teams to coordinate audits, evidence gathering and remediation activities.
• Produce meaningful risk dashboards, management information, Key Risk Indicators (KRIs) and governance reporting for senior leadership and risk forums.
• Collaborate with Technology, Retail Operations, Finance, Procurement, Legal and Supply Chain teams to embed effective risk management and assurance practices across the business.
• Support the ongoing development of the Technology Risk Management Framework aligned with recognised standards including NIST Cybersecurity Framework, ISO 27001 and industry best practice.
• Drive continuous improvement of governance, risk and compliance (GRC) processes, reporting, automation and assurance activities.
• Support regulatory, internal and external audit requirements such as PCI -DSS, ensuring documentation and evidence are maintained to a high standard.

Skills

Technology Risk

IT Audit

GRC

IAM

Third-Party Risk

Internal Controls

Audits

Stakeholder Management

Data Analytics

PCI DSS

NIST Framework

ISO 27001

COBIT

ITIL

Tools

OneTrust

Job description

Frasers Group is seeking a Technology GRC Analyst to support the ongoing development of its technology risk and assurance capability across the group’s global operations. You will identify, assess and monitor technology and cyber risks while ensuring IT and business controls are designed and operating effectively, collaborating with multiple stakeholders.

You will deliver risk assessments, controls testing and IAM assurance, maintain the risk register and contribute to supplier risk and