Cyber GRC Analyst: Build & Own Risk Programme (Contract)

GCS Recruitment Specialists; United States; Hybrid; USD 48,000 - 64,000; Full time

Benefits offered by this job

Outside IR35

Flexible working

Hybrid working

High autonomy

Job summary

GCS Recruitment Specialists is helping a UK manufacturer recruit a GRC Analyst (Contract) to lead cyber risk governance initiatives on a significant maturity programme. You will own risk registers, develop repeatable processes and deliver measurable risk reporting to senior leadership.

This hands-on role requires strong stakeholder management, knowledge of CAF/NIST/ISO controls and the ability to translate technical risk into business terms. Flexible/hybrid UK working is offered.

Qualifications

• Experience in a Cyber Security GRC, Risk Analyst, Security Assurance or Governance role.
• Ability to translate complex cyber risks into business terms.
• Experience developing risk metrics and reporting for senior stakeholders.
• Strong stakeholder management and independent working style.

Responsibilities

• Own and maintain cyber and technology risk registers.
• Develop and mature risk management processes and reporting.
• Facilitate risk identification, assessment, treatment and monitoring.
• Support CAF-aligned control environment and remediation tracking.
• Produce risk reports, dashboards and metrics for leadership.
• Embed risk-based decision-making across security, tech and business teams.
• Assist with audits, control assessments and assurance activities.
• Drive improvements in GRC maturity across the organisation.

Skills

GRC

Cyber security

Risk assessment

Stakeholder management

Reporting dashboards

Independent工作

Education

ISO 27001

CRISC

CISM

CISA

CISSP

Tools

CAF framework

NIST CSF

ISO 27001 controls

Job description

GCS Recruitment Specialists is helping a UK manufacturer recruit a GRC Analyst (Contract) to lead cyber risk governance initiatives on a significant maturity programme. You will own risk registers, develop repeatable processes and deliver measurable risk reporting to senior leadership.

This hands-on role requires strong stakeholder management, knowledge of CAF/NIST/ISO controls and the ability to translate technical risk into business terms. Flexible/hybrid UK working is offered.