IT Controls Analyst

£45,000 - £50,000 DOE + benefits

Warwick based, hybrid working

At National Gas, the work we do matters.

As Britain's national gas network, we help keep the lights on, businesses running, and homes warm by maintaining the critical infrastructure that transports gas across Great Britain. While providing the energy security Britain relies on today, we're also helping transform the network for a clean energy future.

Join us and help secure Britain's energy.

About the role

The IT Controls Analyst (or Controls & Oversight Analyst) plays a key role in supporting National Gas Cyber Security in meeting regulatory and assurance obligations. The role contributes to compliance with NIS Regulations, CAF requirements, and internal/ external audits by assessing controls impacts, reviewing evidence, performing control assurance testing, and supporting the delivery of high‑quality submissions to regulators, and carrying out assurance activities to confirm controls associated with the SEC-MS control framework are adequately implemented throughout National Gas.

Working collaboratively across the Cyber security function and wider business, specifically CNI/ Physical/ OT/ IT, the analyst strengthens National Gas’s security posture through insight, analysis, and effective engagement.

Key accountabilities

• Coordinate and contribute to the annual NIS reporting cycle, ensuring submissions meet regulatory expectations.
• Perform control testing and assurance reviews to assess the design and operating effectiveness of security controls, including periodic testing and targeted reviews.
• Support evidence gathering, review documentation, and contribute to the CAF assessment submission.
• Evaluate the quality and adequacy of supporting evidence for control attestations, working closely with teams across CNI/ Physical/ OT/IT
• Support National Gas’s ambition to demonstrate excellence in regulatory security through robust, clear, and well‑evidenced compliance outputs.
• Work collaboratively across the security function and the wider business to support a consistent, well‑managed approach to regulatory compliance and control assurance.
• Contribute insights and updates to internal governance groups, supporting senior stakeholders with accurate regulatory and assurance information.
• Translate complex regulatory and assurance findings into practical recommendations for risk reduction and improved control effectiveness.

About you

• Degree or equivalent experience in Governance, Risk, Compliance (GRC), Assurance, Cybersecurity, technology or related field.
• Strong understanding of NIS Regulations, NCSC CAF, and security regulatory requirements for OES entities.
• Strong understanding of controls frameworks.
• Experience performing security control testing or assurance activities within 1st/2nd/3rd line functions.
• Knowledge of security frameworks (e.g., CAF, NIST, ISO 27001, CoBIT, SOGP).
• Ability to analyse information and apply it in a business‑aligned manner.
• Excellent written communication skills, capable of producing clear, structured assurance reports.
• Ability to work effectively within a team environment and build relationships across technical and operational teams.
• Strong organisational skills with the ability to manage deliverables against regulatory deadlines.
• Experience working within a regulated environment (desirable).
• Experience using GRC tooling for evidence management, tracking, and reporting.
• OT experience/ knowledge
• Physical Security & CNI understanding/ experience would be highly regarded

What we can offer you

• £45,000 - £50,000 dependant on experience
• Market-leading double-match pension (for every £1 you add, we add £2)
• Annual performance bonus
• 26 days holiday plus 8 statutory days and option to buy 5 additional days
• 10x salary life assurance and income protection
• Flexible opt-in salary sacrifice benefits including private healthcare, car, dental, and technology schemes
• Family-friendly policies, wellbeing support, and professional development opportunities

Security clearance

This role is subject to National Security Vetting (NSV). Candidates must be eligible to obtain and maintain Security Clearance (SC) throughout their employment. For further information, visit GOV.UK (UK Security Vetting: Clearance Levels).

Inclusive recruitment

We're building a workforce that reflects the communities we serve, championing diversity, and creating an inclusive workplace where everyone is valued for their unique contribution. We support reasonable adjustments throughout the recruitment process and beyond.

National Gas is a Disability Confident employer and signatory of the Armed Forces Covenant.

#LI-PT1 #LI-Hybrid

Further information

• Advert close: 29/10/26
• Interviews: w/c 9th November
• #GRC #ITAuditor #ITControlsTester #SystemsAssurance #ITAssurance #ITAssurance #GRCAssurance #ITControlsAnalyst #GRCAnalyst #CyberAssurance #CyberAudit #CyberControlsTesting #GRCControlsTesting