IT Governance, Risk & Compliance Analyst

Location: Livingston, United Kingdom

About us

At Plexus, our vision is to help create the products that build a better world. By embracing an innovative culture of excellence, we pride ourselves on designing, manufacturing and servicing some of the world’s most transformative products. From life-saving medical technology and mission-critical defense solutions to sophisticated industrial automation, we’re proud to partner with our customers to bring their complex ideas to market.

Visit Plexus.com to learn more about our unwavering commitment to our vision.

Living Our Values

With a vision rooted in the wellbeing and inclusive engagement of our team members, our customers, their end users and our communities, people are the heart of what we do and who we are. Our values unite and guide us in everything that we do.

Our values include: Growing our People, Building Belonging, Innovating Responsibly, Delivering Excellence and Creating Customer Success.

As part of our team, you’ll do impactful work within an inclusive environment where everyone works together to achieve extraordinary outcomes. You’ll be empowered to reach your full potential through managing your own personalised development plan and access to our learning and development programs.

About the Role

Are you early in your IT or cybersecurity career and looking to step into the fast-growing field of Governance, Risk, and Compliance (GRC)?

You don’t need prior Governance, Risk and Compliance (GRC) experience to thrive in this role, just a solid grasp of fundamental IT concepts, a logical mindset and a desire to learn. We are looking for an ambitious, curious, and analytical individual to join our team. In this role, you will act as a key liaison between technical and business teams, helping build, maintain, and monitor our IT policies, risk management frameworks, and security compliance standards.

Whether your background is in IT Support 1st/2nd line, you hold a relevant degree, or an entry-level cyber role, this is an exceptional opportunity to gain hands-on broad exposure to enterprise IT architecture, data governance, and manufacturing tech environments.

What You’ll Be Doing

Audit & Evidence Coordination: Serve as a primary point of contact for gathering, organizing, and evaluating audit evidence against key security frameworks (ISO 27001, Cyber Essentials, NIST CSF) and regulations (GDPR, SOX).

Risk & Control Management: Maintain our Risk Register, execute routine control testing, track non-compliance tasks, and assist with Third-Party Risk Management (TPRM) assessments.

Policy & Framework Support: Help draft, update, and review internal IT policies to ensure alignment with industry standards and UK regulations.

Research & Advisory: Stay up to date on evolving regulatory changes and market standards (e.g., UK Government standards), reporting back on how changes affect the business.

Cross-Functional Collaboration: Partner with technical teams and business stakeholders across the organisation to drive security best practices and keep our GRC platform up to date.

What We’re Looking For

Essential Experience & Skills

• IT Background: Foundation in IT technical support, helpdesk, or IT operations (Tier 1/2 experience or a relevant university/college degree).
• Enterprise Tech Awareness: Foundational knowledge of fundamental IT environments and operational concepts (such as identity and access management, system backups and basic network logic.)
• Framework Knowledge: Basic understanding of security standards such as ISO 27001 or Cyber Essentials, and why they matter to a modern business.
• Analytical Problem Solver: Ability to dive into details, evaluate control effectiveness, and propose structured solutions.
• Strong Communication & Resilience: Excellent written and verbal communication skills, with the confidence to have constructive discussions around compliance and risk.
• Curiosity & Drive: A proactive mindset and a natural desire to research, learn, and master new security frameworks and standards.

Desirable (Nice-to-Haves)

• Industry certifications such as CompTIA Security+, CISA, or similar foundational security credentials.
• Experience working in regulated sectors (EMS/Manufacturing, Defence, Cybersecurity, or Financial Services).
• Proficiency in leveraging productivity and tracking tools to monitor action items, maintain project schedules and generate clear status reports for stakeholders.

Your Rewards and Wellbeing

• We believe in rewarding your contribution with a comprehensive package designed to support your life both inside and outside of work.
• Growth: Bespoke development plans and volunteer time off
• Health: Private medical insurance, Employee Assistance Program and vision care
• Wealth: Enhanced pension contributions, life assurance, and group income protection
• Lifestyle: Electric Vehicle and Cycle to Work schemes, plus 33 days of annual leave

Application Process

At Plexus, we don't look for culture fit, we look for culture add. We value the unique perspectives you bring and review every candidate holistically, balancing professional experience, education and individual journey.

Accessibility and Accommodations

As a Disability Confident employer, we recruit purely on the basis of skills and merit, ensuring an equitable process for everyone. We are committed to providing reasonable accommodations for individuals with disabilities or special requirements. If you require support during the application process, please contact us at [email protected] with your contact information and a description of your needs.

Note: This inbox is dedicated to accommodation requests; please note that application status updates cannot be provided via this address.