Governance Risk & Compliance Analyst (UK Citizen)
The current posting asks for:
Hands-on GRC risk experience: At least 2 years of direct information security GRC experience, with practical involvement in risk assessments, documenting risk decisions and following treatment or remediation activities to closure.
Technical security understanding: Working knowledge of IT and security control processes, such as access management, vulnerability and patch management, cloud security, change management, security logging, data protection and backup/recovery, sufficient to assess control evidence and identify gaps.
Risk methodology and judgement: Ability to assess likelihood, impact, control effectiveness, inherent and residual risk, and recommend reasonable risk treatment; familiarity with ISO 27005, ISO 31000 or NIST CSF approaches is advantageous.
Read the employer’s full posting · Posted 2026-10-12
