At a Glance
- Tasks: Manage acquisitions and enhance GRC posture while ensuring regulatory compliance.
- Company: Join WiseTech Global, a leader in revolutionising supply chains with innovative tech.
- Benefits: Competitive salary, career growth, and a chance to make a real impact.
- Why this job: Be part of a dynamic team transforming global trade through innovation.
- Qualifications: 5+ years in GRC, strong knowledge of compliance and risk management.
- Other info: Collaborative environment with opportunities for continuous improvement and learning.
The predicted salary is between 36000 - 60000 £ per year.
WiseTech Global is a leading force in empowering and revolutionizing the world's supply chains. Our innovative technologies play a pivotal role in safeguarding the data and ensuring the security of thousands of users globally, including the world's largest freight forwarders. We are dedicated to delivering efficiency, transparency, and confidence through our Governance, Risk, and Compliance (GRC) framework.
The Opportunity
We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Analyst with expertise in managing acquisitions, integrating them seamlessly into our company’s way of working as well as responding to our customer's security questionnaires. The ideal candidate should have 5+ years of direct work experience and a proven track record of successfully navigating the challenges associated with assimilating newly acquired entities into existing business operations. The role requires a keen understanding of regulatory compliance, risk management, and a strategic mindset to ensure smooth and efficient integration processes. The GRC Analyst will play a critical role in enhancing our overall GRC posture and maintaining regulatory compliance for WiseTech Global.
Given the close collaboration with technical security teams, the ideal candidate will bring a solid background in technical cybersecurity (e.g. experience as a Security Analyst, SecOps Analyst, Incident Response Analyst or similar), alongside recent and relevant experience in governance, risk, and compliance (GRC).
Key Responsibilities
- Acquisition Assessment: Collaborate with cross‑functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities.
- Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company’s overarching GRC strategy.
- Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams.
- Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls.
- Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders.
- Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management.
- Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process.
- Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires.
Strong foundation in core IT or Cybersecurity principles, ideally supported by hands‑on experience in areas such as networking, system administration, or security operations.
Qualifications and Desired Experience
- 5+ years of hands‑on experience in GRC, preferably with a focus on acquisition integration.
- Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST.
- Experience with SOC1/2, GDPR, and privacy frameworks.
- Proficiency in information security tools, techniques, and controls.
- Experience with metrics and KPIs to measure and track information security risk.
- Ability to develop policies, standards, and guidelines.
- ISO27001:2022 Lead Implementer and lead auditor certifications are a must.
- CISA, CISM, CISSP, or CRISC certifications are desirable.
- Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable.
Candidate Characteristics
- Exceptional communication and interpersonal skills.
- Analytical mindset with the ability to identify, assess, and mitigate risks.
- Good project management skills with ISMS and control implementation experience.
- Knowledge of GRC software tools and technology.
- Attention to detail and commitment to high‑quality deliverables that meet business and compliance objectives.
Why Join WiseTech Global
At WiseTech Global, we don’t just offer a job; we provide an opportunity to excel. We believe in hiring the best talent who can drive themselves and our business to greater heights. Join us in our mission to transform global trade, one innovation at a time. Join WiseTech Global and be a part of a dynamic and innovative team dedicated to transforming global trade.
GRC Analyst in London employer: CargoWise
Contact Detail:
CargoWise Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land GRC Analyst in London
✨Tip Number 1
Network like a pro! Reach out to current or former employees at WiseTech Global on LinkedIn. A friendly chat can give you insider info and maybe even a referral, which can really boost your chances.
✨Tip Number 2
Prepare for the interview by diving deep into GRC topics relevant to WiseTech. Brush up on regulatory compliance frameworks like ISO 27001 and NIST, and be ready to discuss how you've tackled similar challenges in the past.
✨Tip Number 3
Showcase your soft skills! Communication and stakeholder management are key in this role. Think of examples where you've successfully communicated complex ideas or managed relationships with different teams.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you're genuinely interested in joining the WiseTech team.
We think you need these skills to ace GRC Analyst in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the GRC Analyst role. Highlight your experience with acquisitions, risk management, and compliance frameworks. We want to see how your background aligns with our needs!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about GRC and how your skills can help us at WiseTech Global. Keep it concise but impactful!
Showcase Relevant Certifications: Don’t forget to mention your ISO27001:2022 Lead Implementer or auditor certifications, along with any other relevant qualifications like CISA or CISSP. These are key for us in assessing your fit for the role.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it’s super easy!
How to prepare for a job interview at CargoWise
✨Know Your GRC Fundamentals
Make sure you brush up on your knowledge of governance, risk, and compliance frameworks like ISO 27001 and NIST. Be ready to discuss how these frameworks apply to acquisition integration and regulatory compliance, as this will show your expertise in the field.
✨Showcase Your Technical Background
Since the role requires a solid foundation in cybersecurity, be prepared to share specific examples from your experience as a Security Analyst or similar roles. Highlight any hands-on experience with information security tools and techniques that align with the job requirements.
✨Prepare for Scenario-Based Questions
Expect questions that assess your problem-solving skills in real-world scenarios, especially regarding risk management and integration planning. Think of past experiences where you successfully navigated challenges and be ready to explain your thought process.
✨Communicate Effectively
Strong communication skills are crucial for this role. Practice articulating your ideas clearly and concisely, especially when discussing complex topics like policy harmonization and stakeholder management. This will demonstrate your ability to foster relationships and convey important information effectively.