At a Glance
- Tasks: Lead governance, risk, and compliance initiatives while enhancing security controls and achieving certifications.
- Company: Join City Electrical Factors, a leading electrical wholesaler embracing digital transformation.
- Benefits: Flexible remote work, annual bonus, pension scheme, and access to wellness resources.
- Other info: Dynamic team culture focused on growth and continuous learning.
- Why this job: Shape the future of security in a collaborative environment with innovative technology.
- Qualifications: Experience in information security and ISO27001 certification is essential.
The predicted salary is between 50000 - 65000 £ per year.
Join one of the UK’s largest electrical wholesalers as we reimagine our technology for the digital age. We’re modernising our legacy systems and building new platforms powered by AWS and AI — and we need creative minds to help us shape the future!
About the role
You’ll be joining a close-knit, highly capable security team who genuinely enjoy working together and take pride in what they deliver. It’s a collaborative environment where ideas are shared openly, support is always there when you need it, and everyone is trusted to get on with their work without unnecessary layers or noise. There’s a strong sense of accountability, but also a lot of flexibility and understanding — people here back each other and celebrate progress together.
From a technical perspective, you’ll help evolve our governance framework, strengthen existing controls and play a key role in achieving and maintaining certifications such as ISO27001. We’re looking for someone who has been through that journey before and can bring a pragmatic, delivery-focused approach. You’ll need to be comfortable operating in a business that’s evolving quickly, able to balance structure with flexibility, and confident working with stakeholders at all levels. Just as importantly, you’ll be someone who listens, builds trust easily and brings a calm, thoughtful approach to problem-solving.
Responsibilities
- Working closely with the Governance and Compliance Manager (located in South Yorkshire, UK)
- Working closely with the Head of Information Security (located in North Yorkshire, UK)
- Leading the implementation and the changes required to help CEF to gain ISO27001 and additional certifications (such as ISO42001) as deemed necessary by the business
- Support CEF maintain security certifications (Cyber Essentials, PCI) and support activities to enhance security controls
- Auditing and reviewing security controls, policies and procedures to ensure alignment with current ways of working and best practice
- Undertaking security control gap analysis and proposing strategies to remediate or reduce any observed risks
- Supporting other Governance, Risk and Compliance team members in completing 3rd party supplier activities such as security due diligence reviews and client information security questionnaires
- Working with the Governance and Compliance Manager to foster a culture of continuous security training and upskilling for all CEF team members
- Supporting security governance measures and policies for AWS cloud security
- Working with the Governance and Compliance manager to identify, assess and prioritise potential information and data governance risks and issues across the business (including products, solutions, systems, data, people and processes), and through effective partnering relationships with business leaders, ensure that effective actions and controls are in place to mitigate those risks
Previous experience in an operational information security role, engaging and communicating successfully with senior stakeholders across different business areas to address and ensure information security compliance.
Previous experience gaining or maintaining ISO27001 certification
Proven experience of defining the information security policies, controls and processes to manage an organisations’ risk position
Proven experience of utilising Information Security principles and best practices such as ISO 27001, NIST, NCSC, PCI DSS requirements and other regulatory obligations.
Experience in risk and vulnerability management
What We Offer
- Work from anywhere in the UK – we aim to come together multiple times a year in our office in Durham so you must be willing to travel when required.
- Annual discretionary bonus
- Company pension scheme.
- Access to Champion Health – the “Netflix of wellbeing”, covering physical, mental and financial wellbeing.
- Access to MySavings Platform, offering discounts and vouchers across groceries, dining out, gym memberships, days out, experiences and travel.
- Access to Light Up Learning, our platform for leadership, technical and personal development.
- Free use of our onsite gym at Janet Nash House, Durham.
About Us
Founded in 1951 in Kenilworth, UK, City Electrical Factors (CEF) has grown into a world-leading electrical wholesale and manufacturing business with over 400 branches across the UK and a strong presence in the USA, Canada, Spain and Australia. Our IT and digital teams are driving the next chapter of our journey... Re-engineering legacy systems, adopting modern cloud technologies and exploring AI to deliver faster, smarter and more connected customer experiences. We’re a predominantly remote workforce with teams distributed across the UK, USA, Canada, Spain and Australia. Our culture is collaborative, forward-thinking and people-focused — where your ideas and contributions genuinely matter.
Our Mission
City is a world leading electrical wholesale and manufacturing business providing electrical products to the industry. We in IT are delivering value to our business and our customers with the implementation of packaged software and bespoke engineering for the digital age using AWS serverless technology. We need talented and creative people across all areas to join us in rearchitecting our forward thinking business over the next few years and beyond as we evolve.
Senior Governance, Risk and Compliance Analyst in North East employer: City Electrical Factors
At City Electrical Factors, we pride ourselves on being an excellent employer that fosters a collaborative and supportive work culture. Our hybrid position allows for flexibility while working with a close-knit security team dedicated to innovation and continuous improvement. With access to comprehensive wellbeing resources, professional development opportunities, and a commitment to celebrating team achievements, we empower our employees to thrive in their careers as we navigate the digital transformation together.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Governance, Risk and Compliance Analyst in North East
✨Join Compliance Communities
Get involved in compliance and risk communities — both online and offline. Look for forums, LinkedIn groups, or even local meetups where compliance pros hang out. You never know who might drop a job opportunity your way!
✨Attend Industry Conferences
Keep an eye out for compliance and risk management conferences and workshops in your area. These events are a goldmine for networking, and they often have job boards or recruiters on-site looking for new talent. Plus, it’s a chance to learn what's trending in the field.
✨Leverage Your University Career Services
If you’ve recently graduated or are still studying, head over to your university's career services. Many companies, including those in compliance, actively recruit fresh talent through these services, so make sure you tap into that resource.
✨Showcase Your Knowledge Online
Start writing articles or blog posts about compliance topics that interest you. Share them on platforms like LinkedIn to demonstrate your knowledge and passion. This not only builds your presence in the field but can also catch the attention of companies like City Electrical Factors looking for candidates who are engaged and informed.
We think you need these skills to ace Senior Governance, Risk and Compliance Analyst in North East
Some tips for your application 🫡
Show Your Understanding of Compliance:In the compliance-risk field, it's super important to showcase your understanding of regulations and risk management frameworks. Highlight any relevant coursework, certifications (like ICA or AML), or even projects that demonstrate your knowledge and commitment to this area. We want to see how you can navigate this complex landscape!
Quantify Your Achievements:When detailing your experience, try to quantify your achievements. For example, if you've previously worked on a project that improved compliance metrics or reduced risk exposure, give us the numbers! This data-driven approach really stands out to hiring managers in compliance-risk roles.
Tailor Your CV to Reflect Relevant Skills:Make sure your CV highlights skills that are particularly relevant to compliance, like attention to detail, analytical thinking, and report writing. Ensure these are easy to spot – consider using bullet points to break down your responsibilities and achievements for maximum impact!
Craft a Motivating Cover Letter:In your cover letter, let us know why you’re excited about the compliance-risk role at City Electrical Factors. Share what motivates you about compliance, and how you believe you can contribute to our mission. This is your chance to showcase not only your skills but also your passion for this important field!
How to prepare for a job interview at City Electrical Factors
✨Master the Regulations
Brush up on key compliance regulations relevant to the industry you're applying to. Familiarising yourself with specific laws and frameworks used in your field will give you an edge during technical questions. Show that you’re not just aware of them but can also apply them—think real-life scenarios!
✨Show Your Analytical Skills
Compliance roles really focus on analytical skills, so be prepared for case studies or situational questions during the interview. We've got to demonstrate how we approach risk assessments or compliance audits, possibly drawing on examples from past experiences or university projects. Bring some thoughtful case scenarios to discuss!
✨Know Your Tools
Get comfortable with commonly used compliance software and tools. Familiarity with platforms like RSA or MetricStream can really impress during your interview, as it shows you're ready to hit the ground running. If you’ve had any experience with them, make sure to highlight that!
✨Align with Company Culture
Since it's a full-time position, show your long-term commitment and interest in the company’s mission and values. Dive into how your ethics and professional philosophy align with City Electrical Factors’s stance on compliance. A shared vision can really resonate with interviewers looking for fit as much as skill!
