At a Glance
- Tasks: Conduct cyber security risk assessments and manage governance processes across teams.
- Company: Join a forward-thinking organisation investing in cyber security improvements.
- Benefits: Competitive daily rate, hybrid working, and immediate start available.
- Other info: Opportunity for growth in a complex operational setting with a focus on security maturity.
- Why this job: Make a real impact on security governance and risk management in a dynamic environment.
- Qualifications: Experience in GRC or cyber security risk management and strong communication skills.
The predicted salary is between 35000 - 45000 £ per year.
Overview
An organisation undertaking a significant cyber security improvement programme is seeking an experienced GRC / Cyber Security Risk Analyst to help establish stronger security governance, risk management and compliance practices.
This is an opportunity to join a business that is investing heavily in the maturity of its cyber security capability.
The successful contractor will play a key role in building and improving governance processes, supporting risk-based decision making and helping drive meaningful security improvements across a diverse technology estate.
The role requires a practical individual who can balance governance and compliance requirements with the realities of operational delivery.
The Role
You will work across technology, security and business teams to identify, assess and manage cyber security risks while helping establish consistent governance processes and controls.
Responsibilities
- Conducting cyber security and technology risk assessments
- Maintaining and developing security risk registers
- Managing asset registers and supporting asset governance activities
- Facilitating security governance forums and risk review meetings
- Supporting the creation and enhancement of security policies, standards and procedures
- Working with stakeholders to assess risks and agree remediation priorities
- Monitoring and tracking risk treatment plans
- Supporting ISO27001-aligned governance, risk and compliance activities
- Contributing to wider security maturity and control improvement initiatives
What We're Looking For
- Experience working within GRC, cyber security risk or information security functions
- Strong understanding of cyber security risk management principles
- Experience maintaining risk registers and conducting risk assessments
- Knowledge of ISO27001 and ideally ISO27005
- Experience supporting governance forums, compliance activities and policy development
- Ability to engage confidently with technical and non-technical stakeholders
- Strong documentation and communication skills
- Pragmatic, delivery-focused approach
Desirable Experience
- Experience within large, operationally complex environments
- Exposure to NIST, Cyber Essentials Plus or similar security frameworks
- Knowledge of enterprise security controls and security operations functions
- Experience supporting wider cyber transformation or security maturity programmes
- Contract Details
- Outside IR35
- Initial 6-month contract
- Hybrid working
- North West England
- One-stage interview process
- Immediate start available
- #J-18808-Ljbffr
GRC & Cyber Risk Analyst - Hybrid Governance in Nottingham employer: Cyber Security training courses
As an AI Engineer at our Central London office, you will be part of a dynamic team dedicated to pioneering cutting-edge AI solutions that drive business growth and enhance engineering capabilities. We pride ourselves on fostering a collaborative work culture that encourages innovation and professional development, offering competitive salaries, performance bonuses, and the flexibility of a hybrid working model to ensure a healthy work-life balance.
Contact Details:
Cyber Security training courses Recruitment Team
