Governance, Risk & Compliance (GRC) Analyst

Overview

Home. There's no place like it.

And there's no feeling like helping people create the joy of feeling truly at home. At Dunelm, that's what we do. We're the UK's number one choice for homewares because we make home life lovelier for our customers. And we've crafted a workplace that feels just as welcoming - where you can bring your ideas, be yourself, and feel right at home.

Work your way, together

We're a hybrid business, which means you'll have flexibility alongside time together with your team. In this role, you can expect minimum 1 day per week in our Leicester office.

We are seeking an experienced Governance, Risk & Compliance (GRC) Analyst to join our Information Security team within a FTSE 250 retail organisation. This role is responsible for developing, implementing and continually improving the organisation's cyber security governance, risk and compliance capabilities, ensuring alignment with business objectives, regulatory obligations and industry best practice.

Working collaboratively across technology, digital, retail operations, finance, legal, procurement, HR and other business functions, you will help strengthen the organisation's cyber security maturity, support regulatory compliance and embed security into everyday business processes.

The successful candidate will have a strong understanding of cyber security frameworks, governance principles and risk management, combined with excellent stakeholder management and communication skills.

Join our Cyber Security Team and be at the forefront of protecting our business. You'll contribute to safeguarding our operations and drive positive change and in a business where you can build a long-term career that always promises to challenge and excite.

What you'll be doing

Governance & Compliance:

• Develop, maintain and continually improve our Information Security Management System.
• Support and maintain compliance with:
  • PCI DSS eCommerce and Card present payment channels.
  • NIST Cyber Security Framework (CSF) 2.0
  • UK Data Protection Act 2018 and relevant EU data privacy legislation.
  • Other relevant regulatory and industry requirements such as Provision 29, Cyber Essentials and Cyber Essentials Plus.
• Support evidence collection for compliance activities.
• Monitor emerging legislation and regulatory changes, assessing business impact.
• Support the implementation of security governance across all business functions.

Risk Management:

• Administer the Cyber Security risk register toolset.
• Facilitate cyber risk assessments across projects, business initiatives and operational services.
• Support risk owners throughout the cyber security risk lifecycle.
• Enhance risk reporting for senior leadership and executive committees.

Third Party Risk Management:

• Oversee the supplier cyber security assurance process.
• Conduct security assessments of suppliers, partners and third parties.
• Help to highlight supply chain risks and recommend appropriate mitigation.
• Track supplier security due diligence.
• Monitor ongoing supplier compliance throughout the contract lifecycle.

Security Governance:

• Develop and maintain Information Security policies, standards, procedures and supporting guidance.
• Ensure documentation remains current, aligned with business objectives and regulatory requirements.
• Support governance forums and security steering committees.
• Produce reports for senior management and executive stakeholders.
• Assist in maintaining security exceptions and risk acceptance processes.

Security Awareness & Culture:

• Help develop cyber security awareness programmes.
• Contribute to phishing simulations and awareness campaigns.
• Review effectiveness of these measures through reporting and behavioural metrics.
• Promote a positive security culture across stores, support centres and digital teams.
• Support onboarding and annual security training programmes.

Metrics & Continuous Improvement:

• Develop governance and compliance KPIs and KRIs.
• Administer metrics addressing:
  • Compliance status
  • Audit findings
  • Risk posture
  • Third-party assurance
  • Policy compliance
  • Security awareness completion
  • Security maturity
• Benchmark organisational maturity against recognised frameworks.
• Drive continual improvement initiatives across governance and compliance processes.

Business Partnership:

• Act as a trusted advisor to business stakeholders.
• Work closely with relevant stakeholders across the business.
• Provide pragmatic security advice supporting business innovation while managing cyber risk.
• Support projects by embedding security governance from inception.

What we'll look for in you

You will need to be a self-starter with ability to work at pace across multiple business levels and with stakeholders across all levels of seniority.

Essential Skills & Experience:

• Experience in a Governance, Risk & Compliance, Information Security or Cyber Security role.
• Strong understanding of:
  • Cyber Security Risk
  • NIST Cyber Security Framework (CSF) 2.0
  • PCI DSS
  • UK GDPR and Data Protection Act 2018
• Experience conducting cyber risk assessments.
• Experience with third-party security assurance programmes.
• Experience writing policies, standards and governance documentation.
• Experience supporting audits and regulatory compliance activities.
• Experience producing security metrics and executive reporting.
• Excellent stakeholder management skills.
• Strong analytical and problem-solving ability.
• Excellent written and verbal communication skills.
• Ability to influence stakeholders at all organisational levels.

Desirable Experience:

• Experience within a FTSE 250 or large enterprise environment.
• Experience in retail, eCommerce or omnichannel businesses.
• Familiarity with cloud security.
• Knowledge of Secure by Design principles.
• Experience with GRC platforms (e.g. LogicGate, OneTrust, Archer or AuditBoard).
• Experience supporting security framework certification programmes (e.g. ISO27001).
• One or more of the following professional Cyber Security certifications is preferred:
  • ISO/IEC 27001 Lead Implementer or Lead Auditor
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Certified in Risk and Information Systems Control (CRISC)
  • Certified Information Privacy Professional Europe (CIPP/E)
  • PCI Professional (PCIP)
  • Internal Security Assessor (PCI - ISA)
  • NIST Cyber Security Framework Practitioner

Behaviours/Values

Our shared values of 'act like owners', 'keep listening and learning', 'long term thinking', and 'stronger together' help ensure we are always finding better ways of doing things and spending our time focusing on what's important.

• Excellent communication skills
• Collaboration across all business functions and tech teams
• Customer focussed
• Responsible and show integrity
• Self-motivated, calm persona, attention to detail
• Ability to deliver under pressure
• Ability to keep up to date on latest cyber-threats and skills using available study tools, partners, etc

D&I statement

Dunelm is committed to becoming an inclusive business that is representative of our customers and locations. We recognise the value in diversity and welcome applications from all candidates regardless of age, race, religion, disability, gender or sexual identity, socio-economic background or education. We are committed to making Dunelm a place where everyone can enjoy a successful career and have systems in place to support all our colleagues. We are seeking applications from candidates who share our values and celebrate diversity in all its forms.

Our commitment to you

Accessibility allows everyone to have an equitable chance when applying and showing off their potential, which helps us create a more inclusive and diverse team that brings fresh ideas and perspectives.

Should you need it, we have an accessibility tool available in the top menu to support you when you're completing your application. If you require any other reasonable adjustments during the application and assessment process, reach out to your recruitment partner.

Tech to the future

Meet John, our Chief Tech and Innovation Officer, who shares insights into the exciting things happening in tech, why Dunelm is his happy place, and his unique route into the tech world.

Work your way

We want our colleagues to feel at home wherever they work, so that they are comfortable and can be their best selves. In addition, we want everyone to feel connected to the business, our strategy and the teams they work with.

Where hybrid working is applicable, colleagues need to strike the right balance to fulfil both of these important factors. You will find the right mix of being at home, in the office & out in the business, bearing in mind business needs, job role and level of responsibility.

Wellbeing is more than just a buzzword here

From our Wellbeing Buddies and Mental Health First Aid training to our progressive parental leave, menopause policies and Colleague Support Fund, we're committed to supporting our colleagues in every area - and at every stage - of their lives. Through our partnership with the Retail Trust, everyone at Dunelm has free access to a 24/7 Virtual GP, as well as therapy and counselling, plus information, guidance and advice in all areas of financial, emotional and physical wellbeing.

Look in our toy box

Of course, you should never judge a business by its tech stack. But take a peek at the range of technologies our engineers and developers are currently playing with.

At Dunelm, we love every aspect of the design process. We're continually researching new developments in packaging, materials and production methods, tapping into new data insights and keeping track of changing lifestyle trends. We're hugely collaborative in the way we work. Together, the teams here have a direct impact on our success, creating amazing products that drive sales and delight our customers, as well as providing direction for our wide and varied range of brands.

Keep on growing

Join us on the tech side and you'll have access to a huge array of learning and development opportunities, including a variety of internally created workshops and externally accredited courses. We also have a substantial tech-specific budget to fund e-Learning licenses, conference visits, resources, and qualifications, plus dedicated mentors, well-being buddies and a wide range of network groups to support you as you progress.

Housewarming & Settling In

where you can find out more about the wider business, our culture, behaviours, networks and wellbeing support

Thrive, our learning and skills platform

which gives you a blended, bite-sized, social learning experience with learning relevant to your role

Our Enterprise Leadership Programme

designed specifically for our strong growth potential Heads of Department to help them reach the next level in their career

Our INSPIRE Programme

designed for our strong growth potential senior managers across the business to enhance their leadership capability

Our EXPLORE Programme

designed to prepare our next generation of Line Managers

Personal Effectiveness

workshops and self-led learning, also delivered through Thrive

Apprenticeships opportunities

relevant to your role - from level 2 (equivalent to GCSE) through to Level 7 (equivalent to Masters)

Colleague Development Fund

to support colleagues in accessing external training relevant to your role

Coaching and mentoring opportunities

to support you in your current role and help you prepare for the next

Self-awareness tools

to help you understand what really matters to you, and where your own talents and ambitions lie

Progress conversations

that reflect on how you're doing and define your focus areas for the coming months

Career conversations

that explore what you want from your career, in light of your current capabilities, potential and future aspirations

Meet your team

I'm in my happy place when...

"There's a brilliant support network you can learn from here, and a great 'no fear of failure' culture."

Paulina, Principal Delivery Lead

Meet your team

I'm in my happy place when...

"Someone I knew said the people are great, and you get the chance to improve and innovate. That's certainly been my experience."

Balaji, Platform Engineer

Meet your team

I'm in my happy place when...

"People here can challenge and push back. If you think there's a better way of doing things, you can say so."

Bhavik, Principal Engineer

Meet your team

I'm in my happy place when...

"We work in a really collaborative way and I love the buzz of the working environment."

Madalyn, Senior Digital Trading Executive

Meet your team

I'm in my happy place when...

"The experience I've gained is so diverse, and since I returned from maternity leave, my career has gone from strength to strength."

Rachel, Product Manager

Rewards you deserve

Along with competitive salaries, we offer a range of other great benefits to recognise the unique contribution you bring.

Salary Advance

so you can access up to 50% of the money you've earned during the month, rather than having to wait until pay day

Instant discounts

with a range of other companies to help you stretch your budget

Pension contributions

to help you save for your retirement

ShareSave scheme

that enables you to save monthly and buy Dunelm shares at a discounted rate, building up your investments for a rainy day

Continuous training and coaching

to ensure you feel confident in your current role and ready for any new challenges

Access to wellbeing support

as and when you need it, including an online GP for you and your immediate family

Colleague networks

that give everyone a voice and create an environment where we all feel at home

Outstanding development opportunities

and all the support you need to grow your career the way you want

33 days annual holiday

plus your birthday off to celebrate, and another day when you move home, so you can get settled in

Generous discounts

on all our own products, in-store and online to help you make your house a home

Cycle to work scheme

to help you keep your fitness up and your travel costs down

Charity day off

(paid, of course) so you can volunteer for a charity that matters to you

Free on-site parking

(excluding London office) and good public transport links

How did we get here?

Today, Dunelm is a leader in the £11bn UK homewares market. With over 200 stores across the country and a successful online operation - dunelm.com - we offer over 60,000 products across a broad range of categories. But where did it all begin?

1979

Founder, Bill Adderley and his wife Jean take on a stall in Leicester Market selling curtains. Within a month, they make 600% profit.

1984

First bricks-and-mortar store founded in Churchgate, Leicester.

1988

With momentum growing, first flagship store opens in Leicester, East Street, offering warehouse facilities for expansion across the region.

1991

First superstore opens in Rotherham, offering premium brands such as Dorma, which the company goes on to acquire.

1996

Bill's son Will is appointed CEO of the company, following in his father's footsteps.

1999

Now a household name in the Midlands, Dunelm Mill opens a head office with warehouse facilities in Syston, Leicestershire.

2001

The acquisition of a small custom-made curtains business marks the start of Dunelm's made-to-measure service.

2002

A landmark year as Dunelm Mill opens its 50th store and a new central warehouse in Burton. The company goes on to open new stores at a rate of 10 each year.

2005

A fully shoppable website goes live, with a dedicated warehouse below our Radcliffe store

2006

Dunelm floated on the London Stock Exchange, marking the beginning of a new era for the company.

2010

In Liverpool, the company opens its 100th store, having celebrated its 30th birthday in 2009.

2011

To accommodate continued growth, Dunelm builds a new head office in Syston.

2013

Company rebrands from 'Dunelm Mill' to 'Dunelm' - reflecting what our customers have called us for years.

2016

Our family grew to include Worldstores.

2018

Nick Wilkinson joins the business as our new CEO.

2021

To accommodate our continued growth, Dunelm opens a fourth warehouse in Daventry.

2022

Launch of our 'Conscious Choice' collection - homeware that lasts longer and is made from more sustainable materials.

2024

First Central London store in Westfield.

2024

Expanded into the Republic of Ireland, acquiring Home Focus at Hickey's.

2025

Opened our 200th store in Merthyr Tydfil.

2025

Clo Moriarty joins as CEO, taking the reins from Nick Wilkinson.