GRC Lead & Business Analyst
GRC Lead & Business Analyst

GRC Lead & Business Analyst

London Full-Time 42000 - 56000 £ / year (est.) No home office possible
P

At a Glance

  • Tasks: Lead GRC initiatives, manage compliance audits, and optimise business processes.
  • Company: Join Purview, a global leader in IT Engineering and Talent Solutions, trusted by Fortune 500 clients.
  • Benefits: Enjoy hybrid work options and the chance to work with top-tier clients across various industries.
  • Why this job: Make an impact in governance and risk management while collaborating with diverse teams.
  • Qualifications: Mid-senior level experience in GRC, business analysis, and compliance management required.
  • Other info: Contract role based in Manchester, Birmingham, or London; no visa sponsorship available.

The predicted salary is between 42000 - 56000 £ per year.

Direct message the job poster from PURVIEW

If i have viewed your profile i have job opportunity for you. :)Senior Talent Acquisition at PURVIEW Services UK/Europe/India

Exciting Opportunity with a Leading (insert one of the following domains wrt client; Banking/ Telecom/ Pharma/IT services/ Product Development/ Ecommerce/Retail/ Automotive/Manufacturing/Aerospace/ Defense/ Insurance) Client.

Purview is a global leader in IT Engineering and Talent Solutions, trusted by Fortune 500 and mid-market clients across 21+ countries.

Role: GRC Lead & Business Analyst

Location: Manchester OR Birmingham OR London (Hybrid)

Job Type: Contract (Inside IR35)

The GRC Lead & Business Analyst is responsible for managing the organization\’s Governance, Risk, and Compliance (GRC) framework while also performing business analysis to enhance risk management, regulatory compliance, and operational efficiency. This role involves assessing risks, ensuring compliance, conducting audits, analyzing business processes, and driving GRC-related projects. The GRC Lead Cum BA will work closely with IT, legal, finance, and business units to enforce policies, ensure compliance, and implement best practices for governance, risk, and assurance.

Key Responsibilities:

1. Governance, Risk & Compliance (GRC) Management

  • Develop, implement, and maintain GRC policies, frameworks, and procedures aligned with industry standards and regulatory requirements (ISO 27001, NIST, SOC 2, GDPR, HIPAA, PCI DSS).
  • Conduct workshops to gather requirements for risk assessments and security reviews, ensuring risk mitigation strategies are in place.
  • Maintain a risk register and track risk management initiatives.
  • Lead third-party/vendor risk assessments requirement gathering, ensuring supplier security and compliance.
  • Collaborate with leadership to align GRC practices with business objectives.

2. Compliance & Assurance

  • Ensure the organization meets regulatory requirements and industry best practices.
  • Manage compliance audits (ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA) and coordinate with internal/external auditors.
  • Conduct compliance monitoring and provide periodic reports on adherence to policies.
  • Develop and implement assurance programs to validate control effectiveness.
  • Stay updated on changing regulations and emerging compliance risks.

3. Business Analysis & Process Optimization

  • Gather and analyze business requirements for GRC initiatives, ensuring alignment with security, risk, and compliance goals.
  • Identify gaps in current GRC processes and recommend process improvements.
  • Collaborate with IT and security teams to implement automation for risk and compliance tracking.
  • Develop dashboards and reports for leadership to track compliance, risks, and control effectiveness.
  • Support the evaluation and selection of GRC tools and software solutions.

4. Audit, Reporting & Documentation

  • Plan, coordinate, and lead internal and external compliance audits.
  • Document and track compliance findings, ensuring timely remediation.
  • Prepare compliance reports, risk scorecards, and assurance documentation for senior management.
  • Ensure security controls and risk mitigations are well-documented and auditable.

5. Stakeholder Communication & Training

  • Serve as a liaison between business units, IT, legal, and compliance teams.
  • Conduct compliance and security awareness training for employees.
  • Communicate risk and compliance updates to senior leadership.

NOTE: Our client is not accepting ICT< Skilled Work, Global Mobility, PSW, Tier 4 and Business Visa holders.

Seniority level

  • Seniority level

    Mid-Senior level

Employment type

  • Employment type

    Contract

Job function

  • Job function

    Information Technology, Design, and Business Development

  • Industries

    IT Services and IT Consulting, Information Services, and Telecommunications

Referrals increase your chances of interviewing at PURVIEW by 2x

Sign in to set job alerts for “Business Analyst” roles.

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 days ago

London, England, United Kingdom 3 weeks ago

Business Operations | Analyst/Associate | London

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 3 weeks ago

City Of London, England, United Kingdom £70,000.00-£80,000.00 3 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 4 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr

GRC Lead & Business Analyst employer: PURVIEW

At PURVIEW, we pride ourselves on being a leading global player in IT Engineering and Talent Solutions, offering a dynamic work environment that fosters innovation and collaboration. Our hybrid work model across vibrant cities like Manchester, Birmingham, and London allows for flexibility while our commitment to employee growth ensures that you will have ample opportunities to develop your skills and advance your career. Join us to be part of a culture that values diversity, encourages continuous learning, and supports meaningful contributions to Fortune 500 clients.
P

Contact Detail:

PURVIEW Recruiting Team

StudySmarter Expert Advice 🤫

We think this is how you could land GRC Lead & Business Analyst

✨Tip Number 1

Network with professionals in the GRC field, especially those who work at PURVIEW or similar companies. Attend industry events or webinars to connect with potential colleagues and learn more about the company culture.

✨Tip Number 2

Familiarise yourself with the specific compliance frameworks mentioned in the job description, such as ISO 27001 and GDPR. Being able to discuss these frameworks in detail during an interview will demonstrate your expertise and commitment to the role.

✨Tip Number 3

Prepare to discuss your experience with risk assessments and compliance audits. Have specific examples ready that showcase your ability to manage GRC initiatives and improve processes, as this is a key responsibility of the role.

✨Tip Number 4

Research PURVIEW's recent projects and initiatives in the GRC space. This knowledge will not only help you tailor your conversation but also show your genuine interest in the company and its goals.

We think you need these skills to ace GRC Lead & Business Analyst

Governance, Risk and Compliance (GRC) Management
ISO 27001
NIST
SOC 2
GDPR
HIPAA
PCI DSS
Risk Assessment
Compliance Auditing
Business Analysis
Process Optimization
Stakeholder Communication
Training and Awareness Programs
Project Management
Data Analysis
Documentation Skills
Collaboration with Cross-Functional Teams

Some tips for your application 🫡

Understand the Role: Before applying, make sure you fully understand the responsibilities of a GRC Lead & Business Analyst. Familiarise yourself with key concepts like Governance, Risk, and Compliance, as well as relevant frameworks such as ISO 27001 and GDPR.

Tailor Your CV: Customise your CV to highlight your experience in GRC management, business analysis, and compliance audits. Use specific examples that demonstrate your ability to manage risks and ensure regulatory compliance.

Craft a Compelling Cover Letter: Write a cover letter that connects your skills and experiences directly to the job description. Emphasise your understanding of the industry standards and your previous successes in similar roles.

Highlight Relevant Skills: In your application, make sure to showcase skills that are crucial for this role, such as risk assessment, stakeholder communication, and process optimisation. Use keywords from the job description to align your application with what the employer is looking for.

How to prepare for a job interview at PURVIEW

✨Understand the GRC Framework

Make sure you have a solid grasp of Governance, Risk, and Compliance principles. Familiarise yourself with relevant standards like ISO 27001 and GDPR, as these will likely come up during your interview.

✨Showcase Your Analytical Skills

Prepare to discuss specific examples where you've successfully gathered and analysed business requirements. Highlight any process improvements you've implemented in previous roles, especially those related to risk management.

✨Prepare for Scenario-Based Questions

Expect questions that ask how you would handle specific compliance or risk scenarios. Think through potential challenges and your strategies for addressing them, demonstrating your problem-solving abilities.

✨Communicate Effectively

As a GRC Lead & Business Analyst, you'll need to liaise with various stakeholders. Practice articulating complex concepts clearly and concisely, and be ready to discuss how you've facilitated communication between different teams in the past.

GRC Lead & Business Analyst
PURVIEW
P
Similar positions in other companies
UK’s top job board for Gen Z
discover-jobs-cta
Discover now
>