At a Glance
- Tasks: Support clients in achieving security metrics and compliance requirements while enhancing their security posture.
- Company: Join Rhymetec, a growing tech company focused on compliance and cybersecurity.
- Benefits: Enjoy comprehensive medical insurance, generous leave, and wellbeing support.
- Other info: Flexible work environment with opportunities for professional growth.
- Why this job: Make a real impact in cybersecurity while working remotely with a dynamic team.
- Qualifications: Experience in compliance frameworks and cloud security; bilingual skills are a plus.
The predicted salary is between 50000 - 60000 £ per year.
Job Title
GRC Analyst
Location
Remote (London area)
Employment Type
Full-time, Permanent Role
About Rhymetec
Rhymetec was founded in New York City in 2015, growing steadily in the areas of compliance, cybersecurity and data privacy.
Our mission is to ensure our clients are compliant faster, so they can focus on their core business and less on the complexities of building effective and compliant infosec programs.
Job Description
We are seeking a
GRC Analyst to join our growing team in the UK!
The CSA will be responsible for supporting the development and implementation of solutions that help Rhymetec's clients achieve, manage and measure security metrics and compliance requirements.
The role will work closely with their Security Program Manager to help design and deliver security and compliance objectives and have the ability to help drive foundational changes in internal cloud platforms to enhance their security posture.
The ideal candidate will have a team first mentality and fit within the core values and culture at Rhymetec.
This person will be responsive to both customers and team members with communications, be detail oriented, and hold a high level of autonomy to complete work on time and with quality.
Responsibilities
- Prepare agendas and supporting materials for client business.
- Conduct meetings with clients regularly.
- Configure performance monitoring alarms in AWS, Azure, GCP, Datadog and other cloud infrastructures.
- Configure Security alarms and Intrusion Detection Systems in AWS, GCP, Azure.
- Set up supporting security applications.
- Set up mobile device management applications such as Jamf, Jumpcloud, Microsoft Endpoint manager, Hexnode, etc.
Configure and maintain compliance monitoring platforms.
- Conduct internal audits, risk assessments, and generate reports.
- Conduct Incident Response Tabletop exercises with clients.
- Conduct Business Continuity and Disaster recovery tabletop exercises with clients.
- Support clients in mapping frameworks/controls such as SOC 2 Type 2, ISO 27001, GDPR, and DORA into actionable items for clients.
- Conduct employee access reviews, Saa S vendor security assessments, and Gap assessments.
- Triage bug/vulnerability reports from security researchers.
- Complete security questionnaires on behalf of clients.
- Draft supporting documents for clients’ information security management systems and information security policies.
- Gather & maintain evidence of compliance for various frameworks.
- Lead engagements with auditors on behalf of clients.
- Communicate tasks to clients’ employees and educate clients on security best practices.
Qualifications
- Knowledge of compliance and regulatory frameworks (PCI, ISO/IEC, SOC 2, DORA, GDPR)
- Strong logical security skills, with experience in cloud security
- Understanding of cloud environments (AWS, GCP, Azure) and integrating security controls through Dev Ops and Infrastructure as a Service (Iaa S) techniques
- Experience in customer service and ability to develop professional relationships with customers
Must Haves
- Bachelor's degree or equivalent experience related to the technology or cyber security field
- Bilingual in German and/ or French
- 4+ years of work experience in technology or cybersecurity.
- Ability to flex and adapt to innovative and changing work demands.
- Travel up to 2 weeks out of the calendar year.
- Rhymetec Benefits
- Comprehensive, company-funded private medical insurance for employees
- Dental and Vision benefits
- Generous annual leave package, plus sick time and 8 Paid Holidays
- Workplace pension
- Wellbeing Support: An annual subscription to Talk Space, our online counselling and therapy service
Rhymetec is committed to creating a diverse environment and is proud to be an equal opportunity employer.
All qualified applicants will receive consideration for employment regardless of race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetic background, disability, age, or veteran status.
GRC Analyst in London employer: Rhymetec
Rhymetec is an exceptional employer, offering a dynamic remote work environment that fosters collaboration and innovation in the fields of compliance and cybersecurity. With comprehensive benefits including company-funded private medical insurance, generous annual leave, and a commitment to employee wellbeing, Rhymetec prioritises the growth and development of its team members while promoting a diverse and inclusive workplace culture. Join us in London and be part of a mission-driven team dedicated to helping clients navigate the complexities of information security with confidence.
StudySmarter Expert Advice🤫
We think this is how you could land GRC Analyst in London
✨Join Compliance Communities
Get involved in compliance and risk communities — both online and offline. Look for forums, LinkedIn groups, or even local meetups where compliance pros hang out. You never know who might drop a job opportunity your way!
✨Attend Industry Conferences
Keep an eye out for compliance and risk management conferences and workshops in your area. These events are a goldmine for networking, and they often have job boards or recruiters on-site looking for new talent. Plus, it’s a chance to learn what's trending in the field.
✨Leverage Your University Career Services
If you’ve recently graduated or are still studying, head over to your university's career services. Many companies, including those in compliance, actively recruit fresh talent through these services, so make sure you tap into that resource.
✨Showcase Your Knowledge Online
Start writing articles or blog posts about compliance topics that interest you. Share them on platforms like LinkedIn to demonstrate your knowledge and passion. This not only builds your presence in the field but can also catch the attention of companies like Rhymetec looking for candidates who are engaged and informed.
We think you need these skills to ace GRC Analyst in London
Some tips for your application 🫡
Show Your Understanding of Compliance:In the compliance-risk field, it's super important to showcase your understanding of regulations and risk management frameworks. Highlight any relevant coursework, certifications (like ICA or AML), or even projects that demonstrate your knowledge and commitment to this area. We want to see how you can navigate this complex landscape!
Quantify Your Achievements:When detailing your experience, try to quantify your achievements. For example, if you've previously worked on a project that improved compliance metrics or reduced risk exposure, give us the numbers! This data-driven approach really stands out to hiring managers in compliance-risk roles.
Tailor Your CV to Reflect Relevant Skills:Make sure your CV highlights skills that are particularly relevant to compliance, like attention to detail, analytical thinking, and report writing. Ensure these are easy to spot – consider using bullet points to break down your responsibilities and achievements for maximum impact!
Craft a Motivating Cover Letter:In your cover letter, let us know why you’re excited about the compliance-risk role at Rhymetec. Share what motivates you about compliance, and how you believe you can contribute to our mission. This is your chance to showcase not only your skills but also your passion for this important field!
How to prepare for a job interview at Rhymetec
✨Master the Regulations
Brush up on key compliance regulations relevant to the industry you're applying to. Familiarising yourself with specific laws and frameworks used in your field will give you an edge during technical questions. Show that you’re not just aware of them but can also apply them—think real-life scenarios!
✨Show Your Analytical Skills
Compliance roles really focus on analytical skills, so be prepared for case studies or situational questions during the interview. We've got to demonstrate how we approach risk assessments or compliance audits, possibly drawing on examples from past experiences or university projects. Bring some thoughtful case scenarios to discuss!
✨Know Your Tools
Get comfortable with commonly used compliance software and tools. Familiarity with platforms like RSA or MetricStream can really impress during your interview, as it shows you're ready to hit the ground running. If you’ve had any experience with them, make sure to highlight that!
✨Align with Company Culture
Since it's a full-time position, show your long-term commitment and interest in the company’s mission and values. Dive into how your ethics and professional philosophy align with Rhymetec’s stance on compliance. A shared vision can really resonate with interviewers looking for fit as much as skill!
