Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Join a team to enhance GRC functions through policy writing and security assessments.
- Company: Work with a leading Global Enterprise Organisation focused on governance, risk, and compliance.
- Benefits: Competitive day rate of £550-£650, with flexible work options and a collaborative environment.
- Why this job: Make a real impact in security while gaining hands-on experience with top frameworks like ISO 27001.
- Qualifications: Proficiency in ServiceNow and knowledge of security frameworks like PCI DSS and NIST required.
- Other info: Initial contract for 3 months with travel to the Hertfordshire office twice a week.
The predicted salary is between 39600 - 66000 £ per year.
Social network you want to login/join with:
A Global Enterprise Organisation requires a Contract GRC Analyst to join their GRC Transformation & improve their GRC function by providing hands on expertise with policy writing, 3rd party reviews and internal security assessments. The successful candidate will be proficient in using ServiceNow and well-versed in security frameworks such as ISO 27001, PCI DSS, and NIST.
Day Rate: £550-£650pd
IR35 Status: Inside
Duration: 3 months initially
Travel: 2 days a week in Hertfordshire Office
The successful GRC Analyst will have the following previous experience:
Policy Writing and Documentation:
Develop, review, and update policies related to governance, risk, and compliance, ensuring alignment with industry standards and business objectives.
Third-Party Assessments and Reviews:
Conduct thorough assessments and reviews of third-party vendors to evaluate compliance with security frameworks, identifying and mitigating potential risks.
Security Frameworks Implementation:
Utilize strong knowledge of ISO 27001, PCI DSS, and NIST to guide and support the organization in maintaining compliance with these security standards.
ServiceNow Administration:
Leverage extensive experience with ServiceNow to manage and streamline GRC processes, including incident management, risk assessments, and compliance tracking.
Standard Operating Procedures Development:
Develop and maintain Standard Operating Procedures (SOPs) to document risk assessment processes, business process workflows, and other critical GRC activities.
Internal Security Assessments:
Conduct internal security assessments to identify vulnerabilities and ensure the organization adheres to best practices in information security.
Collaboration and Stakeholder Management:
Work closely with various business units to ensure GRC initiatives are effectively integrated into business processes and align with overall company goals.
#J-18808-Ljbffr
GRC Analyst employer: TN United Kingdom
Contact Detail:
TN United Kingdom Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land GRC Analyst
✨Tip Number 1
Make sure to familiarize yourself with the specific security frameworks mentioned in the job description, such as ISO 27001, PCI DSS, and NIST. Having a solid understanding of these frameworks will not only help you during the interview but also demonstrate your commitment to compliance and risk management.
✨Tip Number 2
Since the role involves using ServiceNow, consider brushing up on your skills with this platform. If you have experience managing GRC processes through ServiceNow, be ready to discuss specific examples of how you've streamlined processes or improved efficiency in previous roles.
✨Tip Number 3
Prepare to showcase your experience with policy writing and documentation. Think of instances where you've developed or updated policies that align with industry standards, and be ready to explain how these policies impacted the organization positively.
✨Tip Number 4
Collaboration is key in this role, so be prepared to discuss how you've worked with different business units in the past. Highlight any successful GRC initiatives you've led or contributed to, emphasizing how you ensured alignment with overall company goals.
We think you need these skills to ace GRC Analyst
Some tips for your application 🫡
Understand the Role: Take the time to thoroughly read the job description for the GRC Analyst position. Make sure you understand the key responsibilities, such as policy writing and third-party assessments, as well as the required skills like proficiency in ServiceNow and knowledge of security frameworks.
Tailor Your CV: Customize your CV to highlight relevant experience that aligns with the job requirements. Emphasize your expertise in policy writing, internal security assessments, and any experience with ISO 27001, PCI DSS, and NIST.
Craft a Strong Cover Letter: Write a compelling cover letter that showcases your passion for governance, risk, and compliance. Mention specific examples of how you've successfully implemented security frameworks or conducted third-party reviews in previous roles.
Highlight Your ServiceNow Experience: Since the role requires extensive experience with ServiceNow, make sure to detail your familiarity with the platform. Discuss how you've used it to manage GRC processes, incident management, or compliance tracking in past positions.
How to prepare for a job interview at TN United Kingdom
✨Showcase Your Policy Writing Skills
Be prepared to discuss your experience in developing and updating governance, risk, and compliance policies. Bring examples of your previous work that demonstrate your ability to align policies with industry standards like ISO 27001 or PCI DSS.
✨Demonstrate Knowledge of Security Frameworks
Familiarize yourself with the key aspects of ISO 27001, PCI DSS, and NIST. Be ready to explain how you've applied these frameworks in past roles and how they can benefit the organization you're interviewing with.
✨Highlight Your ServiceNow Experience
Since the role requires proficiency in ServiceNow, prepare to discuss specific instances where you've used this platform to manage GRC processes. Mention any improvements you made to incident management or compliance tracking through ServiceNow.
✨Emphasize Collaboration Skills
The role involves working closely with various business units, so be ready to share examples of how you've successfully collaborated with stakeholders in the past. Highlight your communication skills and ability to integrate GRC initiatives into broader business processes.
