GRC Analyst (Risk & Audit) | Contract | Outside IR35 | Hybrid, North West
Xpertise have partnered with a leading global organisation to find an experienced GRC Analyst with a strong risk and audit focus. You'll play a key role in building and maturing their risk function and preparing the business for external audit and regulatory scrutiny, including NIS2.
What you'll be doing:
Building and embedding a risk management function from the ground up
Owning and maintaining risk registers, covering identification, assessment, treatment, monitoring and reporting
Supporting NIS2 Directive compliance activity, including gap analysis and remediation tracking
Planning and conducting internal audits, and preparing the organisation for external audits
Identifying common control weaknesses and evidence gaps before they become audit findings
Supporting NCSC Cyber Assessment Framework (CAF) activity and evidence gathering
Engaging stakeholders at all levels to agree risk owners, track remediation actions and drive accountability
Producing clear, concise risk and audit reporting for senior audiences
What we're looking for:
Proven GRC experience with a clear emphasis on risk management
Hands-on ownership of risk registers and a strong grasp of core risk methodology (likelihood/impact, risk appetite, inherent vs residual risk)
Demonstrable experience with the NIS2 Directive (essential)
Experience conducting audits end to end and supporting external audit preparation (ISO 27001 or similar)
Exposure to NCSC CAF, ISO 27001, NIST or similar frameworks
Clear, evidenced examples of stakeholder engagement, including influencing senior stakeholders and managing remediation across teams
Confident communicator who can work independently from day one
Outside IR35 | Hybrid working | North West
Please send your CV to find out more.
GRC Analyst, Risk Management, NIS2, Audit, ISO 27001, NCSC CAF, NIST, Cyber Risk, Contract
...
GRC Analyst (Risk & Audit) | Contract | Outside IR35 | Hybrid, North West in Bath employer: Xpertise
Join a forward-thinking company that values innovation and technical excellence, offering a competitive day rate and the flexibility of hybrid or fully remote work. With a strong focus on employee growth, you will have the opportunity to take ownership of significant projects while collaborating with a talented team in a supportive work culture that prioritises work-life balance and professional development.
