Cyber Security GRC Analyst

About the role

The Cyber Security GRC Analyst will join a leading international business in Birmingham, working on a hybrid schedule. The role focuses on ensuring the organisation complies with cyber security policies, standards and regulatory requirements while supporting continuous improvement of security controls.

Key responsibilities

• Ensure the group complies with all relevant cyber security policies, procedures and standards.
• Implement and monitor cyber security standards and controls across the organisation.
• Support the design and delivery of cyber security training and awareness programmes.
• Perform third‑party supplier and vendor security assurance reviews.
• Test cyber security controls and produce KPI and control‑effectiveness analysis.
• Coordinate policy and standards reviews and updates.

Required profile

• Experience creating, maintaining and communicating information security technology standards.
• Proven ability to conduct security reviews of third parties.
• Experience producing KPI and control‑effectiveness reports.
• Support internal and external IT and cyber security audits.
• Knowledge of cyber security threats and mitigating controls.
• Basic IT knowledge, including networking principles.

Required skills

• CIS framework
• NIST framework
• ISO 27001
• GDPR
• Fundamental networking concepts

What we offer

• Permanent contract with hybrid working.
• Opportunity to work for an industry leader with growth across the UK, Ireland and Europe.