GRC / Cyber Security Risk Analyst

About the role

An organisation undergoing a major cyber security improvement programme is looking for an experienced GRC / Cyber Security Risk Analyst. You will help build stronger governance, risk management and compliance practices across a diverse technology estate.

Key responsibilities

• Conduct cyber security and technology risk assessments.
• Maintain and develop security risk registers.
• Manage asset registers and support asset governance activities.
• Facilitate security governance forums and risk review meetings.
• Support creation and enhancement of security policies, standards and procedures.
• Work with stakeholders to assess risks and agree remediation priorities.
• Monitor and track risk treatment plans.
• Support ISO27001‑aligned governance, risk and compliance activities.
• Contribute to wider security maturity and control improvement initiatives.

Required profile

• Proven experience in GRC, cyber security risk or information security functions.
• Strong understanding of cyber security risk management principles.
• Experience maintaining risk registers and conducting risk assessments.
• Knowledge of ISO27001 (and preferably ISO27005).
• Ability to engage confidently with technical and non‑technical stakeholders.
• Pragmatic, delivery‑focused approach.

Required skills

• ISO27001
• ISO27005
• NIST framework
• Cyber Essentials Plus

What we offer

• Outside IR35 contract, initial 6‑month term.
• Daily rate of £400‑£450.
• Hybrid working in the North West England region.
• One‑stage interview process and immediate start.