Senior IT Cyber GR&C Analyst

About the role

The Senior IT Cyber Governance, Risk & Compliance Analyst will support the design, implementation and oversight of the organisation's IT governance and cyber risk programmes. Working closely with internal stakeholders, the analyst ensures that IT and cyber activities meet regulatory expectations, internal policies and industry best practice.

Key responsibilities

• Support compliance with regulatory and control frameworks such as DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials.
• Assist in evaluating and managing IT, cyber, compliance and security risks across systems and processes.
• Monitor emerging technology and cyber‑resilience risks, escalating issues as needed.
• Prepare for and support regulatory inspections, internal, external and third‑party audits.
• Track cyber‑risk remediation actions and maintain the cyber risk register.
• Coordinate third‑party security assurance, including due‑diligence and remediation tracking.
• Facilitate user and privileged access reviews, moving towards tool‑based certification.
• Perform first‑line compliance monitoring and control checks against information security policies.

Required profile

• Proven experience in IT governance, risk and compliance within a large, regulated environment.
• Familiarity with insurance or reinsurance business operations is advantageous.
• Ability to work collaboratively with technical and business stakeholders.

Required skills

• DORA framework
• ISO 27001
• NIST Cybersecurity Framework (CSF)
• Sarbanes‑Oxley (SOX) compliance
• Cyber Essentials