Technology Risk / Compliance Analyst

About the role

We are seeking a Technology Risk / Compliance Analyst to join the Governance, Risk & Compliance (GRC) team of a fast‑growing software provider serving financial services firms. Reporting to the VP of GRC, you will work hybrid (2 days in the Edinburgh or Glasgow office, 3 days remote) and develop specialist expertise in technology, cyber, data and third‑party risk.

Key responsibilities

• Support risk and control self‑assessments across technology, cyber security, data, cloud services and third‑party/supplier risk.
• Analyse incidents, operational events and control data to spot trends, root causes and improvement opportunities.
• Track risk actions and remediation plans, escalating overdue items as needed.
• Maintain key risk indicators and control information for governance and client assurance reporting.
• Prepare draft packs, dashboards and summary updates for senior GRC review.
• Assist with responses to client, audit and regulatory due‑diligence requests.
• Contribute to continuous improvement of risk processes, leveraging automation and AI‑enabled tools.

Required profile

• Proven experience in risk, audit, technology, cyber, data or controls roles.
• Background in financial services and exposure to a regulated environment.
• Curious, proactive and comfortable identifying risks and challenging control owners.
• Strong analytical ability to translate risk data into clear, actionable insights for technical and non‑technical audiences.
• Familiarity with frameworks such as ISO 27001, NIST, SOC 2, GDPR, DORA or operational resilience is desirable.

Required skills

• Experience with a GRC or compliance automation platform (e.g., Secureframe, Vanta, Drata or similar).

What we offer

• Salary up to £66,000, dependent on experience.
• Hybrid working model (2 days office, 3 days home).
• Pension, healthcare and additional benefits.
• Direct exposure to senior GRC leadership and governance forums.
• Opportunity to shape and improve risk processes.