GRC Analyst

About the role

We are supporting a major organisation that needs an experienced GRC Analyst to join its established security function. The role is focused on governance, risk and control assurance, with a strong emphasis on COBIT control mapping and stakeholder engagement.

Key responsibilities

• Support governance, risk and compliance activities across the security function.
• Map and maintain controls against the COBIT framework.
• Review audit findings and drive remediation activities.
• Conduct control assurance and effectiveness assessments.
• Translate control requirements into practical actions for technical and non‑technical stakeholders.
• Track and report on control maturity, risk posture and compliance status.
• Assist with risk assessments and risk management processes.
• Provide clear updates and reporting to senior stakeholders.

Required profile

• Proven experience in a GRC, risk or information security governance role.
• Strong knowledge and practical experience of the COBIT framework.
• Experience mapping controls and developing control frameworks.
• Demonstrated ability to manage audit findings and remediation.
• Background in control assurance and effectiveness reviews.
• Excellent communication skills to translate complex requirements for business audiences.
• Ability to work autonomously while contributing to a wider team.

Required skills

• COBIT framework

What we offer

• Daily rate of £500‑£600 inside IR35.
• Initial 6‑month contract with the possibility of extension.
• Hybrid work model – twice a week on site in Reading/Dorset.
• Inclusive and supportive workplace culture.