IT Governance, Risk & Compliance Analyst
Core
Act as a key liaison between technical and business teams to build, maintain, and monitor IT policies, risk management frameworks, and security compliance standards.
Role type
Entry-level IT Governance, Risk & Compliance Analyst
Builds
IT policies, risk registers, and compliance frameworks aligned with ISO 27001, Cyber Essentials, NIST CSF, GDPR, and SOX.
Domain
IT Governance, Risk & Compliance (GRC) in manufacturing and defense
Deliverable
dashboards & analysis
Required skills
IT support/operations background, foundational knowledge of IT environments (IAM, backups, network logic), understanding of security frameworks (ISO 27001, Cyber Essentials), analytical problem solving, written and verbal communication
Preferred skills
Industry certifications (CompTIA Security+, CISA), experience in regulated sectors (EMS/Manufacturing, Defence, Cybersecurity, Financial Services), proficiency in productivity and tracking tools
Technologies
ISO 27001, Cyber Essentials, NIST CSF, GDPR, SOX
Responsibilities
Coordinate audit evidence gathering and evaluation against security frameworks and regulations; Maintain risk register, execute routine control testing, and assist with Third-Party Risk Management (TPRM) assessments; Help draft, update, and review internal IT policies; Research evolving regulatory changes and report business impact; Partner with technical teams and business stakeholders to drive security best practices
Seniority
Entry-level, hands-on IC
