Senior Staff GRC Analyst
Core
Own the end-to-end Cyber Essentials and Cyber Essentials Plus certification program, ensuring controls are audit-ready for UK public sector and enterprise customers.
Role type
Senior Staff GRC Analyst (Security Compliance)
Builds
Cyber Essentials certification program and associated control validation processes
Domain
Cybersecurity compliance and IT audit
Required skills
Cyber Essentials Plus certification ownership, technical control validation, security compliance program management, influence without authority, GRC platform proficiency, ISO 27001/SOC 2/NIST CSF familiarity
Preferred skills
CISA, CISM, CISSP, ISO 27001 Lead Auditor certifications, automation of compliance processes
Technologies
Intune, Okta, AWS
Responsibilities
Manage annual Cyber Essentials Plus certification cycle from scoping to renewal; validate five technical controls (firewalls, secure configuration, user access, malware protection, updates); drive remediation of control gaps; serve as primary contact for external certification body; align Cyber Essentials with ISO 27001 and SOC 2 programs; report program status and risks to leadership
Seniority
Senior Staff, hands-on IC with mentorship responsibilities