IT & Cyber Risk GRC Analyst (12‑Month Fixed‑Term)

About the role

We are seeking an IT & Cyber Risk GRC Analyst to join our Information Security Governance, Risk & Compliance function on a 12‑month fixed‑term basis. You will work closely with IT, Cyber Security, Risk and Business teams to strengthen our security posture and ensure compliance with regulatory obligations.

Key responsibilities

• Maintain and enhance the Information Security GRC framework, policies, standards and procedures.
• Define security requirements for projects, RFPs and new technologies.
• Prepare for internal and external audits, track remediation activities and produce governance reports.
• Conduct IT and cyber risk assessments, identify control gaps and manage the IT risk register.
• Perform control effectiveness testing, support incident‑management from a risk perspective and promote security awareness.
• Carry out third‑party security risk assessments and embed security requirements into IT projects.
• Produce risk dashboards, metrics and compliance artefacts for leadership forums.

Required profile

• Strong understanding of information security principles, governance and risk‑management frameworks.
• Experience conducting IT risk assessments, control testing or cyber‑governance activities.
• Background in regulated or compliance‑driven environments.
• Excellent analytical, problem‑solving and reporting abilities.
• High integrity and ability to handle confidential information.

Required skills

• ISO 27001
• NIST Cyber Security Framework (CSF)
• PCI DSS

What we offer

• Opportunity to work on high‑impact security initiatives within a collaborative environment.
• Professional development in GRC and cyber‑risk disciplines.