GRC Analyst

GRC Analyst
Location: Manchester, Hybrid | 80% remote, 20% onsite
Duration: 31/10/2031
Rate - -480 - -520
CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL
The candidate hasn''t been outside the UK for more than 28 consecutive days during the past 5 years
MUST BE PAYE THROUGH UMBRELLA

Role Description:

• Maintain oversight of cyber security risks across suppliers
• Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately
• Govern risk acceptance and exception management processes
• Support risk-based prioritisation across security disciplines
• Coordinate supplier compliance activities within the SIAM framework
• Validate supplier adherence to agreed security requirements
• Monitor security performance against contractual obligations
• Drive accountability for control weaknesses, non-compliance, and improvement actions
• Maintain visibility of compliance obligations and control requirements
• Support compliance against frameworks and standards such as:
• ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles
• Coordinate remediation of identified compliance gaps
• Produce consolidated security governance reporting
• Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings
• Present governance information to client stakeholders and governance forums
• Support strategic planning and risk-informed decision making
• Drive security governance maturity improvements across the supplier landscape
• Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness
• Security governance practices
• Support continuous improvement programmes across the cyber security operating model
• Facilitate cross-supplier resolution of governance issues

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.