Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 78 days ago

GRC Senior Analyst

hiring9 open roles

Where
London, England, United Kingdom
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowGRC Senior Analysthiring · London, England, United Kingdom

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on hiring's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: posted 78 days ago

The posting

Summary

We are seeking a Senior GRC Analyst to help drive the evolution of our governance, risk and compliance capability from periodic assessment towards continuous, measurable assurance that directly informs business and technology decision making. The role spans both our internal technology initiatives and practical GRC support to our client base.

You will work closely with the teams that build and operate our technology estate, developing sufficient understanding of those environments to assess risk credibly and translate it into a risk position that leadership can act upon. You will concisely articulate your ideas to stakeholders at all levels and influence outcomes in support of enterprise projects.

You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both us and our clients secure without slowing the business down.

We are actively modernising the way assurance is delivered, with particular emphasis on automation and the practical application of AI to improve control efficacy and reduce manual effort. This role will be central to that work, and we are looking for a practitioner motivated by evolving how GRC is delivered rather than by maintaining existing processes through traditional methods.

If you have a positive mindset and can map risk to business value with a practical, adaptable and innovative approach, then this is the role for you.

Key Responsibilities

  • Risk Management: Work closely with technology teams and clients to develop an accurate and current understanding of the risk picture, and articulate and report on it consistently and effectively to both technical and executive audiences.
  • Framework Implementation: Plan, implement and maintain a security program aligned to CIS Controls v8 and other framework requirements in a manner appropriate to the environment, taking a practical and proportionate approach.
  • Internal and Client Delivery: Provide security subject matter expertise across our internal technology initiatives, collaborating with project managers, business stakeholders and operational teams, and lead client GRC engagements end to end from gap assessment and framework implementation through to audit readiness and ongoing advisory.
  • Measurement and Insight: Maintain a clear and current view of control effectiveness, risk trends and remediation progress, underpinned by tangible data points, and use it to inform business and technology planning decisions.
  • Audit and Assurance: Plan and conduct internal and external compliance audits, coordinating with the wider Information Security function and external partners, and pursue remediation through to demonstrable risk reduction.
  • Automation and AI: Identify assurance activity that is manual, repetitive or inefficient and lead the work to improve it, engaging technical teams and tooling to deliver measurable improvements in control efficacy and analyst capacity.
  • Core GRC Services: Contribute to and mature the core services we provide, including third-party risk management, the policy and standards framework, and security awareness and training content, making each scalable, measurable and automated wherever practical.
  • Function Development: Support the development of the wider Information Security function, evolving ways of working to solve problems in a collaborative environment.

Essential Experience and Capability

  • Relevant experience in a comparable role across information security governance, risk management, compliance and audit, with a demonstrable track record of delivered outcomes.
  • Practical implementation experience with CIS Controls, ISO 27001 or equivalent frameworks within live operating environments, including the judgement required to apply them proportionately.
  • Sufficient technical understanding to engage credibly with operational IT teams across a range of security domains including identity, networks, vulnerability management and configuration hardening. Prior experience in a technical role is not essential, but a sound grasp of how modern technology environments are built and operated is.
  • An active interest in AI and automation technologies in the context of a ‘GRC Engineering’ mindset.
  • A risk-based mindset, prioritising on the basis of evidence and impact, with reporting produced to support decisions rather than to record activity.
  • The ability to prioritise a complex and evolving workload against available capacity, and to communicate the impact of change clearly with smart escalations.
  • The confidence to identify opportunities, influence change and challenge constructively at all levels whilst building positive relationships with key business stakeholders and operational leads.
  • Willingness to travel internationally for business on occasion.

Desirable

  • Practical experience of introducing AI and automation into GRC processes.
  • Certification in one or more of CISA, CRISC, CISSP, CISM, CGE-P, ISO 27001 Lead Auditor or Lead Implementer.

The above list of duties is not exclusive or exhaustive and the post holder will be required to undertake tasks that are reasonably expected within the scope and grading of the post.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against hiring's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on hiring's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    hiring's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.