IT GRC Analyst

Perfect role for a junior/mid professional looking to grow their Cybersecurity career in Newcastle.

Governance, risk and compliance has become the backbone of any serious security function. As regulatory pressure builds across UK industry, from ISO 27001 audits to Cyber Essentials Plus and beyond, organisations need people who can translate policy into practice. This established and growing security business, part of the wider Cybersecurity sector, is looking for an IT GRC Analyst to join its Newcastle team as it scales its risk and assurance capability.

Here's what you'll be doing

Supporting the delivery of risk assessments across IT systems, third parties and business processes

Maintaining and updating the risk register, tracking remediation actions through to closure

Assisting with internal and external audits, gathering evidence and liaising with control owners

Mapping controls against frameworks such as ISO 27001, NIST and Cyber Essentials

Drafting and reviewing policies, standards and procedures in plain, usable language

Monitoring compliance status and preparing reporting packs for senior stakeholders

Here are the skills you'll need

A year or two working in an IT GRC Analyst, risk, audit or compliance capacity, ideally within Cybersecurity or a regulated sector

Working knowledge of at least one major framework (ISO 27001, NIST, SOC 2 or similar)

Confidence writing clearly. Policies only work if people actually read them

Comfortable in spreadsheets and GRC tooling, with an eye for detail that others miss

Strong communication skills, able to hold your own with technical teams and non-technical stakeholders alike

A genuine interest in how organisations manage risk, not just tick boxes

Key perks and benefits

£33,500 to £41,500 depending on experience, plus bonus scheme

Hybrid working from the Newcastle office, with a sensible balance between home and site

Private medical insurance and pension contribution

Generous annual leave and flexible working arrangements

Structured progression path within a defined but growing GRC function

Why pursue a career in Cybersecurity?

Demand for GRC talent has outpaced supply for years now, and that shows no sign of slowing. Newcastle has quietly built a strong reputation as a Cybersecurity hub outside London, with salaries and opportunities to match. Few career paths offer this combination of job security, intellectual challenge and clear routes upward for people willing to put the work in.

This IT GRC Analyst opportunity is brought to you by The Opportunity Hub UK.

By applying, you acknowledge that The Opportunity Hub may retain your details and consider you for other suitable opportunities. You may opt out at any time.

Privacy Notice

theohub.global/privacy