About this role
Senior GRC Analyst
London City | Hybrid (2 days onsite) | International Consultancy | Permanent
Ready to shape the future of GRC?
We're partnering with an innovative international consultancy that's redefining how Governance, Risk & Compliance is delivered. Rather than treating GRC as a compliance exercise, they're embedding continuous assurance, automation and AI into the heart of security and business decision-making.
This is an opportunity for a Senior GRC Analyst who wants to move beyond traditional frameworks and play a key role in modernising security governance across both internal technology platforms and a diverse client portfolio.
What You'll Be Doing
You'll work closely with technical teams, business stakeholders and clients to build practical, risk-based security programmes that genuinely add value.
Key responsibilities include
- Leading governance, risk and compliance initiatives across multiple environments
- Implementing and maturing security frameworks including ISO 27001, NIST, CIS Controls and SOC 2
- Delivering internal and client-facing GRC projects from gap analysis through to audit readiness
- Conducting risk assessments, internal audits and compliance reviews
- Developing meaningful security metrics and reporting that support business decisions
- Driving automation and AI initiatives to improve assurance and reduce manual effort
- Enhancing third-party risk management, security policies and awareness programmes
- Influencing stakeholders across both technical and executive audiences
What We're Looking For
You'll already have solid experience working in Information Security Governance, Risk & Compliance and enjoy partnering with both technical and business teams.
You'll ideally bring
- Strong experience within a Senior GRC, Risk or Compliance role
- Practical implementation experience with ISO 27001, CIS Controls, NIST or similar frameworks
- Experience supporting audits and compliance programmes
- A strong understanding of modern IT infrastructure, cloud technologies and security principles
- Excellent stakeholder management and communication skills
- A pragmatic, risk-based approach to governance
- An interest in automation, AI and the future of GRC
Why Join?
This isn't a traditional compliance role.
You'll join a forward-thinking organisation that's investing heavily in the future of Governance, Risk & Compliance, giving you the opportunity to influence strategy, modernise assurance practices and work with cutting-edge technologies including AI and automation.
You'll be trusted to challenge the status quo, work closely with senior leadership and make a genuine impact across both internal operations and client engagements.
What's on Offer
- Hybrid working – 2 days per week in London City
- Opportunity to shape a modern GRC function
- Exposure to a broad range of technologies and industries
- Collaborative, innovative culture
- Career progression within a growing international consultancy
If you're looking for a role where you can combine technical credibility, commercial thinking and innovation to transform the way GRC is delivered, we'd love to hear from you.
About cyber security & digital forensics roles for ex-police
Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.
See all cyber security & digital forensics jobs in London →Why this fits a police background — match score 69/100
- Risk & threat assessment
- Working to legislation & regulation
What cyber security & digital forensics roles pay ex-police
Advertised UK ranges, editorial estimates reviewed July 2026
| Digital forensics analyst | £32,000–£45,000 |
| DFIR consultant | £45,000–£65,000 |
| Senior forensics / IR specialist | £60,000–£80,000 |
| Threat-intelligence specialist | £55,000–£80,000 |