Overview Senior SAP FICO Analyst position available working for a global industry leader within engineering and chemical manufacturing paying up to £80,000 plus many additional benefits! The role plays an integral part in providing a strategic and operational bridge between IT and business functions to ensure seamless design, delivery and optimisation of SAP within the FICO division. A globally leading engineering company, which specialise in the manufacture of speciality chemicals, in Warrington are seeking an experienced Senior SAP FICO Analyst to take end-to-end ownership of its SAP landscape across multiple manufacturing plants and legal entities supporting oil & gas and chemical operations. Salary and Benefits Annual Salary Between: £75,000 - £80,000 (DOE) 25 Days Annual Leave + 8 Bank Holidays Company Pension Scheme Private Medical Insurance Life Assurance Policy Free Onsite Parking The Role The role is accountable for SAP strategy, architecture, delivery, and operational stability, ensuring system integrity, data quality, regulatory compliance, and measurable business value. The Senior SAP FICO Analyst will ensure that all financial reporting and controlling modules are synced with manufacturing reality. Key Responsibilities: SAP Solution Design & Delivery: Collaborate with global finance stakeholders to design, configure, and test robust SAP solutions across FI (GL, AP, AR, AA) and CO (CCA, PCA, PC, CO-PA). Manufacturing Costing Excellence: Take ownership of Product Costing (CO-PC) and Material Ledger, ensuring accurate inventory valuation and variance analysis for our production facilities. Integration Leadership: Act as the financial anchor for the Order-to-Cash (OTC) and Procure-to-Pay (PTP) streams, ensuring seamless integration between SD, MM, and General Ledger. Process Optimization: Serve as a Business Relationship Manager (BRM), gathering IT demands from the CFO's organization, prioritizing initiatives, and recommending automation to streamline month-end closing. Qualifications A Bachelor's degree in information, systems, computer science, business or a related field. Strong background with SAP FICO (Financial Controlling). SAP Certifications (e.g. SD/MM/PP/QM/EWM/FI-CO, SAP Security, GRC) Previous experience of maintaining SAP ECC 6.0 and mastery of SD with advanced knowledge of FI, CO and MM in complex manufacturing environments. Strong background in Process Manufacturing environments. Deep functional expertise across SD, MM, PP, QM, WM/EWM, FI/CO.
15/05/2026
Full time
Overview Senior SAP FICO Analyst position available working for a global industry leader within engineering and chemical manufacturing paying up to £80,000 plus many additional benefits! The role plays an integral part in providing a strategic and operational bridge between IT and business functions to ensure seamless design, delivery and optimisation of SAP within the FICO division. A globally leading engineering company, which specialise in the manufacture of speciality chemicals, in Warrington are seeking an experienced Senior SAP FICO Analyst to take end-to-end ownership of its SAP landscape across multiple manufacturing plants and legal entities supporting oil & gas and chemical operations. Salary and Benefits Annual Salary Between: £75,000 - £80,000 (DOE) 25 Days Annual Leave + 8 Bank Holidays Company Pension Scheme Private Medical Insurance Life Assurance Policy Free Onsite Parking The Role The role is accountable for SAP strategy, architecture, delivery, and operational stability, ensuring system integrity, data quality, regulatory compliance, and measurable business value. The Senior SAP FICO Analyst will ensure that all financial reporting and controlling modules are synced with manufacturing reality. Key Responsibilities: SAP Solution Design & Delivery: Collaborate with global finance stakeholders to design, configure, and test robust SAP solutions across FI (GL, AP, AR, AA) and CO (CCA, PCA, PC, CO-PA). Manufacturing Costing Excellence: Take ownership of Product Costing (CO-PC) and Material Ledger, ensuring accurate inventory valuation and variance analysis for our production facilities. Integration Leadership: Act as the financial anchor for the Order-to-Cash (OTC) and Procure-to-Pay (PTP) streams, ensuring seamless integration between SD, MM, and General Ledger. Process Optimization: Serve as a Business Relationship Manager (BRM), gathering IT demands from the CFO's organization, prioritizing initiatives, and recommending automation to streamline month-end closing. Qualifications A Bachelor's degree in information, systems, computer science, business or a related field. Strong background with SAP FICO (Financial Controlling). SAP Certifications (e.g. SD/MM/PP/QM/EWM/FI-CO, SAP Security, GRC) Previous experience of maintaining SAP ECC 6.0 and mastery of SD with advanced knowledge of FI, CO and MM in complex manufacturing environments. Strong background in Process Manufacturing environments. Deep functional expertise across SD, MM, PP, QM, WM/EWM, FI/CO.
Rightmove is looking for a proactive Technical Project Analyst to join their Technology Risk team in Greater London. This role involves managing compliance and risk projects, translating requirements for technical teams, and ensuring an efficient integration with existing processes. Candidates should have 2-4 years of relevant experience, particularly in project management or GRC, and possess strong interpersonal and problem-solving skills. Rightmove offers a hybrid work environment and various benefits including private medical insurance and generous holiday allowances.
15/05/2026
Full time
Rightmove is looking for a proactive Technical Project Analyst to join their Technology Risk team in Greater London. This role involves managing compliance and risk projects, translating requirements for technical teams, and ensuring an efficient integration with existing processes. Candidates should have 2-4 years of relevant experience, particularly in project management or GRC, and possess strong interpersonal and problem-solving skills. Rightmove offers a hybrid work environment and various benefits including private medical insurance and generous holiday allowances.
Because we strive to put people first. Culture, our way. Technology at Primark What's a career at Primark all about? The positive impact you're making, the experiences you're having and the people you're with. You're our inspiration. Embrace what sets you apart, own your career and develop in ways you never expected. Leave your mark. And do it your way. Our technology team is actively shaping the next wave of advancements. Engaged with innovative initiatives, your expertise will propel our business into the future. Collaborating with a creative team of tech enthusiasts, you'll contribute your unique skills to fuel our technological advancements. Job Description What You'll Do as a Security Assurance Analyst In your role, you'll collaborate with different people across a range of skillsets. Here's a flavour of your day-to-day: Support assurance activities by conducting project and third party reviews, helping identify risks in project delivery and in the security posture of new and existing vendors. Maintain key repositories and tools, ensuring items like the Supplier Register, Project Assurance lists, and the Third Party Risk Management tool are complete, accurate, and up to date. Coordinate penetration testing logistics, ensuring tests are scheduled, arranged, and supported, with all required inputs and communications in place. Ensure project compliance, supporting project managers in completing required documentation on time and confirming all security controls are implemented before go live. Manage third party documentation, including collecting and reviewing SOC, PCI, and ISO 27000 certifications, and flagging outdated or missing information to vendors. Support risk tracking, collaborating with the Risk Management team to ensure all third party risks are accurately captured, monitored, and kept current in the GRC tool. Qualifications People are at the heart of what we do here, so it's essential we provide you with the right environment to perform at your very best. Let's talk lifestyle: Healthcare, pension, and potential bonus. 27 days of leave, plus bank holidays and if you want, you can buy 5 more. Because Primark is all about tailoring to you, we offer Tax Saver Tickets, fitness centre, and a subsidised cafeteria. Additional Information What You'll Bring Here at Primark, we want everyone to feel valued - so please bring your authentic self to work, of course with some other key experience and abilities for this role in particular: Strong security and risk management expertise, including hands on experience with GRC tools (e.g., OneTrust), TPRM modules, and the ability to analyse third party risks based on service offering, security posture, supporting evidence, and relevant security certifications (ISO27K, Cyber Essentials). Solid understanding of security frameworks and regulations, including ISO, NIST, GDPR, and PCI, with the ability to interpret their impact on project requirements and third party assurance activities. Knowledge of project delivery methodologies, such as Waterfall and Agile, combined with a clear understanding of security by design principles and how to embed them into project lifecycles. Penetration testing awareness, including knowledge of testing approaches and experience advising projects on remediation measures following test results. Strong analytical, organisational, and data skills, demonstrated through attention to detail, ability to present data effectively, and experience using data analytics tools like Power BI. Relevant professional background and qualifications, including a minimum of 3 years in an Information Security role with a focus on security assurance, an appropriate degree or equivalent qualification, and desirable experience working on accreditation projects (ISO27K, PCI, Cyber Essentials). Does this sound like you? Great, because we can't wait to see what you'll bring. You'll be supported within a team of equally capable people, celebrating who you are and aiding you reach your potential. At Primark, we're excited about our future - and we're excited to develop yours. About Primark At Primark, people matter. They're the beating heart of our business and the reason we've grown from our first store in Dublin in 1969 to a £9bn+ turnover business and over 80,000 colleagues and over 440 stores in 17 countries today. Our values run through everything we do. In essence, we're Caring and always strive to put people first. We're also Dynamic, bravely pushing the boundaries to stay ahead. And finally, we succeed Together. If you need any reasonable adjustments or have an accessibility request, during your recruitment journey, such as extended time or breaks between online assessments, a sign language interpreter, mobility access, or assistive technology please contact your talent acquisition specialist. All offers of employment are subject to background checks, including right to work, reference education and for some roles criminal, and financial checks. If you have any concerns, please reach out to our talent acquisition team to discuss. Our fashion isn't one size fits all and neither is our culture. Primark promotes equal employment opportunity, we strive to create an inclusive workplace where people can be themselves, access opportunities and thrive together.
15/05/2026
Full time
Because we strive to put people first. Culture, our way. Technology at Primark What's a career at Primark all about? The positive impact you're making, the experiences you're having and the people you're with. You're our inspiration. Embrace what sets you apart, own your career and develop in ways you never expected. Leave your mark. And do it your way. Our technology team is actively shaping the next wave of advancements. Engaged with innovative initiatives, your expertise will propel our business into the future. Collaborating with a creative team of tech enthusiasts, you'll contribute your unique skills to fuel our technological advancements. Job Description What You'll Do as a Security Assurance Analyst In your role, you'll collaborate with different people across a range of skillsets. Here's a flavour of your day-to-day: Support assurance activities by conducting project and third party reviews, helping identify risks in project delivery and in the security posture of new and existing vendors. Maintain key repositories and tools, ensuring items like the Supplier Register, Project Assurance lists, and the Third Party Risk Management tool are complete, accurate, and up to date. Coordinate penetration testing logistics, ensuring tests are scheduled, arranged, and supported, with all required inputs and communications in place. Ensure project compliance, supporting project managers in completing required documentation on time and confirming all security controls are implemented before go live. Manage third party documentation, including collecting and reviewing SOC, PCI, and ISO 27000 certifications, and flagging outdated or missing information to vendors. Support risk tracking, collaborating with the Risk Management team to ensure all third party risks are accurately captured, monitored, and kept current in the GRC tool. Qualifications People are at the heart of what we do here, so it's essential we provide you with the right environment to perform at your very best. Let's talk lifestyle: Healthcare, pension, and potential bonus. 27 days of leave, plus bank holidays and if you want, you can buy 5 more. Because Primark is all about tailoring to you, we offer Tax Saver Tickets, fitness centre, and a subsidised cafeteria. Additional Information What You'll Bring Here at Primark, we want everyone to feel valued - so please bring your authentic self to work, of course with some other key experience and abilities for this role in particular: Strong security and risk management expertise, including hands on experience with GRC tools (e.g., OneTrust), TPRM modules, and the ability to analyse third party risks based on service offering, security posture, supporting evidence, and relevant security certifications (ISO27K, Cyber Essentials). Solid understanding of security frameworks and regulations, including ISO, NIST, GDPR, and PCI, with the ability to interpret their impact on project requirements and third party assurance activities. Knowledge of project delivery methodologies, such as Waterfall and Agile, combined with a clear understanding of security by design principles and how to embed them into project lifecycles. Penetration testing awareness, including knowledge of testing approaches and experience advising projects on remediation measures following test results. Strong analytical, organisational, and data skills, demonstrated through attention to detail, ability to present data effectively, and experience using data analytics tools like Power BI. Relevant professional background and qualifications, including a minimum of 3 years in an Information Security role with a focus on security assurance, an appropriate degree or equivalent qualification, and desirable experience working on accreditation projects (ISO27K, PCI, Cyber Essentials). Does this sound like you? Great, because we can't wait to see what you'll bring. You'll be supported within a team of equally capable people, celebrating who you are and aiding you reach your potential. At Primark, we're excited about our future - and we're excited to develop yours. About Primark At Primark, people matter. They're the beating heart of our business and the reason we've grown from our first store in Dublin in 1969 to a £9bn+ turnover business and over 80,000 colleagues and over 440 stores in 17 countries today. Our values run through everything we do. In essence, we're Caring and always strive to put people first. We're also Dynamic, bravely pushing the boundaries to stay ahead. And finally, we succeed Together. If you need any reasonable adjustments or have an accessibility request, during your recruitment journey, such as extended time or breaks between online assessments, a sign language interpreter, mobility access, or assistive technology please contact your talent acquisition specialist. All offers of employment are subject to background checks, including right to work, reference education and for some roles criminal, and financial checks. If you have any concerns, please reach out to our talent acquisition team to discuss. Our fashion isn't one size fits all and neither is our culture. Primark promotes equal employment opportunity, we strive to create an inclusive workplace where people can be themselves, access opportunities and thrive together.
Our vision is to give everyone the belief they can make their move. We aim to make moving simpler by providing the best place to turn to for access to tools, expertise, trust, and belief to make it happen. Technical Project Analyst The role We are seeking a proactive and detail oriented Technical Project Analyst to join our Technology Risk team. This is a vital, hands on role supporting the Head of Technology Risk and Delivery Assurance in executing our wider tech risk roadmap and maintaining a secure, compliant environment. This role requires a confident communicator who is comfortable owning projects and motivated to establish themselves within the fields of GRC (governance, risk & compliance) and information security. As a Technical Project Analyst, you will play a pivotal role in the day to day implementation and management of key systems and processes at Rightmove. A significant part of the role involves acting as a bridge between compliance requirements and our technical teams. You will be responsible for implementing and running governance and security projects, translating requirements into actionable outputs that embed seamlessly into our product and engineering workflows. This is an excellent opportunity for a tech savvy professional to help foster a culture where compliance enables, rather than hinders, product development. What you'll be doing Implementation of critical projects: Deliver large scale updates to processes and systems across multiple departments. Engineering translation: Act as a liaison between security/compliance functions and technology teams, translating GRC requirements into clear technical specifications, user stories, and actionable tickets. Risk assessments & audits: Support internal and external audits, identify vulnerabilities, and collaborate with technical teams to implement appropriate controls. Delivery support: Contribute to the Technology Risk strategy by rolling out frameworks, tracking metrics, and embedding automated compliance practices into workflows. Process integration: Work closely with engineering teams to integrate compliance requirements into existing ways of working (e.g. Agile/Jira), ensuring a frictionless approach to GRC. System resilience: Support due diligence on software, technical partners, and business continuity processes to strengthen system resilience. We're looking for someone with Collaboration and communication: Strong interpersonal skills with the ability to work effectively across technical, compliance, and legal teams. Project management fundamentals: Experience working in software environments, managing project lifecycles and stakeholders. Technical fluency: A solid understanding of modern technology teams and development processes, with the ability to translate complex compliance risks into developer friendly language. Pragmatic mindset: A problem solving approach, balancing robust security requirements with efficient product delivery. Process focus: Ability to understand technical workflows and design compliance processes that enhance rather than disrupt team efficiency. What you'll bring to the role Demonstrable experience (typically 2-4 years) in a project management, GRC, or security related role. Familiarity with information security, privacy, or compliance based projects. Experience reporting to stakeholders at all levels of the business. Familiarity with Agile tools (e.g. Jira) and embedding requirements into development backlogs. A proactive, results oriented mindset with a passion for building strong team cultures. Nice to have Hands on experience with security frameworks such as ISO 27001 or SOC 2. What we offer Cash plan for dental, optical and physiotherapy treatments. Private Medical Insurance, Pension and Life Insurance, Employee Assistance Plan. 27 days holiday plus two paid volunteering days a year, and holiday buy schemes. Contributory stakeholder pension. Life assurance at 4 your basic salary to a spouse, family member or other nominated person. Competitive compensation package. Paid leave for maternity, paternity, adoption & fertility. Travel Loans, Bike to Work scheme, Rental Deposit Loan. Charitable contributions through Payroll Giving and donation matching. Access deals and discounts on travel, electronics, fashion, gym memberships, cinema discounts and more. Hybrid working with a minimum of 2 days in the office. Equal Opportunity Employer As an Equal Opportunity Employer, Rightmove will never discriminate based on age, disability, sex, race, religion or belief, gender reassignment, marriage/civil partnership, pregnancy/maternity or sexual orientation. At Rightmove, we believe that a diverse and inclusive workforce leads to better innovation, productivity, and overall success. We are committed to creating a welcoming and inclusive environment for all employees, regardless of their background or identity, to develop and promote a diverse culture that reflects the communities we serve.
15/05/2026
Full time
Our vision is to give everyone the belief they can make their move. We aim to make moving simpler by providing the best place to turn to for access to tools, expertise, trust, and belief to make it happen. Technical Project Analyst The role We are seeking a proactive and detail oriented Technical Project Analyst to join our Technology Risk team. This is a vital, hands on role supporting the Head of Technology Risk and Delivery Assurance in executing our wider tech risk roadmap and maintaining a secure, compliant environment. This role requires a confident communicator who is comfortable owning projects and motivated to establish themselves within the fields of GRC (governance, risk & compliance) and information security. As a Technical Project Analyst, you will play a pivotal role in the day to day implementation and management of key systems and processes at Rightmove. A significant part of the role involves acting as a bridge between compliance requirements and our technical teams. You will be responsible for implementing and running governance and security projects, translating requirements into actionable outputs that embed seamlessly into our product and engineering workflows. This is an excellent opportunity for a tech savvy professional to help foster a culture where compliance enables, rather than hinders, product development. What you'll be doing Implementation of critical projects: Deliver large scale updates to processes and systems across multiple departments. Engineering translation: Act as a liaison between security/compliance functions and technology teams, translating GRC requirements into clear technical specifications, user stories, and actionable tickets. Risk assessments & audits: Support internal and external audits, identify vulnerabilities, and collaborate with technical teams to implement appropriate controls. Delivery support: Contribute to the Technology Risk strategy by rolling out frameworks, tracking metrics, and embedding automated compliance practices into workflows. Process integration: Work closely with engineering teams to integrate compliance requirements into existing ways of working (e.g. Agile/Jira), ensuring a frictionless approach to GRC. System resilience: Support due diligence on software, technical partners, and business continuity processes to strengthen system resilience. We're looking for someone with Collaboration and communication: Strong interpersonal skills with the ability to work effectively across technical, compliance, and legal teams. Project management fundamentals: Experience working in software environments, managing project lifecycles and stakeholders. Technical fluency: A solid understanding of modern technology teams and development processes, with the ability to translate complex compliance risks into developer friendly language. Pragmatic mindset: A problem solving approach, balancing robust security requirements with efficient product delivery. Process focus: Ability to understand technical workflows and design compliance processes that enhance rather than disrupt team efficiency. What you'll bring to the role Demonstrable experience (typically 2-4 years) in a project management, GRC, or security related role. Familiarity with information security, privacy, or compliance based projects. Experience reporting to stakeholders at all levels of the business. Familiarity with Agile tools (e.g. Jira) and embedding requirements into development backlogs. A proactive, results oriented mindset with a passion for building strong team cultures. Nice to have Hands on experience with security frameworks such as ISO 27001 or SOC 2. What we offer Cash plan for dental, optical and physiotherapy treatments. Private Medical Insurance, Pension and Life Insurance, Employee Assistance Plan. 27 days holiday plus two paid volunteering days a year, and holiday buy schemes. Contributory stakeholder pension. Life assurance at 4 your basic salary to a spouse, family member or other nominated person. Competitive compensation package. Paid leave for maternity, paternity, adoption & fertility. Travel Loans, Bike to Work scheme, Rental Deposit Loan. Charitable contributions through Payroll Giving and donation matching. Access deals and discounts on travel, electronics, fashion, gym memberships, cinema discounts and more. Hybrid working with a minimum of 2 days in the office. Equal Opportunity Employer As an Equal Opportunity Employer, Rightmove will never discriminate based on age, disability, sex, race, religion or belief, gender reassignment, marriage/civil partnership, pregnancy/maternity or sexual orientation. At Rightmove, we believe that a diverse and inclusive workforce leads to better innovation, productivity, and overall success. We are committed to creating a welcoming and inclusive environment for all employees, regardless of their background or identity, to develop and promote a diverse culture that reflects the communities we serve.
As one of the Best Big Companies to Work For, we have a rich history of loving our customers and looking after our teams. We understand that success is achieved through our people, and we are searching for an experienced and proactive Information Governance Analyst to join our Cyber Security team. The successful candidate will report to the Cyber Governance, Risk, and Compliance (GRC) Manager and will play a key role in ensuring the effective governance of Iceland's information assets. This includes information retention, identification, categorisation, applying appropriate security controls, and monitoring compliance with policies and standards. The primary tool for this role will be Microsoft Purview, so experience with this platform is essential. You will work closely with stakeholders across the business to ensure that information is managed securely and in line with regulatory and organisational requirements. This role is based in our Deeside head office, with a minimum of 2 days per week spent working from here. Specific skills and capabilities we are looking for: Essential Strong understanding of information governance principles, including retention, classification, and security. Demonstrable skills in all aspects of Microsoft Purview. Ability to write and maintain documentation and reports. Excellent attention to detail and organisational skills. Strong interpersonal and communication skills. Desirable Familiarity with data protection regulations. Experience in implementing information governance policies and procedures. Ability to work collaboratively with technical and non-technical teams. Certifications such as CIPM, CIPP/E, or similar information governance credentials. What to expect from us: 15% discount in Iceland stores 30% discount at Club Individual Restaurants 33 days holiday (including bank holidays) Free onsite parking Onsite electric car charging ports Subsidised staff restaurant and Costa Coffee Christmas vouchers Refer a Friend Scheme Christmas Savings scheme Discounted dry cleaning Long service awards
15/05/2026
Full time
As one of the Best Big Companies to Work For, we have a rich history of loving our customers and looking after our teams. We understand that success is achieved through our people, and we are searching for an experienced and proactive Information Governance Analyst to join our Cyber Security team. The successful candidate will report to the Cyber Governance, Risk, and Compliance (GRC) Manager and will play a key role in ensuring the effective governance of Iceland's information assets. This includes information retention, identification, categorisation, applying appropriate security controls, and monitoring compliance with policies and standards. The primary tool for this role will be Microsoft Purview, so experience with this platform is essential. You will work closely with stakeholders across the business to ensure that information is managed securely and in line with regulatory and organisational requirements. This role is based in our Deeside head office, with a minimum of 2 days per week spent working from here. Specific skills and capabilities we are looking for: Essential Strong understanding of information governance principles, including retention, classification, and security. Demonstrable skills in all aspects of Microsoft Purview. Ability to write and maintain documentation and reports. Excellent attention to detail and organisational skills. Strong interpersonal and communication skills. Desirable Familiarity with data protection regulations. Experience in implementing information governance policies and procedures. Ability to work collaboratively with technical and non-technical teams. Certifications such as CIPM, CIPP/E, or similar information governance credentials. What to expect from us: 15% discount in Iceland stores 30% discount at Club Individual Restaurants 33 days holiday (including bank holidays) Free onsite parking Onsite electric car charging ports Subsidised staff restaurant and Costa Coffee Christmas vouchers Refer a Friend Scheme Christmas Savings scheme Discounted dry cleaning Long service awards
IT Projects Manager Peterborough (Hybrid 2 3 days onsite with travel to London and national school sites) £50,000 £56,000 Education / Multi-Academy Trust An established education organisation is expanding its central technology team and is looking for an IT Projects Manager to support a major programme of IT transformation across a large network of schools in England. The role will focus on delivering and coordinating large-scale IT projects, supporting the onboarding of new schools into the group, and helping drive a long-term IT strategy across a predominantly cloud-based environment. Key Responsibilities Lead the delivery of IT projects across a large multi-site education environment. Coordinate the technical onboarding and integration of new schools into the organisation s IT estate. Work closely with transformation programme teams to align technical project delivery with wider organisational initiatives. Support major IT procurement projects and vendor engagement. Ensure projects are delivered on time, within scope, and aligned to operational standards. Contribute to improving IT processes and operational approaches to ensure scalability across a growing organisation. Engage with school stakeholders and central teams to gather requirements and translate them into structured project plans. Support technical teams where required with an understanding of infrastructure, cloud platforms, and end-user environments. Proven experience delivering IT projects within a Multi-Academy Trust (MAT), Single Academy Trust (SAT), or school environment. Strong project management experience with PRINCE2, Agile, or similar methodologies. Solid technical understanding comparable to a school Network Manager level, with the ability to engage with technical teams and systems. Experience working within Microsoft cloud environments including Azure, Entra ID, Microsoft 365 and Microsoft Teams. Strong stakeholder engagement, communication, and planning skills. Apply today to speak with VIQU in confidence or contact Noah Yeoman at (url removed). Know someone exceptional for this GRC Analyst position? Refer them and receive up to £1,000 if successful (terms apply). Follow us on IT Recruitment for more exciting opportunities.
11/05/2026
Full time
IT Projects Manager Peterborough (Hybrid 2 3 days onsite with travel to London and national school sites) £50,000 £56,000 Education / Multi-Academy Trust An established education organisation is expanding its central technology team and is looking for an IT Projects Manager to support a major programme of IT transformation across a large network of schools in England. The role will focus on delivering and coordinating large-scale IT projects, supporting the onboarding of new schools into the group, and helping drive a long-term IT strategy across a predominantly cloud-based environment. Key Responsibilities Lead the delivery of IT projects across a large multi-site education environment. Coordinate the technical onboarding and integration of new schools into the organisation s IT estate. Work closely with transformation programme teams to align technical project delivery with wider organisational initiatives. Support major IT procurement projects and vendor engagement. Ensure projects are delivered on time, within scope, and aligned to operational standards. Contribute to improving IT processes and operational approaches to ensure scalability across a growing organisation. Engage with school stakeholders and central teams to gather requirements and translate them into structured project plans. Support technical teams where required with an understanding of infrastructure, cloud platforms, and end-user environments. Proven experience delivering IT projects within a Multi-Academy Trust (MAT), Single Academy Trust (SAT), or school environment. Strong project management experience with PRINCE2, Agile, or similar methodologies. Solid technical understanding comparable to a school Network Manager level, with the ability to engage with technical teams and systems. Experience working within Microsoft cloud environments including Azure, Entra ID, Microsoft 365 and Microsoft Teams. Strong stakeholder engagement, communication, and planning skills. Apply today to speak with VIQU in confidence or contact Noah Yeoman at (url removed). Know someone exceptional for this GRC Analyst position? Refer them and receive up to £1,000 if successful (terms apply). Follow us on IT Recruitment for more exciting opportunities.
GRC Analyst Information Security London Hybrid £50,000 - £55,000 + Bonus VIQU has partnered with a leading transport organisation to recruit a GRC Analyst to join their Finance and Information Security team. This is a fantastic opportunity for a GRC Analyst to take ownership of established governance frameworks, policies, and risk processes within a highly regulated environment. The GRC Analyst will play a key role in maintaining compliance, supporting audits, and embedding a strong risk-aware culture across the business. Key Responsibilities of the GRC Analyst: Support and maintain the organisation s risk management framework, including risk identification, assessment, and monitoring Facilitate risk assessments across business units and support mitigation planning Monitor risk trends, control effectiveness, and emerging threats, providing insights to senior stakeholders Support compliance programmes, ensuring adherence to regulatory and industry standards (e.g. ISO27001, NIST CSF) Coordinate internal and external audits, including evidence gathering and action tracking Contribute to governance policies, standards, and procedures development and review Produce clear governance and risk reports for leadership teams Support governance and assurance of technology change management processes Assist with risk, compliance, and security awareness initiatives across the organisation Key Requirements of the GRC Analyst: 4 5 years experience in governance, risk, or compliance roles within regulated or critical environments Strong understanding of frameworks such as ISO27001 and NIST CSF Experience supporting audits, compliance reporting, and evidence management Ability to interpret regulatory requirements into practical controls and processes Excellent communication and stakeholder engagement skills Strong organisational skills with the ability to manage multiple priorities Experience within regulated sectors such as transport, utilities, financial services, or government Exposure to Operational Technology (OT) or Industrial Control Systems (ICS) (desirable) Relevant certifications (ISO27001 Lead Implementer/Auditor, CISMP, CRISC, CISM) (desirable) Degree in Information Security, Risk, Business, Law, or equivalent experience Additional Information: Hybrid working: Initially 5 days onsite, reducing to 3 days onsite after probation 5% bonus 10% pension contribution Free Zone 1 6 travel for you and a nominated household member 75% discount on National Rail season tickets Interview process: 2 stages (Face-to-face and virtual) Apply today to speak with VIQU in confidence or contact Noah Yeoman at (url removed). Know someone exceptional for this GRC Analyst position? Refer them and receive up to £1,000 if successful (terms apply). Follow us on IT Recruitment for more exciting opportunities.
11/05/2026
Full time
GRC Analyst Information Security London Hybrid £50,000 - £55,000 + Bonus VIQU has partnered with a leading transport organisation to recruit a GRC Analyst to join their Finance and Information Security team. This is a fantastic opportunity for a GRC Analyst to take ownership of established governance frameworks, policies, and risk processes within a highly regulated environment. The GRC Analyst will play a key role in maintaining compliance, supporting audits, and embedding a strong risk-aware culture across the business. Key Responsibilities of the GRC Analyst: Support and maintain the organisation s risk management framework, including risk identification, assessment, and monitoring Facilitate risk assessments across business units and support mitigation planning Monitor risk trends, control effectiveness, and emerging threats, providing insights to senior stakeholders Support compliance programmes, ensuring adherence to regulatory and industry standards (e.g. ISO27001, NIST CSF) Coordinate internal and external audits, including evidence gathering and action tracking Contribute to governance policies, standards, and procedures development and review Produce clear governance and risk reports for leadership teams Support governance and assurance of technology change management processes Assist with risk, compliance, and security awareness initiatives across the organisation Key Requirements of the GRC Analyst: 4 5 years experience in governance, risk, or compliance roles within regulated or critical environments Strong understanding of frameworks such as ISO27001 and NIST CSF Experience supporting audits, compliance reporting, and evidence management Ability to interpret regulatory requirements into practical controls and processes Excellent communication and stakeholder engagement skills Strong organisational skills with the ability to manage multiple priorities Experience within regulated sectors such as transport, utilities, financial services, or government Exposure to Operational Technology (OT) or Industrial Control Systems (ICS) (desirable) Relevant certifications (ISO27001 Lead Implementer/Auditor, CISMP, CRISC, CISM) (desirable) Degree in Information Security, Risk, Business, Law, or equivalent experience Additional Information: Hybrid working: Initially 5 days onsite, reducing to 3 days onsite after probation 5% bonus 10% pension contribution Free Zone 1 6 travel for you and a nominated household member 75% discount on National Rail season tickets Interview process: 2 stages (Face-to-face and virtual) Apply today to speak with VIQU in confidence or contact Noah Yeoman at (url removed). Know someone exceptional for this GRC Analyst position? Refer them and receive up to £1,000 if successful (terms apply). Follow us on IT Recruitment for more exciting opportunities.
Jacobs Engineering Group Inc.
Manchester, Lancashire
At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission critical outcomes, operational advancement, scientific discovery and cutting edge manufacturing, turning abstract ideas into realities that transform the world for good. Your impact: As a highly experienced Cyber professional, you'll operate across the full lifecycle of IT security engineering - shaping strategy, defining solutions, and rolling up your sleeves to deliver them, being both hands on & a trusted advisor, blending theory, governance, threat hunting and practical delivery into one. To support our success and growth a number of new roles have been created throughout the UK. From early design through to live operations, you'll lead and influence security decisions that matter, with a remit that will include: Responsibilities Design, integration, and security testing of cybersecurity solutions, response, recovery & vulnerability plans. Act as design authority for secure system lifecycles, access control, authentication, encryption, backup, disaster recovery, and incident response. Develop cybersecurity assessment methodologies, identifying security requirements for auditing, monitoring and compliance. Develop and implement robust security risk management processes in collaboration with clients and regulatory authorities. Conduct security reviews, threat & technical assessment, audits and gap analysis. Contribute subject matter expert input to business development activities, proposals etc. Maintain up to date knowledge of relevant IT security standards, regulations, and emerging threats. Qualifications Demonstrable experience in IT cybersecurity ideally within CNI or industrial/operational environments. Strong understanding of IT technologies used across CNI sectors (servers, container services, networking, cloud, hosting, storage and security appliances). Experience with security engineering technologies (endpoint protection, firewalls, IPS, API). Understanding of cybersecurity, I.T security services provided in enterprise & their inter relationships (security architecture, GRC, SOC, analyst & forensic services). Understanding of cloud edge connectivity and security, including security baseline considerations for hybrid & multi cloud environments. Familiar with implementing and working with standards and frameworks (IEC 62443, NIST CSF, ISO 27000 series, MITRE ATT&CK, GDPR, NCSC CAF and NIS/NIS2 regulations). Ability to explain threat based and risk informed security considerations in clear business terms. NM1 As a disability confident employer, we will interview disabled candidates who best meet the criteria. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role.
10/05/2026
Full time
At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission critical outcomes, operational advancement, scientific discovery and cutting edge manufacturing, turning abstract ideas into realities that transform the world for good. Your impact: As a highly experienced Cyber professional, you'll operate across the full lifecycle of IT security engineering - shaping strategy, defining solutions, and rolling up your sleeves to deliver them, being both hands on & a trusted advisor, blending theory, governance, threat hunting and practical delivery into one. To support our success and growth a number of new roles have been created throughout the UK. From early design through to live operations, you'll lead and influence security decisions that matter, with a remit that will include: Responsibilities Design, integration, and security testing of cybersecurity solutions, response, recovery & vulnerability plans. Act as design authority for secure system lifecycles, access control, authentication, encryption, backup, disaster recovery, and incident response. Develop cybersecurity assessment methodologies, identifying security requirements for auditing, monitoring and compliance. Develop and implement robust security risk management processes in collaboration with clients and regulatory authorities. Conduct security reviews, threat & technical assessment, audits and gap analysis. Contribute subject matter expert input to business development activities, proposals etc. Maintain up to date knowledge of relevant IT security standards, regulations, and emerging threats. Qualifications Demonstrable experience in IT cybersecurity ideally within CNI or industrial/operational environments. Strong understanding of IT technologies used across CNI sectors (servers, container services, networking, cloud, hosting, storage and security appliances). Experience with security engineering technologies (endpoint protection, firewalls, IPS, API). Understanding of cybersecurity, I.T security services provided in enterprise & their inter relationships (security architecture, GRC, SOC, analyst & forensic services). Understanding of cloud edge connectivity and security, including security baseline considerations for hybrid & multi cloud environments. Familiar with implementing and working with standards and frameworks (IEC 62443, NIST CSF, ISO 27000 series, MITRE ATT&CK, GDPR, NCSC CAF and NIS/NIS2 regulations). Ability to explain threat based and risk informed security considerations in clear business terms. NM1 As a disability confident employer, we will interview disabled candidates who best meet the criteria. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role.
LOA Program Analyst Country/Region: GB Connect with Eutelsat Be part of a new era in communications, transforming connectivity with Eutelsat - the world's first GEO-LEO integrated global satellite operator. As a leader in satellite communications, we provide global connectivity solutions - connecting businesses, communities, and governments around the world. We can connect you at on land, at sea and in the air. We also deliver broadcast television channels and packages, transmitting vital news reports around the world. With Eutelsat You'll Get To: Pioneer the future of Space Technology Bring connectivity to remote frontiers Collaborate with customer-centric experts Embrace cultural diversity in our global team In a dynamic industry where passion drives our teams to make a difference to become the most trusted partner for global satellite connectivity, you will elevate your skills in a stretching, rewarding, and meaningful environment. At Eutelsat, we're united by inclusion and diversity, striving for gender balance and social responsibility, on Earth and in Space. Why Eutelsat ? Commitment to Diversity & Inclusion: With colleagues from over 75 countries, we embrace our global DNA and are committed to creating an inclusive workplace. We are proud that one-third of our executive team and 60% of our board are represented by women. Ways of Working That Drive Us: As "One Team," we work collaboratively towards shared goals, with customer-centricity, respect, and inclusivity as our guiding principles. Sustainability at Our Core: At Eutelsat, sustainability is more than just a word; it's woven into our strategy. We're dedicated to balancing social, environmental, and economic growth - both on Earth and in space. Work-Life Balance: We offer flexible schedules and hybrid work options to help you balance your personal and professional life. At Eutelsat, we are committed to supporting your well being and ensuring you have the flexibility you need to succeed both at work and at home. Ready to grow with us? Apply today and help us build a more inclusive, sustainable future in the world of satellite technology Who You Are: The Letter of Agreement (LOA) with the United States Government is a critical security compliance program for Eutelsat. The LOA Program Analyst is the program's data steward and front-door triage. They manage intake and routing of submissions, requests, and communications (e.g., evidence uploads, change/exception forms, incident/lawful-process notices, vendor documents), perform initial quality checks (completeness, correctness, linkage to Control ID and LOA Clause ID), and triage items to the right owners against SLAs-acknowledging receipt, tracking status, and closing the loop with clear updates. They maintain authoritative program registers (obligations, risk, POA&M, case, change, asset/vendor, data flows, etc), enforce data-quality rules, and ensure evidence is captured as work is done and is discoverable for audits, exercises, and management review. Operationally, the analyst builds and automates dashboards and reports for Program and Executive Steering Committees (KPIs/KRIs, clause coverage, audit/incident heatmaps, POA&M burn-down), preserves traceability of artifacts and flags anomalies or control-health issues for escalation to the LOA PM, Security Officer and Control Owners. The LOA Program Analyst standardize intake forms and comms templates, manage queues (service desk/GRC tools), coordinate with Domain Owners, Legal/LEPOC, and SCRM on data needs, and support evidence packages for reports, audits, authorizations and re-authorizations- keeping the program's information flow timely, accurate, and decision-ready. What You'll Do: Conducts day-to-day data processing activities for the LOA (Intake and Update) Maintains all data repositories and updates as actions or compliance submissions occur Maintains Bodies of Evidence (BoE) of assurance activities mapping artifacts to clauses in repositories and maintaining registers for accuracy as changes occur Provide evidence, artifacts and audit packs to LOA Security Officer and audit teams Support generation of reports and briefing material About you: At least 6-10 years' experience in a diverse portfolio of projects and analytics Strong interpersonal skills and ability to manage cross-functional internal stakeholders Strong analytical skills and high proficiency in PMO tools, MS Excel, Confluence, JIRA, Power BI, MS SharePoint Ability to analyze large volumes of data and present this in a clear and concise manner Exposure to Security and compliance programs Experience in Space Tech/ Satellite Telecom/ IT/ Telecommunication infrastructure or operator areas (desired) Educational background: Engineering/ Business management/ Economics/ Finance/ MBA Professional qualification: PMP/ Prince2/ NIS2/ ISO 27001 (desired but not essential) Location:London, UK. Eutelsat treats the protection of personal data submitted to it seriously. By submitting this application, you agree to the collection and retention of your personal data by Eutelsat and acknowledge notice of, and understand the terms of Eutelsat's Privacy Policy (as amended from time to time). This role is a Eutelsat job opening; all of our open roles are posted on the current OneWeb and Eutelsat websites. Please note that when you are applying, your application may be seen by both teams.
07/05/2026
Full time
LOA Program Analyst Country/Region: GB Connect with Eutelsat Be part of a new era in communications, transforming connectivity with Eutelsat - the world's first GEO-LEO integrated global satellite operator. As a leader in satellite communications, we provide global connectivity solutions - connecting businesses, communities, and governments around the world. We can connect you at on land, at sea and in the air. We also deliver broadcast television channels and packages, transmitting vital news reports around the world. With Eutelsat You'll Get To: Pioneer the future of Space Technology Bring connectivity to remote frontiers Collaborate with customer-centric experts Embrace cultural diversity in our global team In a dynamic industry where passion drives our teams to make a difference to become the most trusted partner for global satellite connectivity, you will elevate your skills in a stretching, rewarding, and meaningful environment. At Eutelsat, we're united by inclusion and diversity, striving for gender balance and social responsibility, on Earth and in Space. Why Eutelsat ? Commitment to Diversity & Inclusion: With colleagues from over 75 countries, we embrace our global DNA and are committed to creating an inclusive workplace. We are proud that one-third of our executive team and 60% of our board are represented by women. Ways of Working That Drive Us: As "One Team," we work collaboratively towards shared goals, with customer-centricity, respect, and inclusivity as our guiding principles. Sustainability at Our Core: At Eutelsat, sustainability is more than just a word; it's woven into our strategy. We're dedicated to balancing social, environmental, and economic growth - both on Earth and in space. Work-Life Balance: We offer flexible schedules and hybrid work options to help you balance your personal and professional life. At Eutelsat, we are committed to supporting your well being and ensuring you have the flexibility you need to succeed both at work and at home. Ready to grow with us? Apply today and help us build a more inclusive, sustainable future in the world of satellite technology Who You Are: The Letter of Agreement (LOA) with the United States Government is a critical security compliance program for Eutelsat. The LOA Program Analyst is the program's data steward and front-door triage. They manage intake and routing of submissions, requests, and communications (e.g., evidence uploads, change/exception forms, incident/lawful-process notices, vendor documents), perform initial quality checks (completeness, correctness, linkage to Control ID and LOA Clause ID), and triage items to the right owners against SLAs-acknowledging receipt, tracking status, and closing the loop with clear updates. They maintain authoritative program registers (obligations, risk, POA&M, case, change, asset/vendor, data flows, etc), enforce data-quality rules, and ensure evidence is captured as work is done and is discoverable for audits, exercises, and management review. Operationally, the analyst builds and automates dashboards and reports for Program and Executive Steering Committees (KPIs/KRIs, clause coverage, audit/incident heatmaps, POA&M burn-down), preserves traceability of artifacts and flags anomalies or control-health issues for escalation to the LOA PM, Security Officer and Control Owners. The LOA Program Analyst standardize intake forms and comms templates, manage queues (service desk/GRC tools), coordinate with Domain Owners, Legal/LEPOC, and SCRM on data needs, and support evidence packages for reports, audits, authorizations and re-authorizations- keeping the program's information flow timely, accurate, and decision-ready. What You'll Do: Conducts day-to-day data processing activities for the LOA (Intake and Update) Maintains all data repositories and updates as actions or compliance submissions occur Maintains Bodies of Evidence (BoE) of assurance activities mapping artifacts to clauses in repositories and maintaining registers for accuracy as changes occur Provide evidence, artifacts and audit packs to LOA Security Officer and audit teams Support generation of reports and briefing material About you: At least 6-10 years' experience in a diverse portfolio of projects and analytics Strong interpersonal skills and ability to manage cross-functional internal stakeholders Strong analytical skills and high proficiency in PMO tools, MS Excel, Confluence, JIRA, Power BI, MS SharePoint Ability to analyze large volumes of data and present this in a clear and concise manner Exposure to Security and compliance programs Experience in Space Tech/ Satellite Telecom/ IT/ Telecommunication infrastructure or operator areas (desired) Educational background: Engineering/ Business management/ Economics/ Finance/ MBA Professional qualification: PMP/ Prince2/ NIS2/ ISO 27001 (desired but not essential) Location:London, UK. Eutelsat treats the protection of personal data submitted to it seriously. By submitting this application, you agree to the collection and retention of your personal data by Eutelsat and acknowledge notice of, and understand the terms of Eutelsat's Privacy Policy (as amended from time to time). This role is a Eutelsat job opening; all of our open roles are posted on the current OneWeb and Eutelsat websites. Please note that when you are applying, your application may be seen by both teams.
JD Group Plc is looking for a GRC Analyst in Bury St Edmunds to ensure effective testing of IT General Controls and cybersecurity effectiveness. The role involves working with various teams to identify control gaps, support audits, and develop assurance reports. Ideal candidates will have 2-5 years of experience in controls testing or IT audit, alongside relevant certifications and a solid understanding of cybersecurity controls. A competitive benefits package, including staff discounts, is offered.
04/05/2026
Full time
JD Group Plc is looking for a GRC Analyst in Bury St Edmunds to ensure effective testing of IT General Controls and cybersecurity effectiveness. The role involves working with various teams to identify control gaps, support audits, and develop assurance reports. Ideal candidates will have 2-5 years of experience in controls testing or IT audit, alongside relevant certifications and a solid understanding of cybersecurity controls. A competitive benefits package, including staff discounts, is offered.
Solus Accident Repair Centres Company
Stansted, Essex
Overview At Solus, we are strengthening our technology governance and cyber resilience as we continue to grow. We are looking for an IT Governance, Risk and Compliance (GRC) Analyst to help us maintain a secure, well governed and compliant technology environment across the business. This is a great role for someone who enjoys analysing detail, challenging constructively, influencing stakeholders and helping teams make confident, risk based decisions. About the role As our IT GRC Analyst, you will support the Cyber Security, Risk and Assurance function with a mixture of governance activity, assurance reviews, supplier assessments and compliance oversight. You will help us meet Aviva Group requirements, regulatory expectations and industry standards while ensuring our technology risks are understood and well managed. Location: Hybrid (Stansted - 3 days per week, 2 days remote) Responsibilities Maintain and improve our IT risk register, ensuring risks are clear, evidenced and tracked Support risk owners with guidance on controls, remediation and governance requirements Complete compliance reviews, control testing and assurance activities Produce risk and compliance reporting for leadership forums Carry out supplier assurance assessments, recommend improvements and elevate risk where needed Keep IT policies and standards up to date and aligned with Aviva and recognised frameworks Provide clear insight to non technical colleagues on risk, controls and potential impacts Support Group assurance activity and represent Solus in relevant forums This is an individual contributor role with a high level of ownership and plenty of opportunity to influence how we operate. Qualifications You will thrive in this role if you have: Knowledge of GRC frameworks such as ISO 27001, NIST CSF, Cyber Essentials or DPA Experience in risk management, governance or cyber/security assurance The ability to analyse complex information and turn it into clear, meaningful insight Confidence challenging and advising colleagues at all levels Strong communication and stakeholder management skills Certifications such as CISM, CRISC or CGRC are desirable but not essential. Who are Solus? Solus, who are owned by Aviva, are one of the UK leaders in vehicle repairs, returning cars to the road in just 11 days on average and a 4.6/5 star customer rating. With an award winning apprenticeship programme and winners of other recognised industry awards Solus are proud to be shaping the future of vehicle repair. Why Join Solus? We have so much to offer when it comes to being a Solus colleague: Competitive salary based on location, skills, experience, and qualifications. Bonus opportunity tied to your performance and the overall success of Solus. Company pension scheme with employer contributions. 33 days' holiday (including bank holidays), with the option to buy or sell up to 5 days. Save money with up to 40% discount on Aviva products and other retailer discounts. Share in Aviva's success through the Aviva Save As You Earn scheme. Supportive policies including parental and carer's leave. Wellbeing focus with tools like Group Income Protection and 24/7 GP access. At Solus, we value inclusivity and welcome all applicants. If you're excited but don't tick every box, we encourage you to apply-your unique skills might be just what we need. We guarantee an interview for disabled applicants meeting the minimum criteria-just email us after applying to let us know. Ready to join us? Apply online today, and our team will be in touch within 14 days.
04/05/2026
Full time
Overview At Solus, we are strengthening our technology governance and cyber resilience as we continue to grow. We are looking for an IT Governance, Risk and Compliance (GRC) Analyst to help us maintain a secure, well governed and compliant technology environment across the business. This is a great role for someone who enjoys analysing detail, challenging constructively, influencing stakeholders and helping teams make confident, risk based decisions. About the role As our IT GRC Analyst, you will support the Cyber Security, Risk and Assurance function with a mixture of governance activity, assurance reviews, supplier assessments and compliance oversight. You will help us meet Aviva Group requirements, regulatory expectations and industry standards while ensuring our technology risks are understood and well managed. Location: Hybrid (Stansted - 3 days per week, 2 days remote) Responsibilities Maintain and improve our IT risk register, ensuring risks are clear, evidenced and tracked Support risk owners with guidance on controls, remediation and governance requirements Complete compliance reviews, control testing and assurance activities Produce risk and compliance reporting for leadership forums Carry out supplier assurance assessments, recommend improvements and elevate risk where needed Keep IT policies and standards up to date and aligned with Aviva and recognised frameworks Provide clear insight to non technical colleagues on risk, controls and potential impacts Support Group assurance activity and represent Solus in relevant forums This is an individual contributor role with a high level of ownership and plenty of opportunity to influence how we operate. Qualifications You will thrive in this role if you have: Knowledge of GRC frameworks such as ISO 27001, NIST CSF, Cyber Essentials or DPA Experience in risk management, governance or cyber/security assurance The ability to analyse complex information and turn it into clear, meaningful insight Confidence challenging and advising colleagues at all levels Strong communication and stakeholder management skills Certifications such as CISM, CRISC or CGRC are desirable but not essential. Who are Solus? Solus, who are owned by Aviva, are one of the UK leaders in vehicle repairs, returning cars to the road in just 11 days on average and a 4.6/5 star customer rating. With an award winning apprenticeship programme and winners of other recognised industry awards Solus are proud to be shaping the future of vehicle repair. Why Join Solus? We have so much to offer when it comes to being a Solus colleague: Competitive salary based on location, skills, experience, and qualifications. Bonus opportunity tied to your performance and the overall success of Solus. Company pension scheme with employer contributions. 33 days' holiday (including bank holidays), with the option to buy or sell up to 5 days. Save money with up to 40% discount on Aviva products and other retailer discounts. Share in Aviva's success through the Aviva Save As You Earn scheme. Supportive policies including parental and carer's leave. Wellbeing focus with tools like Group Income Protection and 24/7 GP access. At Solus, we value inclusivity and welcome all applicants. If you're excited but don't tick every box, we encourage you to apply-your unique skills might be just what we need. We guarantee an interview for disabled applicants meeting the minimum criteria-just email us after applying to let us know. Ready to join us? Apply online today, and our team will be in touch within 14 days.
GRC Analyst - Controls Testing & Assurance JD Sports- Head Office, Warwick House, Bury, United Kingdom Job Description Posted Friday 1 May 2026 at 00:00 Established in 1981 with a single store in the Northwest of England, the JD Group is a leading omni-channel retailer of Sports Fashion, Outdoors and Gyms with our colleagues working in stores across several retail fascias in many markets around the world. JD Sports Fashion Plc was listed on the London Stock Exchange in 1996 and has been a FTSE100 publicly quoted company since 2019 and continues to grow in the UK and internationally. We want to be the leading global omnichannel retailer in the sports and outdoor industry. To be a part of this successful company and help us to achieve this you will have the desire to ingrain our strategic goals of being a people led, innovative and customer focused organisation which provides operational excellence whilst identifying new areas of growth as part of our day to day objectives. Role Purpose The GRC Analyst will sit within the second line of defence and is responsible for testing and assessing the design and operating effectiveness of IT General Controls (ITGCs) and cybersecurity controls across JD Sports. The role is focused on executing control testing, evaluating evidence, identifying control gaps and supporting audit readiness. The GRC Analyst will work closely with Technology, Internal Controls and Audit teams to ensure that the JD Sports control environment meets regulatory audit and internal risk management and control requirements. This is a technically focused GRC role requiring a strong understanding of ITGC and cybersecurity frameworks, audit methodologies and enterprise IT environments. The successful candidate will be instrumental in supporting external audit readiness, identifying control gaps and driving remediation activity across JD Sports. Key Responsibilities Control Testing & Assurance Plan, execute and document risk based testing of IT General Controls and cybersecurity controls across key domains including identity and access management, change management, computer operations and third party risk. Assess controls for design adequacy and operating effectiveness in line with recognised frameworks such as COBIT, SOX ITGC, ISO 27001 and NIST. Collect, review and evaluate control evidence, applying professional scepticism and audit rigour. Identify control deficiencies and gaps, articulating root causes, risk impact and recommended remediation actions. Maintain accurate and complete working papers and test documentation. Control Framework & Oversight Support the development and maintenance of the Technology Controls Framework and ITGC and cybersecurity control library, ensuring controls remain aligned to risk appetite and evolving business requirements. Monitor and track control remediation activity, escalating overdue or high risk items to senior stakeholders in a timely manner. Operate and provide input into Control Self Assessment (CSA) processes, contributing ITGC specific insight to the broader enterprise risk framework. Audit Support & Stakeholder Management Support the GRC Controls Lead with internal and external auditors during IT audit cycles, coordinating evidence requests, facilitating walkthrough and managing the audit relationship professionally. Support preparation for inspections and audits, ensuring documentation and evidence packs are accurate, complete and audit ready. Build effective working relationships and support cross functional collaboration with other teams and functions such as Technology, Internal Controls, Internal Audit, Enterprise Risk, Legal and Procurement. Issue Management & Reporting Support in the development of clear and concise testing reports and exception summaries for consumption by technical and non technical audiences, including senior management and board level committees. Maintain GRC tooling, dashboards and metrics relating to ITGC and cybersecurity control coverage, testing progress, deficiency status and remediation timelines. Present findings and recommendations with clarity and confidence, supporting informed risk based decision making. Identify opportunities to improve the efficiency and effectiveness of the ITGC testing programme, including automation, tooling and methodology enhancements. Support enhancements of GRC policies, standards and procedures relating to technology risk and control. Stay current with changes to relevant regulatory requirements, audit standards and industry best practice. Skills & Experience 2-5 years of demonstrable experience in controls testing, IT audit, or GRC function within a fast paced and complex organisation. Strong understanding of IT General Controls domains such as identity and access management, change management, computer operations, programme development and third party risk. High level and working knowledge of cybersecurity control domains such as vulnerability management, incident response, logging and monitoring, data protection and encryption, cloud security and network security. Ability to assess both control design and operating effectiveness. Experience collecting, evaluating and challenging control evidence. Ability to identify control weaknesses, articulate risk impact and develop actionable remediation recommendations. Strong written and verbal communication skills, with the ability to produce clear and concise audit and assurance reports. Organised and methodical approach to workload management, with the ability to manage multiple priorities and deadlines. Relevant professional certifications such as CISA, CRISC, CISSP or equivalent. Familiarity with audit frameworks and standards including COBIT, SOX ITGC, ISO 27001 and NIST. Experience in a retail, e commerce or large global enterprise environments, supporting Big 4/external audit or internal audit engagements in an ICFR / SOX / IT control capacity. Familiarity with GRC tooling platforms such as AuditBoard or similar. Independence and objectivity: Operates with integrity and professional scepticism, providing impartial assurance regardless of organisational pressure. Analytical thinking: Applies a structured, evidence based approach testing. Stakeholder engagement: Builds credible and effective working relationships with first line teams, auditors and senior stakeholders. Attention to detail: Maintains a high standard of accuracy in testing documentation, evidence review and reporting. Continuous improvement: Seeks opportunities to improve processes and outcomes. Benefits Staff discount on JD Group and other brands; personal development opportunities. JD Sports- Head Office, Warwick House, Bury, United Kingdom
04/05/2026
Full time
GRC Analyst - Controls Testing & Assurance JD Sports- Head Office, Warwick House, Bury, United Kingdom Job Description Posted Friday 1 May 2026 at 00:00 Established in 1981 with a single store in the Northwest of England, the JD Group is a leading omni-channel retailer of Sports Fashion, Outdoors and Gyms with our colleagues working in stores across several retail fascias in many markets around the world. JD Sports Fashion Plc was listed on the London Stock Exchange in 1996 and has been a FTSE100 publicly quoted company since 2019 and continues to grow in the UK and internationally. We want to be the leading global omnichannel retailer in the sports and outdoor industry. To be a part of this successful company and help us to achieve this you will have the desire to ingrain our strategic goals of being a people led, innovative and customer focused organisation which provides operational excellence whilst identifying new areas of growth as part of our day to day objectives. Role Purpose The GRC Analyst will sit within the second line of defence and is responsible for testing and assessing the design and operating effectiveness of IT General Controls (ITGCs) and cybersecurity controls across JD Sports. The role is focused on executing control testing, evaluating evidence, identifying control gaps and supporting audit readiness. The GRC Analyst will work closely with Technology, Internal Controls and Audit teams to ensure that the JD Sports control environment meets regulatory audit and internal risk management and control requirements. This is a technically focused GRC role requiring a strong understanding of ITGC and cybersecurity frameworks, audit methodologies and enterprise IT environments. The successful candidate will be instrumental in supporting external audit readiness, identifying control gaps and driving remediation activity across JD Sports. Key Responsibilities Control Testing & Assurance Plan, execute and document risk based testing of IT General Controls and cybersecurity controls across key domains including identity and access management, change management, computer operations and third party risk. Assess controls for design adequacy and operating effectiveness in line with recognised frameworks such as COBIT, SOX ITGC, ISO 27001 and NIST. Collect, review and evaluate control evidence, applying professional scepticism and audit rigour. Identify control deficiencies and gaps, articulating root causes, risk impact and recommended remediation actions. Maintain accurate and complete working papers and test documentation. Control Framework & Oversight Support the development and maintenance of the Technology Controls Framework and ITGC and cybersecurity control library, ensuring controls remain aligned to risk appetite and evolving business requirements. Monitor and track control remediation activity, escalating overdue or high risk items to senior stakeholders in a timely manner. Operate and provide input into Control Self Assessment (CSA) processes, contributing ITGC specific insight to the broader enterprise risk framework. Audit Support & Stakeholder Management Support the GRC Controls Lead with internal and external auditors during IT audit cycles, coordinating evidence requests, facilitating walkthrough and managing the audit relationship professionally. Support preparation for inspections and audits, ensuring documentation and evidence packs are accurate, complete and audit ready. Build effective working relationships and support cross functional collaboration with other teams and functions such as Technology, Internal Controls, Internal Audit, Enterprise Risk, Legal and Procurement. Issue Management & Reporting Support in the development of clear and concise testing reports and exception summaries for consumption by technical and non technical audiences, including senior management and board level committees. Maintain GRC tooling, dashboards and metrics relating to ITGC and cybersecurity control coverage, testing progress, deficiency status and remediation timelines. Present findings and recommendations with clarity and confidence, supporting informed risk based decision making. Identify opportunities to improve the efficiency and effectiveness of the ITGC testing programme, including automation, tooling and methodology enhancements. Support enhancements of GRC policies, standards and procedures relating to technology risk and control. Stay current with changes to relevant regulatory requirements, audit standards and industry best practice. Skills & Experience 2-5 years of demonstrable experience in controls testing, IT audit, or GRC function within a fast paced and complex organisation. Strong understanding of IT General Controls domains such as identity and access management, change management, computer operations, programme development and third party risk. High level and working knowledge of cybersecurity control domains such as vulnerability management, incident response, logging and monitoring, data protection and encryption, cloud security and network security. Ability to assess both control design and operating effectiveness. Experience collecting, evaluating and challenging control evidence. Ability to identify control weaknesses, articulate risk impact and develop actionable remediation recommendations. Strong written and verbal communication skills, with the ability to produce clear and concise audit and assurance reports. Organised and methodical approach to workload management, with the ability to manage multiple priorities and deadlines. Relevant professional certifications such as CISA, CRISC, CISSP or equivalent. Familiarity with audit frameworks and standards including COBIT, SOX ITGC, ISO 27001 and NIST. Experience in a retail, e commerce or large global enterprise environments, supporting Big 4/external audit or internal audit engagements in an ICFR / SOX / IT control capacity. Familiarity with GRC tooling platforms such as AuditBoard or similar. Independence and objectivity: Operates with integrity and professional scepticism, providing impartial assurance regardless of organisational pressure. Analytical thinking: Applies a structured, evidence based approach testing. Stakeholder engagement: Builds credible and effective working relationships with first line teams, auditors and senior stakeholders. Attention to detail: Maintains a high standard of accuracy in testing documentation, evidence review and reporting. Continuous improvement: Seeks opportunities to improve processes and outcomes. Benefits Staff discount on JD Group and other brands; personal development opportunities. JD Sports- Head Office, Warwick House, Bury, United Kingdom
Solus Accident Repair Centres Company
Stansted, Essex
A leading vehicle repair service provider in England is seeking an IT Governance, Risk and Compliance (GRC) Analyst. This role involves maintaining IT risk governance, conducting compliance reviews, and supporting risk owners. The ideal candidate has experience in GRC frameworks, strong analytical skills, and effective communication. This position offers a hybrid working environment, competitive salary, and an inclusive culture that values diverse applications. Ready to join us? Apply today!
04/05/2026
Full time
A leading vehicle repair service provider in England is seeking an IT Governance, Risk and Compliance (GRC) Analyst. This role involves maintaining IT risk governance, conducting compliance reviews, and supporting risk owners. The ideal candidate has experience in GRC frameworks, strong analytical skills, and effective communication. This position offers a hybrid working environment, competitive salary, and an inclusive culture that values diverse applications. Ready to join us? Apply today!
Solus Accident Repair Centres
Birchanger, Hertfordshire
Overview At Solus, we are strengthening our technology governance and cyber resilience as we continue to grow. We are looking for an IT Governance, Risk and Compliance (GRC) Analyst to help us maintain a secure, well governed and compliant technology environment across the business. This is a great role for someone who enjoys analysing detail, challenging constructively, influencing stakeholders and helping teams make confident, risk-based decisions. About the role As our IT GRC Analyst, you will support the Cyber Security, Risk and Assurance function with a mixture of governance activity, assurance reviews, supplier assessments and compliance oversight. You will help us meet Aviva Group requirements, regulatory expectations and industry standards while ensuring our technology risks are understood and well managed. Location: Hybrid (Stansted - 3 days per week, 2 days remote) Responsibilities Maintain and improve our IT risk register, ensuring risks are clear, evidenced and tracked Support risk owners with guidance on controls, remediation and governance requirements Complete compliance reviews, control testing and assurance activities Produce risk and compliance reporting for leadership forums Carry out supplier assurance assessments, recommend improvements and escalate risk where needed Keep IT policies and standards up to date and aligned with Aviva and recognised frameworks Provide clear insight to non technical colleagues on risk, controls and potential impacts Support Group assurance activity and represent Solus in relevant forums This is an individual contributor role with a high level of ownership and plenty of opportunity to influence how we operate. Qualifications You will thrive in this role if you have: Knowledge of GRC frameworks such as ISO 27001, NIST CSF, Cyber Essentials or DPA Experience in risk management, governance or cyber/security assurance The ability to analyse complex information and turn it into clear, meaningful insight Confidence challenging and advising colleagues at all levels Strong communication and stakeholder management skills Certifications such as CISM, CRISC or CGRC are desirable but not essential. Who are Solus? Solus, who are owned by Aviva, are one of the UK leaders in vehicle repairs, returning cars to the road in just 11 days on average and a 4.6/5 star customer rating. With an award-winning apprenticeship programme and winners of other recognised industry awards Solus are proud to be shaping the future of vehicle repair. Why Join Solus? We have so much to offer when it comes to being a Solus colleague: Competitive salary based on location, skills, experience, and qualifications. Bonus opportunity tied to your performance and the overall success of Solus. Company pension scheme with employer contributions. 33 days' holiday (including bank holidays), with the option to buy or sell up to 5 days. Save money with up to 40% discount on Aviva products and other retailer discounts. Share in Aviva's success through the Aviva Save As You Earn scheme. Supportive policies including parental and carer's leave. Wellbeing focus with tools like Group Income Protection and 24/7 GP access. At Solus, we value inclusivity and welcome all applicants. If you're excited but don't tick every box, we encourage you to apply-your unique skills might be just what we need. We guarantee an interview for disabled applicants meeting the minimum criteria-just email us after applying to let us know. Ready to join us? Apply online today, and our team will be in touch within 14 days.
03/05/2026
Full time
Overview At Solus, we are strengthening our technology governance and cyber resilience as we continue to grow. We are looking for an IT Governance, Risk and Compliance (GRC) Analyst to help us maintain a secure, well governed and compliant technology environment across the business. This is a great role for someone who enjoys analysing detail, challenging constructively, influencing stakeholders and helping teams make confident, risk-based decisions. About the role As our IT GRC Analyst, you will support the Cyber Security, Risk and Assurance function with a mixture of governance activity, assurance reviews, supplier assessments and compliance oversight. You will help us meet Aviva Group requirements, regulatory expectations and industry standards while ensuring our technology risks are understood and well managed. Location: Hybrid (Stansted - 3 days per week, 2 days remote) Responsibilities Maintain and improve our IT risk register, ensuring risks are clear, evidenced and tracked Support risk owners with guidance on controls, remediation and governance requirements Complete compliance reviews, control testing and assurance activities Produce risk and compliance reporting for leadership forums Carry out supplier assurance assessments, recommend improvements and escalate risk where needed Keep IT policies and standards up to date and aligned with Aviva and recognised frameworks Provide clear insight to non technical colleagues on risk, controls and potential impacts Support Group assurance activity and represent Solus in relevant forums This is an individual contributor role with a high level of ownership and plenty of opportunity to influence how we operate. Qualifications You will thrive in this role if you have: Knowledge of GRC frameworks such as ISO 27001, NIST CSF, Cyber Essentials or DPA Experience in risk management, governance or cyber/security assurance The ability to analyse complex information and turn it into clear, meaningful insight Confidence challenging and advising colleagues at all levels Strong communication and stakeholder management skills Certifications such as CISM, CRISC or CGRC are desirable but not essential. Who are Solus? Solus, who are owned by Aviva, are one of the UK leaders in vehicle repairs, returning cars to the road in just 11 days on average and a 4.6/5 star customer rating. With an award-winning apprenticeship programme and winners of other recognised industry awards Solus are proud to be shaping the future of vehicle repair. Why Join Solus? We have so much to offer when it comes to being a Solus colleague: Competitive salary based on location, skills, experience, and qualifications. Bonus opportunity tied to your performance and the overall success of Solus. Company pension scheme with employer contributions. 33 days' holiday (including bank holidays), with the option to buy or sell up to 5 days. Save money with up to 40% discount on Aviva products and other retailer discounts. Share in Aviva's success through the Aviva Save As You Earn scheme. Supportive policies including parental and carer's leave. Wellbeing focus with tools like Group Income Protection and 24/7 GP access. At Solus, we value inclusivity and welcome all applicants. If you're excited but don't tick every box, we encourage you to apply-your unique skills might be just what we need. We guarantee an interview for disabled applicants meeting the minimum criteria-just email us after applying to let us know. Ready to join us? Apply online today, and our team will be in touch within 14 days.
We're proud to be trusted by some of the largest companies in the world to handle their Salesforce DevOps. Underpinning that trust is a commitment to protect their data through our modern approach to security and compliance. As we grow into increasingly regulated sectors, ensuring our global compliance standards are met is more important than ever. This is a fantastic opportunity to kickstart or progress your career in Governance, Risk, and Compliance (GRC) within the tech sector. Reporting to the Legal and Compliance Manager, you will get hands on exposure to customer assurance, information security audits, data protection, and additional international frameworks. As an early hire in this function, you'll have a clear path to specialise as the team grows. What's the opportunity for a GRC Analyst at Gearset? Partner with our GRC Manager to maintain our ISO 27001 certification and support compliance with global data protection regulations such as GDPR, CCPA, and HIPAA. Own the day-to-day response to customer security and compliance requests, ensuring our clients feel confident in how we handle their data. Coordinate and facilitate on managing GRC platforms, keeping our documentation current and finding ways to automate repeatable tasks. Play a key role in ISO 27001 Continuous Improvement (CI) activities and help prepare the business for internal and external audits. Assist in drafting and managing essential compliance policies, including Modern Slavery, AML and Anti Bribery, ensuring they evolve with the company. Identify blockages in reviews and recommend ways to standardise documentation to help the company scale efficiently. What you'll achieve Develop a deep understanding of Gearset's compliance and security posture to streamline customer onboarding and vendor reviews. Lead the automation of our compliance workflows, reducing manual overhead for the team. Play a key role in scaling our global compliance footprint by launching and embedding new international security standards as we grow. Gain the experience and support needed to pursue certifications in GRC, Information Security or Data Protection. About you You have a passion for accuracy, especially when managing complex documentation and policies. You are comfortable learning about cloud software and can translate security and compliance concepts into clear, written responses. You can communicate professionally with both internal teams and external customers and vendors. You thrive in a fast-paced environment and are always looking for a more efficient way to get things done. Have a degree in a relevant field such as Computer Science, or Cyber Security or equivalent foundational experience in a professional office environment. Great to haves Knowledge of ISO 27001, GDPR, CCPA and HIPAA Experience using GRC or workflow tools An interest in DevOps or the Salesforce ecosystem Benefits (the stuff you'd expect!) Salary is up to £45k (depending on experience) This role is based in our Cambridge office but with the flexibility to work from home when you need to Opportunity to join our Long Term Incentive scheme Generous personal development budget for courses, conferences, or whatever is useful to your professional development in the role of up to £1500 per year Top end hardware provided Free lunch any day you are in the office BUPA health care Life Insurance & critical illness cover Discounted gym membership, as well as a range of health and wellness benefits
03/05/2026
Full time
We're proud to be trusted by some of the largest companies in the world to handle their Salesforce DevOps. Underpinning that trust is a commitment to protect their data through our modern approach to security and compliance. As we grow into increasingly regulated sectors, ensuring our global compliance standards are met is more important than ever. This is a fantastic opportunity to kickstart or progress your career in Governance, Risk, and Compliance (GRC) within the tech sector. Reporting to the Legal and Compliance Manager, you will get hands on exposure to customer assurance, information security audits, data protection, and additional international frameworks. As an early hire in this function, you'll have a clear path to specialise as the team grows. What's the opportunity for a GRC Analyst at Gearset? Partner with our GRC Manager to maintain our ISO 27001 certification and support compliance with global data protection regulations such as GDPR, CCPA, and HIPAA. Own the day-to-day response to customer security and compliance requests, ensuring our clients feel confident in how we handle their data. Coordinate and facilitate on managing GRC platforms, keeping our documentation current and finding ways to automate repeatable tasks. Play a key role in ISO 27001 Continuous Improvement (CI) activities and help prepare the business for internal and external audits. Assist in drafting and managing essential compliance policies, including Modern Slavery, AML and Anti Bribery, ensuring they evolve with the company. Identify blockages in reviews and recommend ways to standardise documentation to help the company scale efficiently. What you'll achieve Develop a deep understanding of Gearset's compliance and security posture to streamline customer onboarding and vendor reviews. Lead the automation of our compliance workflows, reducing manual overhead for the team. Play a key role in scaling our global compliance footprint by launching and embedding new international security standards as we grow. Gain the experience and support needed to pursue certifications in GRC, Information Security or Data Protection. About you You have a passion for accuracy, especially when managing complex documentation and policies. You are comfortable learning about cloud software and can translate security and compliance concepts into clear, written responses. You can communicate professionally with both internal teams and external customers and vendors. You thrive in a fast-paced environment and are always looking for a more efficient way to get things done. Have a degree in a relevant field such as Computer Science, or Cyber Security or equivalent foundational experience in a professional office environment. Great to haves Knowledge of ISO 27001, GDPR, CCPA and HIPAA Experience using GRC or workflow tools An interest in DevOps or the Salesforce ecosystem Benefits (the stuff you'd expect!) Salary is up to £45k (depending on experience) This role is based in our Cambridge office but with the flexibility to work from home when you need to Opportunity to join our Long Term Incentive scheme Generous personal development budget for courses, conferences, or whatever is useful to your professional development in the role of up to £1500 per year Top end hardware provided Free lunch any day you are in the office BUPA health care Life Insurance & critical illness cover Discounted gym membership, as well as a range of health and wellness benefits
IT Risk and Controls Testing Analyst Salary: Circa 45,000 Per Annum Location: Remote with two monthly visits to the office in Dudley. Job Description I am working with a long standing client who are a n established, global business with a fantastic reputation in their field. Furthermore, they have a fantastic reputation for delivering major investment in technology, governan e and compliance. This is an exciting opportunity to play a vital role in strengthening IT risk and controls across a complex global estate. This is a key role focused on IT General Controls (ITGC), SOx compliance, audit readiness and controls assurance across the wider IT function. You will take ownership of planning and delivering control testing, supporting audit activity and helping ensure compliance frameworks remain robust, effective and audit-ready. This would suit someone with a background in IT audit, SOx controls or IT risk who enjoys detail, structure and working closely with both internal stakeholders and external auditors. Responsibilities Deliver ITGC and SOx control testing across the annual compliance plan Conduct walkthroughs and assess control effectiveness Produce and maintain testing documentation, working papers and audit evidence Identify control gaps, deficiencies and remediation actions Support quarterly controls self-assessments and ongoing compliance reporting Work closely with control owners, IT leadership and external auditors Track testing timelines and ensure audit deliverables are met Support wider risk, governance and compliance initiatives across IT Risk and Issue Management Identify, assess, and manage risks and issues. Escalation to stakeholders for support and decisions where appropriate Collaboration with External Auditors Work closely with external auditors to align on testing timelines and requirements. Facilitate and accelerate the testing process wherever possible. Address auditor queries and provide and ensure that the evidence documentation is provided in a timely manner Experience Required Previous experience in IT audit, SOx compliance, IT risk or controls testing Strong understanding of IT General Controls and audit frameworks Experience working with external auditors and compliance programmes Knowledge of SOx, SOC1 / SSAE 18 and wider governance requirements Experience with GRC platforms or compliance tooling would be beneficial Strong stakeholder engagement and communication skills Professional certifications such as CISA or CRISC would be advantageous. Qualifications Professional certification such as CISA, CRISC, CPA or willingness to pursue professional qualification. 4 to 7 Years of hands-on experience with various aspects of IT SOx including application scoping, flowcharts, risk-control matrix, testing, evaluation of deficiencies and remediation testing ECS Recruitment Group Ltd is acting as an Employment Agency in relation to this vacancy.
28/04/2026
Full time
IT Risk and Controls Testing Analyst Salary: Circa 45,000 Per Annum Location: Remote with two monthly visits to the office in Dudley. Job Description I am working with a long standing client who are a n established, global business with a fantastic reputation in their field. Furthermore, they have a fantastic reputation for delivering major investment in technology, governan e and compliance. This is an exciting opportunity to play a vital role in strengthening IT risk and controls across a complex global estate. This is a key role focused on IT General Controls (ITGC), SOx compliance, audit readiness and controls assurance across the wider IT function. You will take ownership of planning and delivering control testing, supporting audit activity and helping ensure compliance frameworks remain robust, effective and audit-ready. This would suit someone with a background in IT audit, SOx controls or IT risk who enjoys detail, structure and working closely with both internal stakeholders and external auditors. Responsibilities Deliver ITGC and SOx control testing across the annual compliance plan Conduct walkthroughs and assess control effectiveness Produce and maintain testing documentation, working papers and audit evidence Identify control gaps, deficiencies and remediation actions Support quarterly controls self-assessments and ongoing compliance reporting Work closely with control owners, IT leadership and external auditors Track testing timelines and ensure audit deliverables are met Support wider risk, governance and compliance initiatives across IT Risk and Issue Management Identify, assess, and manage risks and issues. Escalation to stakeholders for support and decisions where appropriate Collaboration with External Auditors Work closely with external auditors to align on testing timelines and requirements. Facilitate and accelerate the testing process wherever possible. Address auditor queries and provide and ensure that the evidence documentation is provided in a timely manner Experience Required Previous experience in IT audit, SOx compliance, IT risk or controls testing Strong understanding of IT General Controls and audit frameworks Experience working with external auditors and compliance programmes Knowledge of SOx, SOC1 / SSAE 18 and wider governance requirements Experience with GRC platforms or compliance tooling would be beneficial Strong stakeholder engagement and communication skills Professional certifications such as CISA or CRISC would be advantageous. Qualifications Professional certification such as CISA, CRISC, CPA or willingness to pursue professional qualification. 4 to 7 Years of hands-on experience with various aspects of IT SOx including application scoping, flowcharts, risk-control matrix, testing, evaluation of deficiencies and remediation testing ECS Recruitment Group Ltd is acting as an Employment Agency in relation to this vacancy.
IT Security Analyst Location: Hybrid - Middlesbrough Salary: 50,000 - 60,000 + Benefits 83zero are partnered with a market-leading software company who are on a mission to transform the construction and related industries through their end-to-end digital solutions. With teams across the UK, Europe, USA and India, they are delivering large-scale transformation projects on a global scale and are continuing to expand. We are now looking for a highly organised and detail-driven IT Security Analyst to join their growing security function. This role plays a key part in securing customer trust and supplier integrity, ensuring compliance with recognised frameworks, and supporting wider security initiatives. The Role Own and manage responses to customer security questionnaires (SIG, CAIQ, bespoke). Work cross-functionally with Legal, Compliance, Procurement, Product and Security teams. Maintain the security assurance matrix in line with ISO 27001, Cyber Essentials, and SOC 2. Act as the key point of contact for security assurance queries. Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls. Manage the third-party due diligence programme, including onboarding and periodic reviews. Track and publish key security metrics such as risk severity, SLA adherence, and turnaround times. Provide audit artefacts and support internal/external audits. Contribute to broader security initiatives and continuous improvement within the organisation. About You 3+ years' experience in Information Security, GRC, or Vendor Risk Management. Strong experience issuing or responding to security questionnaires. Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA. Excellent communication skills, able to translate technical risk to non-technical stakeholders. Eligible to work in the UK and able to pass background checks. Desirable: Certifications such as CRISC, CISSP, CISA, or ISO 27001 Lead Auditor. Familiarity with SaaS/cloud platforms (AWS, Azure, GCP). Understanding of secure software supply chains (SBOM, SLSA). What's on Offer 50,000 - 55,000 base salary 25 days annual leave + public holidays (increasing with service) Matched pension scheme Private medical insurance & life assurance Fitness allowance Paid study leave & volunteering days Flexible hybrid working Excellent career development and training opportunities
03/10/2025
Full time
IT Security Analyst Location: Hybrid - Middlesbrough Salary: 50,000 - 60,000 + Benefits 83zero are partnered with a market-leading software company who are on a mission to transform the construction and related industries through their end-to-end digital solutions. With teams across the UK, Europe, USA and India, they are delivering large-scale transformation projects on a global scale and are continuing to expand. We are now looking for a highly organised and detail-driven IT Security Analyst to join their growing security function. This role plays a key part in securing customer trust and supplier integrity, ensuring compliance with recognised frameworks, and supporting wider security initiatives. The Role Own and manage responses to customer security questionnaires (SIG, CAIQ, bespoke). Work cross-functionally with Legal, Compliance, Procurement, Product and Security teams. Maintain the security assurance matrix in line with ISO 27001, Cyber Essentials, and SOC 2. Act as the key point of contact for security assurance queries. Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls. Manage the third-party due diligence programme, including onboarding and periodic reviews. Track and publish key security metrics such as risk severity, SLA adherence, and turnaround times. Provide audit artefacts and support internal/external audits. Contribute to broader security initiatives and continuous improvement within the organisation. About You 3+ years' experience in Information Security, GRC, or Vendor Risk Management. Strong experience issuing or responding to security questionnaires. Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA. Excellent communication skills, able to translate technical risk to non-technical stakeholders. Eligible to work in the UK and able to pass background checks. Desirable: Certifications such as CRISC, CISSP, CISA, or ISO 27001 Lead Auditor. Familiarity with SaaS/cloud platforms (AWS, Azure, GCP). Understanding of secure software supply chains (SBOM, SLSA). What's on Offer 50,000 - 55,000 base salary 25 days annual leave + public holidays (increasing with service) Matched pension scheme Private medical insurance & life assurance Fitness allowance Paid study leave & volunteering days Flexible hybrid working Excellent career development and training opportunities
IT Security Analyst Location: Hybrid - Buckinghamshire Salary: 50,000 - 55,000 + Benefits 83zero are partnered with a market-leading software company who are on a mission to transform the construction and related industries through their end-to-end digital solutions. With teams across the UK, Europe, USA and India, they are delivering large-scale transformation projects on a global scale and are continuing to expand. We are now looking for a highly organised and detail-driven IT Security Analyst to join their growing security function. This role plays a key part in securing customer trust and supplier integrity, ensuring compliance with recognised frameworks, and supporting wider security initiatives. The Role Own and manage responses to customer security questionnaires (SIG, CAIQ, bespoke). Work cross-functionally with Legal, Compliance, Procurement, Product and Security teams. Maintain the security assurance matrix in line with ISO 27001, Cyber Essentials, and SOC 2. Act as the key point of contact for security assurance queries. Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls. Manage the third-party due diligence programme, including onboarding and periodic reviews. Track and publish key security metrics such as risk severity, SLA adherence, and turnaround times. Provide audit artefacts and support internal/external audits. Contribute to broader security initiatives and continuous improvement within the organisation. About You 3+ years' experience in Information Security, GRC, or Vendor Risk Management. Strong experience issuing or responding to security questionnaires. Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA. Excellent communication skills, able to translate technical risk to non-technical stakeholders. Eligible to work in the UK and able to pass background checks. Desirable: Certifications such as CRISC, CISSP, CISA, or ISO 27001 Lead Auditor. Familiarity with SaaS/cloud platforms (AWS, Azure, GCP). Understanding of secure software supply chains (SBOM, SLSA). What's on Offer 50,000 - 55,000 base salary 25 days annual leave + public holidays (increasing with service) Matched pension scheme Private medical insurance & life assurance Fitness allowance Paid study leave & volunteering days Flexible hybrid working Excellent career development and training opportunities
03/10/2025
Full time
IT Security Analyst Location: Hybrid - Buckinghamshire Salary: 50,000 - 55,000 + Benefits 83zero are partnered with a market-leading software company who are on a mission to transform the construction and related industries through their end-to-end digital solutions. With teams across the UK, Europe, USA and India, they are delivering large-scale transformation projects on a global scale and are continuing to expand. We are now looking for a highly organised and detail-driven IT Security Analyst to join their growing security function. This role plays a key part in securing customer trust and supplier integrity, ensuring compliance with recognised frameworks, and supporting wider security initiatives. The Role Own and manage responses to customer security questionnaires (SIG, CAIQ, bespoke). Work cross-functionally with Legal, Compliance, Procurement, Product and Security teams. Maintain the security assurance matrix in line with ISO 27001, Cyber Essentials, and SOC 2. Act as the key point of contact for security assurance queries. Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls. Manage the third-party due diligence programme, including onboarding and periodic reviews. Track and publish key security metrics such as risk severity, SLA adherence, and turnaround times. Provide audit artefacts and support internal/external audits. Contribute to broader security initiatives and continuous improvement within the organisation. About You 3+ years' experience in Information Security, GRC, or Vendor Risk Management. Strong experience issuing or responding to security questionnaires. Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA. Excellent communication skills, able to translate technical risk to non-technical stakeholders. Eligible to work in the UK and able to pass background checks. Desirable: Certifications such as CRISC, CISSP, CISA, or ISO 27001 Lead Auditor. Familiarity with SaaS/cloud platforms (AWS, Azure, GCP). Understanding of secure software supply chains (SBOM, SLSA). What's on Offer 50,000 - 55,000 base salary 25 days annual leave + public holidays (increasing with service) Matched pension scheme Private medical insurance & life assurance Fitness allowance Paid study leave & volunteering days Flexible hybrid working Excellent career development and training opportunities
Security Risk Analyst 6-month contract London/Remote Inside IR35 My Customer is looking for a Security Risk Analyst to join their Governance, Risk & Compliance (GRC) team. You will play a key role in strengthening their risk management processes, working primarily with Archer and other GRC tools to support risk assessment, compliance, and governance activities. In this role, you will be responsible for identifying, assessing, and tracking security risks across assets, systems, and third parties, ensuring compliance with internal standards, policies, and regulatory frameworks. Key Skills from the Security Risk Analyst: Strong background in Security Risk and Governance with hands-on experience in Archer (experience with other GRC tools is also valuable). Solid understanding of risk assessment methodologies, security frameworks (NIST, ISO (phone number removed , and compliance requirements (GDPR, PCI DSS, SOX). Strong written communication skills, able to produce clear technical reports and risk documentation. Excellent stakeholder management, able to collaborate across technical and non-technical teams. Beneficial certifications: CISSP, CISA, CISM (or equivalent). ISO27001 / ISMS Accredited qualifications would be beneficial Experience working in financial sector would be beneficial Experience in ensuring internal IT system compliance against agreed standards Key Responsibilities of the Security Risk Analyst: Maintain and improve the security risk assessment framework, procedures, and workflows. Manage and update security questionnaires to align with compliance requirements, industry standards, and regulations. Conduct asset-level and third-party/vendor risk assessments. Analyse and document inherent and residual risks, providing clear recommendations. Produce detailed technical reports highlighting findings, control gaps, and proposed remediation plans. Drive remediation Perform periodic and ad-hoc risk assessments in line with organisational policies. The Security Risk Analyst is required onsite in London, once a week. Apply now to speak with VIQU IT in confidence about the Security Risk Analyst role. Or reach out to Connor Smal via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.
02/10/2025
Contractor
Security Risk Analyst 6-month contract London/Remote Inside IR35 My Customer is looking for a Security Risk Analyst to join their Governance, Risk & Compliance (GRC) team. You will play a key role in strengthening their risk management processes, working primarily with Archer and other GRC tools to support risk assessment, compliance, and governance activities. In this role, you will be responsible for identifying, assessing, and tracking security risks across assets, systems, and third parties, ensuring compliance with internal standards, policies, and regulatory frameworks. Key Skills from the Security Risk Analyst: Strong background in Security Risk and Governance with hands-on experience in Archer (experience with other GRC tools is also valuable). Solid understanding of risk assessment methodologies, security frameworks (NIST, ISO (phone number removed , and compliance requirements (GDPR, PCI DSS, SOX). Strong written communication skills, able to produce clear technical reports and risk documentation. Excellent stakeholder management, able to collaborate across technical and non-technical teams. Beneficial certifications: CISSP, CISA, CISM (or equivalent). ISO27001 / ISMS Accredited qualifications would be beneficial Experience working in financial sector would be beneficial Experience in ensuring internal IT system compliance against agreed standards Key Responsibilities of the Security Risk Analyst: Maintain and improve the security risk assessment framework, procedures, and workflows. Manage and update security questionnaires to align with compliance requirements, industry standards, and regulations. Conduct asset-level and third-party/vendor risk assessments. Analyse and document inherent and residual risks, providing clear recommendations. Produce detailed technical reports highlighting findings, control gaps, and proposed remediation plans. Drive remediation Perform periodic and ad-hoc risk assessments in line with organisational policies. The Security Risk Analyst is required onsite in London, once a week. Apply now to speak with VIQU IT in confidence about the Security Risk Analyst role. Or reach out to Connor Smal via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.
Acorn Insurance and Financial Services Limited
Liverpool
Due to a period of exciting growth Acorn are looking for a highly skilled and experienced Senior Information Security Analyst to join our Information Security Team. Within this role you get the opportunity to join a collaborative team and have a chance to blend GRC responsibilities with technical security experience, all whilst working for a market leading insurance company, supporting and maintaining robust security controls and regulatory compliance.
Job Title: Senior Information Security Analyst (12 month FTC)
Location: Liverpool City Centre, Hybrid working available
Working Hours: Monday to Friday, 37.5 hours per week , 9:00 AM – 5:30 PM
Salary: £50,000 - £60,000 pa (DOE).
What you will be doing:
Work with all parties across the business to identify and assess risk and ensure mitigations are tracked to completion.
Lead the development and maintenance of information security policies, standards and procedures in line with regulatory frameworks and industry standards.
Lead third party risk management processes.
Collaborate across all areas of the business to align security policies and processes with business objectives and regulatory obligations.
Work with Security Operations and IT teams to provide oversight of vulnerability assessments and remediation activities.
Lead on security architecture reviews for new systems and services.
Evaluate technical security controls and recommending improvements.
Support the implementation of security tools and technologies.
Provide oversight of the security incident management process.
Provide security metrics for interested parties at all levels.
Lead the security awareness programme to promote a culture of security within all levels of the Group.
Provide support for internal and external security audits.
Lead security governance meetings representing the Information Security team and standing in for the Head of Information Security when required.
Provide subject matter expertise liaising across all business functions.
What we look for:
Minimum 5 years' experience in information security roles.
Strong leadership and mentorship abilities with a strategic mindset.
Experience with risk assessment methodologies.
Excellent analytical and problem-solving skills with attention to detail.
Strong communication skills with the ability to explain complex security concepts to non-technical stakeholders.
Ability to manage risk and compliance projects and drive security initiatives.
Knowledge of information security frameworks such as ISO 27001 or NIST.
Knowledge of vulnerability management processes.
About Acorn Insurance With over 40 years of experience, Acorn Insurance is a specialist provider dedicated to helping individuals secure motor insurance across the UK. We proudly serve more than 50,000 customers, ensuring they find policies that meet their needs and provide the peace of mind that comes with high-quality cover.
At Acorn Insurance, we offer comprehensive training and continuous in-house coaching. You'll receive in-depth, FCA-regulated industry knowledge and all the tools necessary to grow your career with us.
We celebrate diversity and are committed to fostering a culture where everyone feels respected and valued. As a Disability Confident Level 1 and Level 2 employer, we ensure our workplace is accessible and inclusive, encouraging our people to bring their best selves to work every day.
The Acorn Group has been recognised as a Great Place to Work for 2024/5. A record number of employees participated in our survey, overwhelmingly highlighting our welcoming and supportive atmosphere as an excellent place to build a career. We are committed to continuous improvement and have ambitious plans for 2025.
Why Acorn Insurance? Acorn Insurance want to give you more than a job, we want to give you a purpose and a career. So, what can we offer you as an employer? Some of the "your tomorrow" benefits you will receive include: Wellbeing:
Enhanced Annual Leave entitlement starting at 31 days and potentially increasing to 35 days per year depending on grade & length of service (including bank holidays)
Enhanced paternity pay and 16 weeks full maternity pay.
Colleague Assistance programme offers a suite of wellbeing services such as:
6 Free Counselling sessions per year
Unlimited access to a telephone councillor 24/7
Access to a free 4-week programme of cognitive behavioural therapy (CBT) with a trained therapist mentor.
Network of internal qualified mental health first aiders are available to provide support to colleagues.
Financial:
A core level of life assurance with the option to increase cover via salary sacrifice and add your spouse/partner
Ability to access your earnings before payday via Dayforce Wallet.
Company pension scheme
Refer a friend scheme with a £250 bonus for every colleague recommended on passing their probation period.
Access to a flexible benefits platform including an annual flex pot allowance to spend on over 15 benefits of your choice.
Ability to give back. You can opt into donating money to charity to climate positive organisations directly from your salary.
Reward, Recognition and Culture :
Long Service Award paid on 5,10- and 15-years’ service
A reward and recognition hub to celebrate and reward colleagues and peers.
Consistent and engaging company events including company awards, competitions and charity fundraisers.
Budgets for department leaders to use for social and engagement events. Please visit out website to view more of our excellent work benefits!
All roles are subject to DBS and Financial checks, any offer made will be conditional until checks are completed to a satisfactory standard. Unfortunately, due to the length of training and complexity of the role, we can only accept applications from candidates who have at least one year remaining on their (Graduate/ Post study work) visa. Unfortunately, we are unable to provide visa sponsorships. At Acorn, we are committed to creating an inclusive and supportive work environment. We recognise that candidates may have specific needs and are happy to consider reasonable adjustments to the recruitment process and working environment to accommodate individual requirements. Whether it’s modifying equipment, adjusting working hours, or providing additional support, we aim to ensure all employees can perform at their best. If you require any reasonable adjustments, please let us know during the application or interview process, and we will work with you to ensure your needs are met.
25/04/2025
Full time
Due to a period of exciting growth Acorn are looking for a highly skilled and experienced Senior Information Security Analyst to join our Information Security Team. Within this role you get the opportunity to join a collaborative team and have a chance to blend GRC responsibilities with technical security experience, all whilst working for a market leading insurance company, supporting and maintaining robust security controls and regulatory compliance.
Job Title: Senior Information Security Analyst (12 month FTC)
Location: Liverpool City Centre, Hybrid working available
Working Hours: Monday to Friday, 37.5 hours per week , 9:00 AM – 5:30 PM
Salary: £50,000 - £60,000 pa (DOE).
What you will be doing:
Work with all parties across the business to identify and assess risk and ensure mitigations are tracked to completion.
Lead the development and maintenance of information security policies, standards and procedures in line with regulatory frameworks and industry standards.
Lead third party risk management processes.
Collaborate across all areas of the business to align security policies and processes with business objectives and regulatory obligations.
Work with Security Operations and IT teams to provide oversight of vulnerability assessments and remediation activities.
Lead on security architecture reviews for new systems and services.
Evaluate technical security controls and recommending improvements.
Support the implementation of security tools and technologies.
Provide oversight of the security incident management process.
Provide security metrics for interested parties at all levels.
Lead the security awareness programme to promote a culture of security within all levels of the Group.
Provide support for internal and external security audits.
Lead security governance meetings representing the Information Security team and standing in for the Head of Information Security when required.
Provide subject matter expertise liaising across all business functions.
What we look for:
Minimum 5 years' experience in information security roles.
Strong leadership and mentorship abilities with a strategic mindset.
Experience with risk assessment methodologies.
Excellent analytical and problem-solving skills with attention to detail.
Strong communication skills with the ability to explain complex security concepts to non-technical stakeholders.
Ability to manage risk and compliance projects and drive security initiatives.
Knowledge of information security frameworks such as ISO 27001 or NIST.
Knowledge of vulnerability management processes.
About Acorn Insurance With over 40 years of experience, Acorn Insurance is a specialist provider dedicated to helping individuals secure motor insurance across the UK. We proudly serve more than 50,000 customers, ensuring they find policies that meet their needs and provide the peace of mind that comes with high-quality cover.
At Acorn Insurance, we offer comprehensive training and continuous in-house coaching. You'll receive in-depth, FCA-regulated industry knowledge and all the tools necessary to grow your career with us.
We celebrate diversity and are committed to fostering a culture where everyone feels respected and valued. As a Disability Confident Level 1 and Level 2 employer, we ensure our workplace is accessible and inclusive, encouraging our people to bring their best selves to work every day.
The Acorn Group has been recognised as a Great Place to Work for 2024/5. A record number of employees participated in our survey, overwhelmingly highlighting our welcoming and supportive atmosphere as an excellent place to build a career. We are committed to continuous improvement and have ambitious plans for 2025.
Why Acorn Insurance? Acorn Insurance want to give you more than a job, we want to give you a purpose and a career. So, what can we offer you as an employer? Some of the "your tomorrow" benefits you will receive include: Wellbeing:
Enhanced Annual Leave entitlement starting at 31 days and potentially increasing to 35 days per year depending on grade & length of service (including bank holidays)
Enhanced paternity pay and 16 weeks full maternity pay.
Colleague Assistance programme offers a suite of wellbeing services such as:
6 Free Counselling sessions per year
Unlimited access to a telephone councillor 24/7
Access to a free 4-week programme of cognitive behavioural therapy (CBT) with a trained therapist mentor.
Network of internal qualified mental health first aiders are available to provide support to colleagues.
Financial:
A core level of life assurance with the option to increase cover via salary sacrifice and add your spouse/partner
Ability to access your earnings before payday via Dayforce Wallet.
Company pension scheme
Refer a friend scheme with a £250 bonus for every colleague recommended on passing their probation period.
Access to a flexible benefits platform including an annual flex pot allowance to spend on over 15 benefits of your choice.
Ability to give back. You can opt into donating money to charity to climate positive organisations directly from your salary.
Reward, Recognition and Culture :
Long Service Award paid on 5,10- and 15-years’ service
A reward and recognition hub to celebrate and reward colleagues and peers.
Consistent and engaging company events including company awards, competitions and charity fundraisers.
Budgets for department leaders to use for social and engagement events. Please visit out website to view more of our excellent work benefits!
All roles are subject to DBS and Financial checks, any offer made will be conditional until checks are completed to a satisfactory standard. Unfortunately, due to the length of training and complexity of the role, we can only accept applications from candidates who have at least one year remaining on their (Graduate/ Post study work) visa. Unfortunately, we are unable to provide visa sponsorships. At Acorn, we are committed to creating an inclusive and supportive work environment. We recognise that candidates may have specific needs and are happy to consider reasonable adjustments to the recruitment process and working environment to accommodate individual requirements. Whether it’s modifying equipment, adjusting working hours, or providing additional support, we aim to ensure all employees can perform at their best. If you require any reasonable adjustments, please let us know during the application or interview process, and we will work with you to ensure your needs are met.
