Technical GRC Analyst
Skills
Analytical SkillsBusiness AnalysisCSSEnglishGovernanceRisk ManagementAnd Compliance
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Experience as a Technical GRC Analyst or relevant experience from a related role such as internal audit, risk or security
- Knowledge of IT governance, risk, compliance frameworks, standards, and best practices
- Ability to facilitate compliance checks against the ISMS policies and processes, reporting on the level of adherence, identifying gaps and risks, and recommending improvement actions plans as required
- Previous experience using either Microsoft Excel or Power BI advantageous but not essential
- Collaborative attitude to build effective working relationships with various stakeholders across Railpen
- Ability to communicate technical concepts to non-technical audience, analytical and detail oriented approach to problem solving
- Ability to work using own initiative, courage to have a view on difficult decisions
- Passion for IT Security and willingness to learn and develop within a complex and exciting environment
Nice to have
- Collaborative attitude
- Communicate technical concepts clearly
- Analytical and detail oriented
- Initiative-driven
- Decision-making courage
- Passion for IT Security
- Willingness to learn and develop
Day to day
- Support maintenance of a formal governance and compliance framework aligned with the business strategy, objectives, and values, and support clear and consistent reporting of metrics and performance indicators
- Triage events from the Microsoft tool Purview and support internal and external audits that come in to the Technology, Security and Governance teams, ensuring timely and effective responses and remediation actions
- Support Technology Security and Governance Risk management and Third Party risk reporting
Hiring process
- Apply button or visit Careers Page by 5pm on Friday 2nd August 2024